428 matches found
CVE-2026-65965
ideon is a self-hosted visual workspace. Prior to version 0.9.4, several project mutation endpoints under /api/projects/id/ resolve the caller's project role but never enforce it, so a user who was granted only the read-only viewer role on a project can perform write operations on that project. T...
CVE-2026-65965
ideon is a self-hosted visual workspace. Prior to version 0.9.4, several project mutation endpoints under /api/projects/id/ resolve the caller's project role but never enforce it, so a user who was granted only the read-only viewer role on a project can perform write operations on that project. T...
EUVD-2026-124030
ideon is a self-hosted visual workspace. Prior to version 0.9.4, several project mutation endpoints under /api/projects/id/ resolve the caller's project role but never enforce it, so a user who was granted only the read-only viewer role on a project can perform write operations on that project. T...
CVE-2026-65965
The self-hosted visual workspace ideon is vulnerable to an authorization bypass in versions prior to 0.9.4 . While the application correctly identifies the caller's project role, it fails to enforce permissions on several project mutation endpoints under /api/projects/[id]/*. This allows a user w...
CVE-2026-65965 ideon: Read-only project viewers can wipe and rewrite the canvas and tamper with blocks/files via role-unchecked project endpoints
ideon is a self-hosted visual workspace. Prior to version 0.9.4, several project mutation endpoints under /api/projects/id/ resolve the caller's project role but never enforce it, so a user who was granted only the read-only viewer role on a project can perform write operations on that project. T...
PT-2026-145476
ideon is a self-hosted visual workspace. Prior to version 0.9.4, several project mutation endpoints under /api/projects/id/ resolve the caller's project role but never enforce it, so a user who was granted only the read-only viewer role on a project can perform write operations on that project. T...
CVE-2026-65965: 3xpyth0n ideon: ideon is a self-hosted visual workspace
ideon is a self-hosted visual workspace. Prior to version 0.9.4, several project mutation endpoints under /api/projects/id/ resolve the caller's project role but never enforce it, so a user who was granted only the read-only viewer role on a project can perform write operations on that project. T...
CVE-2026-118461 AIS PersonnelService client performs unauthenticated doctor-specific operations
The shared client accepts caller-controlled doctor identifiers for read and write operations without requiring authentication or authorization credentials...
CVE-2026-122006
The activestorage gem before 8.1.4.1 for Ruby on Rails, when ImageMagick attachment processing occurs, can allow server read and write operations e.g., reading secretkeybase because the ImageMagick analyzer runs when a file is attached, and there is not an ImageMagick security policy to block...
DEBIAN-CVE-2026-122006
The activestorage gem before 8.1.4.1 for Ruby on Rails, when ImageMagick attachment processing occurs, can allow server read and write operations e.g., reading secretkeybase because the ImageMagick analyzer runs when a file is attached, and there is not an ImageMagick security policy to block...
CVE-2026-122006
The activestorage gem before 8.1.4.1 for Ruby on Rails, when ImageMagick attachment processing occurs, can allow server read and write operations e.g., reading secretkeybase because the ImageMagick analyzer runs when a file is attached, and there is not an ImageMagick security policy to block...
CVE-2026-122006
The activestorage gem before 8.1.4.1 for Ruby on Rails, when ImageMagick attachment processing occurs, can allow server read and write operations e.g., reading secretkeybase because the ImageMagick analyzer runs when a file is attached, and there is not an ImageMagick security policy to block...
CVE-2026-122006
The activestorage gem (versions before 8.1.4.1 ) for Ruby on Rails is vulnerable to unauthorized server read and write operations during ImageMagick attachment processing. The root cause is the execution of the ImageMagick analyzer upon file attachment without a security policy to block unintende...
CVE-2026-122006
The activestorage gem before 8.1.4.1 for Ruby on Rails, when ImageMagick attachment processing occurs, can allow server read and write operations e.g., reading secretkeybase because the ImageMagick analyzer runs when a file is attached, and there is not an ImageMagick security policy to block...
EUVD-2026-116914
The activestorage gem before 8.1.4.1 for Ruby on Rails, when ImageMagick attachment processing occurs, can allow server read and write operations e.g., reading secretkeybase because the ImageMagick analyzer runs when a file is attached, and there is not an ImageMagick security policy to block...
CVE-2026-122006: rubyonrails Active Storage: The activestorage gem before 8.1.4.1 for Ruby on Rails, when ImageMagick attachment processing occurs, can allow server…
The activestorage gem before 8.1.4.1 for Ruby on Rails, when ImageMagick attachment processing occurs, can allow server read and write operations e.g., reading secretkeybase because the ImageMagick analyzer runs when a file is attached, and there is not an ImageMagick security policy to block...
PT-2026-136974
Name of the Vulnerable Software and Affected Versions activestorage versions prior to 8.0.5.2 activestorage versions prior to 8.1.4.1 Description An issue exists during ImageMagick attachment processing where the analyzer runs when a file is attached. Due to the absence of a restrictive ImageMagi...
russh: russh: Denial of service via zero maximum packet size
A flaw was found in russh. An authenticated remote client or a malicious server can cause a denial of service DoS by declaring a maximum packet size of zero during SSH channel negotiation. The affected system accepts this value, causing asynchronous write operations to hang indefinitely and...
CVE-2026-57202
A flaw was found in Asterisk. An authenticated remote attacker with read-only permissions to the Asterisk REST Interface ARI can bypass access controls by invoking the setChannelVar function. This vulnerability allows the attacker to execute restricted write operations, such as modifying arbitrar...
CVE-2026-18704
An issue in MongoDB Server's aggregation framework could allow an authenticated user with only read privileges to perform write operations against collections they should not be able to modify. This is due to an internal-use aggregation stage being reachable by external clients without an...