CVE-2026-62945

TREK is a collaborative travel planner. Prior to 3.1.3, TREK file upload, update, and link actions accept attacker-controlled reservationid, placeid, and assignmentid values without using findForeignLinkTarget to verify that the referenced object belongs to the file's trip. An authenticated user...

PT-2026-79196

TREK is a collaborative travel planner. Prior to 3.1.3, TREK file upload, update, and link actions accept attacker-controlled reservation id, place id, and assignment id values without using findForeignLinkTarget to verify that the referenced object belongs to the file's trip. An authenticated us...

CVE-2021-0851

In the Android 12 security release notes, CVE-2021-0851 is listed under System with Type: ID and Severity: High. The provided connected document does not include a description of the root cause, affected component, or explicit remediation for this CVE. The notes indicate that Android 12 fixes iss...

CVE-2019-4223

IBM OpenPages GRC Platform is affected by an information-disclosure vulnerability tracked as CVE-2019-4223. The issue affects IBM OpenPages GRC Platform version 8.0 and allows disclosure of detailed error messages in WebApplication and API responses. Remediation provided by IBM fixes are availabl...