CVE-2026-40889 Frappe HR has Improper Access Control on Files

Frappe HR is an open-source human resources management solution HRMS. Prior to versions 15.58.2 and 16.4.2, authenticated users can access unauthorized files by exploiting certain api endpoint. Versions 15.58.2 and 16.4.2 contain a patch. No known workarounds are available...

Debian Security Advisory DSA 3776-1 (chromium-browser - security update)

Several vulnerabilities have been discovered in the chromium web browser. CVE-2017-5006 Mariusz Mlynski discovered a cross-site scripting issue. CVE-2017-5007 Mariusz Mlynski discovered another cross-site scripting issue. CVE-2017-5008 Mariusz Mlynski discovered a third cross-site scripting issue...

python security vulnerabilities

json information leak, CGIHTTPServer unauthroized files access and code execution, lz4 integer overflow...

Siemens Automation License Manager multiple security vulnerabilities

Code execution, unauthorized files access, DoS...

WinTFTP Server Pro 3.1 Directory Traversal

/ / / / / // | / // \ | / / / / / /// / / / / / / / // / / / |/ / // / ,tftp Transfers files to and from a remote computer running the TFTP service. TFTP -i host GET | PUT source destination -i Specifies binary image transfer mode also called octet. In binary image mode the file is moved...

Windows print spooler multiple security vulnerabilities

Buffer overflow, unauthorized files access, privilege escalation with dynamic library loading...

Axis 70U Network Document Server multiple security vulnerabilities

Privilege escalation, unauthorized files acccess, crossite scripting...

QNX inputtrap unauthorized files access

-e flag allows to specify input file, file ownership and privileges are not checked...