84487 matches found
CVE-2026-94393
MISP versions below 2.5.47 are affected by a cross-event authorization flaw in the editReport function. When creating or editing a report, MISP resolves an existing report by UUID without verifying that the report belongs to the same event. A user with editor access to at least one event can ther...
EUVD-2026-83911
When a user creates or edits a report inside an event, MISP can identify an existing report using its UUID without properly checking whether that report actually belongs to the same event. As a result, a user who has editing rights on one event could potentially move a report from another event...
CVE-2026-94374 MISP: IDOR via Client-Supplied Report ID in Module Results Processing Allows Reparenting and Overwriting of Other Events' Reports
MISP contains an insecure direct object reference vulnerability in the processModuleResultsData method of the Event model. When processing module results, the code iterates over EventReport entries supplied in the resolved data and saves each one. Unlike the adjacent attribute and object processi...
PT-2026-96218
Name of the Vulnerable Software and Affected Versions InvenTree versions prior to 1.4.0 Description Privileged staff users with permissions to author report or label templates can trigger the WeasyPrint report rendering process to retrieve resources selected by an attacker via HTTP, HTTPS, or loc...
CVE-2026-94393: Authorization Bypass Through User-Controlled Key
When a user creates or edits a report inside an event, MISP can identify an existing report using its UUID without properly checking whether that report actually belongs to the same event. As a result, a user who has editing rights on one event could potentially move a report from another event...
PT-2026-96104
Name of the Vulnerable Software and Affected Versions MISP versions prior to 2.5.47 Description An issue exists where the software identifies existing reports using a UUID without verifying if the report belongs to the same event. An attacker with editor access to at least one event who knows or...
PT-2026-96217
Name of the Vulnerable Software and Affected Versions InvenTree versions prior to 1.4.0 Description An authentication bypass occurs because the system fails to call the users.permissions.check user permission function to verify the caller's per-model view role before selecting objects by primary...
Linux Distros Unpatched Vulnerability : CVE-2026-90197
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HID: haptic: don't write an uninitialized value to unhandled usages filleffectbuf initializes value only for the four haptic usages handled by its switch, but...
CVE-2026-90197 HID: haptic: don't write an uninitialized value to unhandled usages
In the Linux kernel, the following vulnerability has been resolved: HID: haptic: don't write an uninitialized value to unhandled usages filleffectbuf initializes value only for the four haptic usages handled by its switch, but writes it to field-value for every usage. An unhandled usage can...
USN-8777-1: GNU Bison vulnerability
It was discovered that GNU Bison incorrectly handled grammar-defined configuration variables when generating HTML reports. An attacker could possibly use this issue to execute arbitrary code...
CVE-2026-54524: Improper Neutralization of Special Elements used in an SQL Command
Frappe HR is an open-source human resources management solution HRMS. Prior to 16.7.0, an authenticated user with the HR User role can inject SQL through filters in the Salary Payments Based on Payment Mode report. In...
WordPress Ni WooCommerce Sales Report plugin < 4.2.0 - Unauthenticated SQLi vulnerability
Unauthenticated SQLi vulnerability discovered by Erwan LR WPScan in WordPress Plugin Ni WooCommerce Sales Report versions 4.2.0...
CVE-2026-92137
Jenkins Robot Framework Plugin 6.2.2 and earlier does not check that the archive directory configured for Robot Framework report files is contained within the build directory on the Jenkins controller, allowing attackers with Item/Configure permission to create or replace arbitrary files on the...
CVE-2026-89999 HID: wacom: validate report length in wacom_intuos_pro2_bt_irq
In the Linux kernel, the following vulnerability has been resolved: HID: wacom: validate report length in wacomintuospro2btirq wacomintuospro2btirq receives the wire report length in len but never consults it before parsing. After the report-id gate it unconditionally calls wacomintuospro2btpen a...
CVE-2026-89999
CVE-2026-89999 is an out-of-bounds read in the Linux kernel's HID wacom driver , specifically in wacom_intuos_pro2_bt_irq(). The function receives the wire report length but never validates it before parsing; sub-parsers dereference wacom->data at fixed offsets (up to byte 285 for INTUOSP2_BT/...
CVE-2026-78474
The Ni WooCommerce Sales Report WordPress plugin before 4.2.0 does not have any authentication or authorisation checks on one of its report-printing routines, allowing unauthenticated users to retrieve WooCommerce order details and customer contact information, to target an individual order, and ...
CVE-2026-78472
The Ni WooCommerce Sales Report WordPress plugin before 4.2.0 does not sanitise and escape a parameter before using it in a SQL statement, allowing unauthenticated users to perform SQL injection attacks...
CVE-2026-78474 Ni WooCommerce Sales Report < 4.2.0 - Unauthenticated Order and Customer Data Disclosure via 'btn_print' Parameter
The Ni WooCommerce Sales Report WordPress plugin before 4.2.0 does not have any authentication or authorisation checks on one of its report-printing routines, allowing unauthenticated users to retrieve WooCommerce order details and customer contact information, to target an individual order, and ...
CVE-2026-78472
The Ni WooCommerce Sales Report WordPress plugin (versions before 4.2.0 ) is vulnerable to an unauthenticated SQL injection attack. The root cause is the failure to properly sanitize and escape a parameter—specifically the 'sort' parameter —before incorporating it into a SQL statement. This flaw ...
CVE-2026-78474
The Ni WooCommerce Sales Report WordPress plugin (versions before 4.2.0 ) is vulnerable to unauthenticated data disclosure. The root cause is a lack of authentication or authorisation checks on one of its report-printing routines, specifically involving the 'btn_print' parameter. This allows unau...