966 matches found
EUVD-2026-97384
jshERP through 3.6 contains an authorization bypass vulnerability that allows authenticated users to read data from unassigned warehouses by supplying depotId or depotIds request parameters. When depotflag warehouse restriction is enabled, attackers can name arbitrary warehouse ids in endpoints...
cloudquery
CloudOps, sin el caos CloudQuery es un inventario de activos en la nube creado para equipos de plataforma. Sincroniza los metadatos de tu infraestructura en la nube a tu data warehouse, generando información y automatización. Unifica datos y proporciona contexto en AWS, Azure, GCP y más de 70...
SAP Knowledge Warehouse <=7.5.0 - Cross-Site Scripting
SAP Knowledge Warehouse 7.30, 7.31, 7.40, and 7.50 contain a reflected cross-site scripting vulnerability via the usage of one SAP KW component within a web browser. id: CVE-2021-42063 info: name: SAP Knowledge Warehouse =7.5.1 to mitigate the XSS vulnerability. reference: -...
cve-2021-25646
Apache Druid Remote Code Execution Vulnerability Summary Apache Druid has released a security update announcing a remote code execution vulnerability, numbered CVE-2021-25646. Due to the lack of authorization and authentication by default in Apache Druid, attackers can send specially crafted...
cloudquery cli-v6.42.3
CloudOps, without the chaos CloudQuery is a cloud asset inventory built for platform teams. Sync your cloud infrastructure metadata into your data warehouse, powering insights and automation. Unify data and provide context across AWS, Azure, GCP, and 70+ cloud and SaaS sources such as Wiz, Finout...
CVE-2026-91198
GrowthBook through 5.0.1 returns unredacted fact table definitions including raw warehouse SQL in payloads served by unauthenticated public report and experiment endpoints. Attackers with knowledge of a publicly shared report or experiment identifier can read internal data warehouse query text,...
CVE-2026-91198 GrowthBook through 5.0.1 Information Disclosure via Public Endpoints
GrowthBook through 5.0.1 returns unredacted fact table definitions including raw warehouse SQL in payloads served by unauthenticated public report and experiment endpoints. Attackers with knowledge of a publicly shared report or experiment identifier can read internal data warehouse query text,...
CVE-2026-91198 GrowthBook through 5.0.1 Information Disclosure via Public Endpoints
GrowthBook through 5.0.1 returns unredacted fact table definitions including raw warehouse SQL in payloads served by unauthenticated public report and experiment endpoints. Attackers with knowledge of a publicly shared report or experiment identifier can read internal data warehouse query text,...
CVE-2026-91198 GrowthBook through 5.0.1 Information Disclosure via Public Endpoints
GrowthBook through 5.0.1 returns unredacted fact table definitions including raw warehouse SQL in payloads served by unauthenticated public report and experiment endpoints. Attackers with knowledge of a publicly shared report or experiment identifier can read internal data warehouse query text,...
CVE-2026-91198
GrowthBook through version 5.0.1 is affected by an information disclosure vulnerability in its unauthenticated public report and experiment endpoints. The root cause is that fact table definitions , including raw warehouse SQL , are returned unredacted in the response payloads. An attacker who kn...
CVE-2026-91198: Insertion of Sensitive Information Into Sent Data
GrowthBook through 5.0.1 returns unredacted fact table definitions including raw warehouse SQL in payloads served by unauthenticated public report and experiment endpoints. Attackers with knowledge of a publicly shared report or experiment identifier can read internal data warehouse query text,...
PT-2026-91756
GrowthBook through 5.0.1 returns unredacted fact table definitions including raw warehouse SQL in payloads served by unauthenticated public report and experiment endpoints. Attackers with knowledge of a publicly shared report or experiment identifier can read internal data warehouse query text,...
The vulnerability of the module of the SAP Business Warehouse data management and analytics system allows a hacker to trigger a service failure.
The vulnerability of the module of the SAP Business Warehouse data management and analytics system is related to the absence of authentication procedures. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...
cloudquery cli-v6.42.2
CloudOps, without the chaos CloudQuery is a cloud asset inventory built for platform teams. Sync your cloud infrastructure metadata into your data warehouse, powering insights and automation. Unify data and provide context across AWS, Azure, GCP, and 70+ cloud and SaaS sources such as Wiz, Finout...
cloudquery plugins-destination-snowflake-v5.2.14
CloudOps, without the chaos CloudQuery is a cloud asset inventory built for platform teams. Sync your cloud infrastructure metadata into your data warehouse, powering insights and automation. Unify data and provide context across AWS, Azure, GCP, and 70+ cloud and SaaS sources such as Wiz, Finout...
CVE-2026-74018
Subscriber Arbitrary File Upload in Warehouse Cargo = 2.6.9 versions...
EUVD-2026-63318
Subscriber Arbitrary File Upload in Warehouse Cargo = 2.6.9 versions...
CVE-2026-74018
CVE-2026-74018 is an Arbitrary File Upload vulnerability in the WordPress Theme Warehouse Cargo (versions ≤ 2.6.9 ). The vulnerability is accessible to users with Subscriber privileges and carries a CVSS 3.1 score of 9.9 (Critical) , with a vector of AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H, indicatin...
CVE-2026-74018 WordPress Warehouse Cargo theme <= 2.6.9 - Arbitrary File Upload vulnerability
Subscriber Arbitrary File Upload in Warehouse Cargo = 2.6.9 versions...
WordPress Warehouse Cargo theme <= 2.7.0 - Arbitrary File Upload vulnerability
Arbitrary File Upload vulnerability discovered by Denver Jackson in WordPress Theme Warehouse Cargo versions = 2.7.0...