Lucene search
K

4 matches found

CVE
CVE
added yesterday5 views

CVE-2026-44208

CVE-2026-44208 affects the Frappe framework (full-stack web app). A lack of input/permission validations in the submit_discussion() endpoint allows unauthorized access to resources (IDOR) in affected builds. The issue is fixed in versions 15.107.0 and 16.17.0; prior releases were vulnerable. No e...

6.9CVSS5.2AI score0.00029EPSS
Exploits0References1
Cvelist
Cvelist
added yesterday9 views

CVE-2026-44208 Frappe: IDOR in `submit_discussion()`

Frappe is a full-stack web application framework. Prior to versions 15.107.0 and 16.17.0, lack of validations in the "submitdiscussion" endpoint allows for unauthorized access to resources. This issue has been patched in versions 15.107.0 and 16.17.0...

6.9CVSS0.00029EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added yesterday5 views

PT-2026-48905

Frappe is a full-stack web application framework. Prior to versions 15.107.0 and 16.17.0, a lack of permission checks in these endpoints allowed unauthorized access to resources. This issue has been patched in versions 15.107.0 and 16.17.0...

6.9CVSS5.2AI score0.00029EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2021/07/23 12:0 a.m.11 views

Asterisk DoS Vulnerability (AST-2021-007)

Asterisk is prone to a denial of service DoS vulnerability in the PJSIP channel driver. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

6.5CVSS6.4AI score0.0019EPSS
Exploits1References1
Rows per page
Query Builder