EUVD-2026-98006

Frappe ERPNext before 15.120.0 and 16.x before 16.33.0 contains a stored cross-site scripting vulnerability in a report view that interpolates stored record names into markup without escaping. Authenticated users able to create records can store crafted record names that execute script in the...

EUVD-2026-98001

Frappe ERPNext before 15.112.0 and 16.x before 16.23.0 contains a stored cross-site scripting vulnerability because a tool view interpolates stored record names into markup without escaping. An authenticated user able to create such records can give them malicious names, executing script in the...

EUVD-2023-60717

Frappe framework before 13.32.0 uses weak authentication for print view access, because the print view key can be derived from data exposed by other whitelisted API endpoints. Attackers can generate a valid key to view documents through the print view without proper permissions...

UBUNTU-CVE-2026-107823

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the MariaDB view FRM parser did not safely encode embedded newline characters in a username. An account with CREATE USER and CREATE VIEW WITH GRANT OPTION could...

CVE-2023-54411

Frappe framework before 13.32.0 uses weak authentication for print view access, because the print view key can be derived from data exposed by other whitelisted API endpoints. Attackers can generate a valid key to view documents through the print view without proper permissions...

CVE-2026-109612

Frappe ERPNext versions before 15.120.0 and 16.x before 16.33.0 are vulnerable to a Stored Cross-Site Scripting (XSS) vulnerability in the report view. The root cause is the interpolation of stored record names into markup without proper escaping. Authenticated users with record creation permissi...

CVE-2026-109612 Frappe ERPNext before 15.120.0 Stored XSS via Report View

Frappe ERPNext before 15.120.0 and 16.x before 16.33.0 contains a stored cross-site scripting vulnerability in a report view that interpolates stored record names into markup without escaping. Authenticated users able to create records can store crafted record names that execute script in the...

CVE-2026-109604

Frappe ERPNext versions before 15.112.0 and 16.x before 16.23.0 are vulnerable to a stored cross-site scripting (XSS) vulnerability. The issue stems from a tool view that interpolates stored record names into markup without proper escaping. An authenticated user with permissions to create records...

CVE-2026-109604 ERPNext before 15.112.0 Stored XSS via Tool View Record Names

Frappe ERPNext before 15.112.0 and 16.x before 16.23.0 contains a stored cross-site scripting vulnerability because a tool view interpolates stored record names into markup without escaping. An authenticated user able to create such records can give them malicious names, executing script in the...

CVE-2023-54411 Frappe before 13.32.0 Weak Authentication via Print View Key

Frappe framework before 13.32.0 uses weak authentication for print view access, because the print view key can be derived from data exposed by other whitelisted API endpoints. Attackers can generate a valid key to view documents through the print view without proper permissions...

CVE-2023-54411 Frappe before 13.32.0 Weak Authentication via Print View Key

Frappe framework before 13.32.0 uses weak authentication for print view access, because the print view key can be derived from data exposed by other whitelisted API endpoints. Attackers can generate a valid key to view documents through the print view without proper permissions...

CVE-2023-54411

The Frappe framework versions prior to 13.32.0 are vulnerable to weak authentication regarding print view access. The root cause is that the print view key can be derived from data exposed through other whitelisted API endpoints. This allows an attacker to generate a valid key to view documents w...

CVE-2026-109377

ERPNext 9.0.0 through 16.50.0 contains a missing authorization vulnerability that allows authenticated users to view stock quantities via whitelisted batch methods. Attackers, including customer portal users, can call getbatchqty, getbatchesbyoldest or getposreservedbatchqty to list every item...

CVE-2026-109376

ERPNext 15.55.0 through 16.50.0 contains an incorrect authorization vulnerability in the gettimesheethtml method that lets authenticated portal users view project Timesheets. The method only checks Project read access, ignoring hidetimesheets and project membership, so attackers can retrieve...

CVE-2026-109377 ERPNext 9.0.0 through 16.50.0 Missing Authorization in Batch Lookup Methods

ERPNext 9.0.0 through 16.50.0 contains a missing authorization vulnerability that allows authenticated users to view stock quantities via whitelisted batch methods. Attackers, including customer portal users, can call getbatchqty, getbatchesbyoldest or getposreservedbatchqty to list every item...

CVE-2026-109194

A flaw was found in Red Hat Quay. The build trigger management application programming interface API fails to verify whether a requested trigger belongs to the specified repository. An authenticated user with administrative access to any repository can view, modify, or permanently delete build...

CVE-2019-5418

CVE-2019-5418: Ruby on Rails Path Traversal & Arbitrary File Read This project is an environment for practicing and reproducing the local file inclusion vulnerability CVE-2019-5418 in Ruby on Rails. This vulnerability allows reading arbitrary files on the server through path traversal via the...

CVE-2026-109194 Quay: build trigger uuid idor in quay api

A flaw was found in Red Hat Quay. The build trigger management application programming interface API fails to verify whether a requested trigger belongs to the specified repository. An authenticated user with administrative access to any repository can view, modify, or permanently delete build...

EUVD-2026-97498

A flaw was found in Red Hat Quay. The build trigger management application programming interface API fails to verify whether a requested trigger belongs to the specified repository. An authenticated user with administrative access to any repository can view, modify, or permanently delete build...

CVE-2026-109194

A flaw in Red Hat Quay allows an authenticated user with administrative access to any repository to perform an Insecure Direct Object Reference (IDOR) attack. The build trigger management API fails to verify if a requested trigger belongs to the specified repository. By knowing the universally un...