4 matches found
CVE-2026-24440
Shenzhen Tenda W30E V2 firmware versions up to and including V16.01.0.195037 allow account passwords to be changed through the maintenance interface without requiring verification of the existing password. This enables unauthorized password changes when access to the affected endpoint is obtained...
Disabled permissions can be granted by folder-auth
folder-auth 217.vd5b18537403e and earlier does not verify that permissions configured to be granted are enabled. This may allow users formerly granted typically optional permissions, like Overall/Manage to access functionality they're no longer entitled to. As of publication of this advisory, the...
The vulnerability of the `make_task` function in the software for managing medical organizations, OpenEMR, allows attackers to carry out SQL injection attacks.
The vulnerability of the maketask function in the software for managing medical organizations like OpenEMR is related to the lack of verification of the reliability of XML objects’ sequences. Exploiting this vulnerability allows a malicious actor to carry out attacks based on SQL injections...
