1564 matches found
CVE-2026-65013-BOLA-IDOR
CVE-2026-65013-BOLA-IDOR Reproducible PoC ofBOLA / IDOR in the tRPC API of Onlook CVE-2026-65013. Any authenticated user can read, modify, and delete projects, members, and AI history of other users just by passing their UUIDs to the tRPC procedures versions = 0.2.32. | ---|--- CVE| CVE-2026-6501...
CVE-2026-128343
exceljs through 4.4.0 contains a denial of service vulnerability that allows attackers to block the event loop by supplying unbounded row r attributes parsed in row-xform.js. Attackers can craft an XLSX file with a row numbered far beyond Excel's limit, making getSheetValues, workbook writes and...
CVE-2026-126275
NocoDB before 2026.09.0 contains an insecure direct object reference vulnerability that allows authenticated users to read cross-base row comments by supplying only model and row ids. Attackers with a Viewer or Creator role on an unrelated base can read private comments and author emails, or plan...
EUVD-2026-125246
NocoDB before 2026.09.0 contains an insecure direct object reference vulnerability that allows authenticated users to read cross-base row comments by supplying only model and row ids. Attackers with a Viewer or Creator role on an unrelated base can read private comments and author emails, or plan...
CVE-2026-126275 NocoDB before 2026.09.0 IDOR in Row Comment Operations
NocoDB before 2026.09.0 contains an insecure direct object reference vulnerability that allows authenticated users to read cross-base row comments by supplying only model and row ids. Attackers with a Viewer or Creator role on an unrelated base can read private comments and author emails, or plan...
CVE-2026-126275 NocoDB before 2026.09.0 IDOR in Row Comment Operations
NocoDB before 2026.09.0 contains an insecure direct object reference vulnerability that allows authenticated users to read cross-base row comments by supplying only model and row ids. Attackers with a Viewer or Creator role on an unrelated base can read private comments and author emails, or plan...
CVE-2026-126275
NocoDB versions before 2026.09.0 are susceptible to an Insecure Direct Object Reference (IDOR) vulnerability within row comment operations. This flaw allows authenticated users to access row comments from unrelated bases by providing only the necessary model and row IDs . Specifically, attackers ...
CVE-2026-128343
The exceljs library versions through 4.4.0 is vulnerable to a Denial of Service (DoS) attack. The root cause is the lack of bounds checking on the row r attributes parsed within row-xform.js . An attacker can craft a malicious XLSX file containing row numbers significantly exceeding Excel's limit...
CVE-2026-128343 ExcelJS through 4.4.0 Denial of Service via Oversized Row Number
exceljs through 4.4.0 contains a denial of service vulnerability that allows attackers to block the event loop by supplying unbounded row r attributes parsed in row-xform.js. Attackers can craft an XLSX file with a row numbered far beyond Excel's limit, making getSheetValues, workbook writes and...
CVE-2026-128343 ExcelJS through 4.4.0 Denial of Service via Oversized Row Number
exceljs through 4.4.0 contains a denial of service vulnerability that allows attackers to block the event loop by supplying unbounded row r attributes parsed in row-xform.js. Attackers can craft an XLSX file with a row numbered far beyond Excel's limit, making getSheetValues, workbook writes and...
EUVD-2026-125156
exceljs through 4.4.0 contains a denial of service vulnerability that allows attackers to block the event loop by supplying unbounded row r attributes parsed in row-xform.js. Attackers can craft an XLSX file with a row numbered far beyond Excel's limit, making getSheetValues, workbook writes and...
CVE-2026-128348 ExcelJS through 4.4.0 Formula Injection via Table Totals Row Column Names
ExcelJS through 4.4.0 contains a formula injection vulnerability in the totals row formula getter in lib/doc/table.js that fails to escape , , and ' characters in structured reference column names. Attackers can supply column names containing via untrusted input like imported CSV headers to injec...
PT-2026-146606
NocoDB before 2026.09.0 contains an insecure direct object reference vulnerability that allows authenticated users to read cross-base row comments by supplying only model and row ids. Attackers with a Viewer or Creator role on an unrelated base can read private comments and author emails, or plan...
postgresql: PostgreSQL: Row-level security bypass via INSERT ON CONFLICT DO UPDATE
A flaw was found in PostgreSQL. An authenticated database user with table modification privileges can bypass Row-Level Security RLS policies, leading to unauthorized information disclosure. By executing iterated INSERT ... ON CONFLICT DO UPDATE statements, an attacker can read protected rows that...
postgresql: postgresql: row-level security bypass via DROP OWNED
A flaw was found in PostgreSQL. An authenticated database user can execute the DROP OWNED command to improperly remove their role from restrictive Row-Level Security RLS policies. By bypassing these access controls, the user can view or modify table rows that were intended to be restricted...
CVE-2026-120154
A flaw was found in PostgreSQL. An authenticated database user with table modification privileges can bypass Row-Level Security RLS policies, leading to unauthorized information disclosure. By executing iterated INSERT ... ON CONFLICT DO UPDATE statements, an attacker can read protected rows that...
CVE-2026-116311
A flaw was found in PostgreSQL. An authenticated database user can execute the DROP OWNED command to improperly remove their role from restrictive Row-Level Security RLS policies. By bypassing these access controls, the user can view or modify table rows that were intended to be restricted...
DEBIAN-CVE-2026-120154
Improper protection in PostgreSQL INSERT ... ON CONFLICT allows an attacker having INSERT, UPDATE, and applicable SELECT privileges on the table to read every row despite row security policies, via iterated INSERT ... ON CONFLICT DO UPDATE. Unlike CVE-2026-16237, this does not facilitate improper...
ALPINE-CVE-2026-120154
Improper protection in PostgreSQL INSERT ... ON CONFLICT allows an attacker having INSERT, UPDATE, and applicable SELECT privileges on the table to read every row despite row security policies, via iterated INSERT ... ON CONFLICT DO UPDATE. Unlike CVE-2026-16237, this does not facilitate improper...
CVE-2026-120154
Improper protection in PostgreSQL INSERT ... ON CONFLICT allows an attacker having INSERT, UPDATE, and applicable SELECT privileges on the table to read every row despite row security policies, via iterated INSERT ... ON CONFLICT DO UPDATE. Unlike CVE-2026-16237, this does not facilitate improper...