Lucene search
+L

69 matches found

Mend
Mend
•added 2026/09/16 8:46 p.m.•9 views

CVE-2026-75513

Marten is a .NET Transactional Document DB and Event Store on PostgreSQL. From version 7.0.0 until 9.13.0, several Marten LINQ and tenant-management paths interpolate runtime, potentially attacker-controlled strings into single-quoted SQL literals without escaping or parameterization. The primary...

9.1CVSS5.9AI score0.00468EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2026/09/16 12:00 a.m.•14 views

PT-2026-94026

Name of the Vulnerable Software and Affected Versions Marten versions 7.0.0 through 9.12.0 Description Several paths within the LINQ provider and tenant-management internals interpolate runtime strings into single-quoted SQL literals without proper escaping or parameterization. This allows an...

9.1CVSS6.2AI score0.00468EPSS
SaveExploits0References10
NVD
NVD
•added 2026/08/31 6:17 p.m.•16 views

CVE-2026-82817

A vulnerability was found in dibo-software diboot 3.8.0. Affected by this issue is some unknown functionality of the file /admin/ of the component Tenant Administrator Management API. Performing a manipulation of the argument tenantId results in improper access controls. The attack may be initiat...

6.5CVSS0.00347EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/08/31 6:00 p.m.•17 views

EUVD-2026-68717

A vulnerability was found in dibo-software diboot 3.8.0. Affected by this issue is some unknown functionality of the file /admin/ of the component Tenant Administrator Management API. Performing a manipulation of the argument tenantId results in improper access controls. The attack may be initiat...

6.5CVSS6.2AI score0.00347EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/08/31 12:00 a.m.•20 views

PT-2026-83949

A vulnerability was found in dibo-software diboot 3.8.0. Affected by this issue is some unknown functionality of the file /admin/ of the component Tenant Administrator Management API. Performing a manipulation of the argument tenantId results in improper access controls. The attack may be initiat...

6.5CVSS6.2AI score0.00347EPSS
SaveExploits0References6
SUSE CVE
SUSE CVE
•added 2026/03/25 12:25 a.m.•22 views

SUSE CVE-2026-30855

WeKnora is an LLM-powered framework designed for deep document understanding and semantic retrieval. Prior to version 0.3.2, an authorization bypass in tenant management endpoints of WeKnora application allows any authenticated user to read, modify, or delete any tenant by ID. Since account...

8.8CVSS7.8AI score0.00487EPSS
SaveExploits1References3
osv_go
osv_go
•added 2026/03/10 6:28 p.m.•31 views

GO-2026-4642 WeKnora Vulnerable to Broken Access Control in Tenant Management in github.com/Tencent/WeKnora

WeKnora Vulnerable to Broken Access Control in Tenant Management in github.com/Tencent/WeKnora...

8.8CVSS8.2AI score0.00487EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2026/03/09 8:02 a.m.•16 views

CVE-2026-30855

WeKnora is an LLM-powered framework designed for deep document understanding and semantic retrieval. Prior to version 0.3.2, an authorization bypass in tenant management endpoints of WeKnora application allows any authenticated user to read, modify, or delete any tenant by ID. Since account...

8.8CVSS7.9AI score0.00487EPSS
SaveExploits1References1
NVD
NVD
•added 2026/03/07 5:15 p.m.•20 views

CVE-2026-30855

WeKnora is an LLM-powered framework designed for deep document understanding and semantic retrieval. Prior to version 0.3.2, an authorization bypass in tenant management endpoints of WeKnora application allows any authenticated user to read, modify, or delete any tenant by ID. Since account...

8.8CVSS0.00487EPSS
SaveExploits1References1
CVE
CVE
•added 2026/03/07 4:31 p.m.•37 views

CVE-2026-30855

CVE-2026-30855 (WeKnora) : WeKnora is vulnerable prior to version 0.3.2 due to an authorization bypass in tenant-management endpoints, allowing an authenticated user to read/modify/delete tenants by ID. Because account registration is public, an unauthenticated attacker can register a new account...

8.8CVSS7.8AI score0.00487EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2026/03/07 4:31 p.m.•48 views

CVE-2026-30855 WeKnora: Broken Access Control in Tenant Management

WeKnora is an LLM-powered framework designed for deep document understanding and semantic retrieval. Prior to version 0.3.2, an authorization bypass in tenant management endpoints of WeKnora application allows any authenticated user to read, modify, or delete any tenant by ID. Since account...

8.8CVSS0.00487EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2026/03/07 4:31 p.m.•14 views

CVE-2026-30855

WeKnora is an LLM-powered framework designed for deep document understanding and semantic retrieval. Prior to version 0.3.2, an authorization bypass in tenant management endpoints of WeKnora application allows any authenticated user to read, modify, or delete any tenant by ID. Since account...

8.8CVSS7.9AI score0.00487EPSS
SaveExploits1References2Affected Software1
Vulnrichment
Vulnrichment
•added 2026/03/07 4:31 p.m.•6 views

CVE-2026-30855 WeKnora: Broken Access Control in Tenant Management

WeKnora is an LLM-powered framework designed for deep document understanding and semantic retrieval. Prior to version 0.3.2, an authorization bypass in tenant management endpoints of WeKnora application allows any authenticated user to read, modify, or delete any tenant by ID. Since account...

8.8CVSS7.8AI score0.00487EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2026/03/07 4:31 p.m.•22 views

CVE-2026-30855 WeKnora: Broken Access Control in Tenant Management

WeKnora is an LLM-powered framework designed for deep document understanding and semantic retrieval. Prior to version 0.3.2, an authorization bypass in tenant management endpoints of WeKnora application allows any authenticated user to read, modify, or delete any tenant by ID. Since account...

8.8CVSS7.8AI score0.00487EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/07 12:00 a.m.•9 views

CVE-2026-30855: Improper Access Control

WeKnora is an LLM-powered framework designed for deep document understanding and semantic retrieval. Prior to version 0.3.2, an authorization bypass in tenant management endpoints of WeKnora application allows any authenticated user to read, modify, or delete any tenant by ID. Since account...

8.8CVSS7.9AI score0.00487EPSS
SaveExploits1References1
osv_ghsa
osv_ghsa
•added 2026/03/06 11:53 p.m.•28 views

GHSA-CCJ6-79J6-CQ5Q WeKnora Vulnerable to Broken Access Control in Tenant Management

Summary An authorization bypass in tenant management endpoints of WeKnora application allows any authenticated user to read, modify, or delete any tenant by ID. Since account registration is open to the public, this vulnerability allows any unauthenticated attacker to register an account and...

9.8CVSS8AI score0.00487EPSS
SaveExploits1References3
Github Security Blog
Github Security Blog
•added 2026/03/06 11:53 p.m.•24 views

WeKnora Vulnerable to Broken Access Control in Tenant Management

Summary An authorization bypass in tenant management endpoints of WeKnora application allows any authenticated user to read, modify, or delete any tenant by ID. Since account registration is open to the public, this vulnerability allows any unauthenticated attacker to register an account and...

8.8CVSS8AI score0.00487EPSS
SaveExploits1References3Affected Software1
Wiz blog
Wiz blog
•added 2026/03/06 1:00 p.m.•55 views

Introducing Wiz Tenant Manager: Multi-Tenant Management for Federated Organizations

Experience full Wiz security with zero friction, managing multiple tenants in a single console...

5.8AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/03/06 12:00 a.m.•16 views

PT-2026-23798

Name of the Vulnerable Software and Affected Versions WeKnora versions prior to 0.3.2 Description WeKnora is a framework for deep document understanding and semantic retrieval. A flaw exists in the tenant management endpoints that allows authenticated users to read, modify, or delete any tenant b...

9.8CVSS7.9AI score0.00487EPSS
SaveExploits1
EUVD
EUVD
•added 2025/12/19 3:31 a.m.•31 views

EUVD-2025-204433

A security flaw has been discovered in JeecgBoot up to 3.9.0. The affected element is an unknown function of the file jeecg-boot/jeecg-module-system/jeecg-system-biz/src/main/java/org/jeecg/modules/system/controller/SysTenantController.java of the component Multi-Tenant Management Module...

6.5CVSS5.9AI score0.00347EPSS
SaveExploits1References6
Rows per page
Query Builder