Rezultati pretraživanja za 'Od datuma: 03.11.2024.'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2026-109644 | 6.5 | Frappe ERPNext before 15.119.0 and 16.x before 16.31.0 contains a missing authorization vulnerability in certain endpoints that fail to enforce proper authorization checks on valuation data. Authenticated low-privileged users can query these endpoint | 2026-10-12 23:17:30 | 2026-10-12 23:17:30 |
| CVE-2026-109643 | 6.5 | Frappe ERPNext before 15.111.0 and 16.x before 16.22.0 contains a missing authorization vulnerability in certain project-related endpoints that fail to enforce permission checks. Authenticated low-privileged users can call these endpoints directly to | 2026-10-12 23:17:30 | 2026-10-12 23:17:30 |
| CVE-2026-109642 | 4.3 | Frappe ERPNext before 15.110.0 and 16.x before 16.21.0 contains a missing authorization vulnerability in which certain endpoints fail to enforce proper authorization checks. Authenticated users can query these endpoints to read data beyond what their | 2026-10-12 23:17:30 | 2026-10-12 23:17:29 |
| CVE-2026-109641 | 6.5 | Frappe ERPNext before 15.110.0 and 16.x before 16.21.0 contains a missing authorization vulnerability in certain endpoints that fail to enforce authorization checks. Unauthenticated remote attackers can call these endpoints to create records and enum | 2026-10-12 23:17:29 | 2026-10-12 23:17:29 |
| CVE-2026-109640 | 8.1 | Frappe ERPNext before 16.22.0 contains a missing authorization vulnerability that allows authenticated users to modify records by invoking endpoints lacking proper authorization checks. Attackers can call these endpoints to perform operations on reco | 2026-10-12 23:17:29 | 2026-10-12 23:17:29 |
| CVE-2026-109639 | 6.5 | Frappe ERPNext before 15.102.0 and 16.x before 16.8.0 contains an SQL injection vulnerability in some endpoints due to missing input validation, allowing manipulation of database queries. Authenticated attackers with low privileges can send specially | 2026-10-12 23:17:29 | 2026-10-12 23:17:29 |
| CVE-2026-109638 | 6.5 | Frappe ERPNext before 15.110.0 and 16.x before 16.21.0 contains a SQL injection vulnerability in some endpoints caused by missing input validation. Authenticated attackers can send specially crafted requests to these endpoints to manipulate database | 2026-10-12 23:17:29 | 2026-10-12 23:17:29 |
| CVE-2026-109637 | 6.5 | Frappe ERPNext before 16.14.0 contains a missing authorization vulnerability that allows authenticated users to modify master data beyond their permitted role. Attackers can send requests to certain endpoints lacking proper authorization checks to ma | 2026-10-12 23:17:29 | 2026-10-12 23:17:29 |
| CVE-2026-109636 | 6.5 | Frappe ERPNext before 15.115.0 and 16.x before 16.26.0 contains a missing authorization vulnerability because certain endpoints fail to enforce proper permission checks. Authenticated attackers with low-privileged accounts can call these endpoints to | 2026-10-12 23:17:29 | 2026-10-12 23:17:28 |
| CVE-2026-109635 | 4.3 | Frappe ERPNext before 15.105.0 and 16.x before 16.15.0 contains a missing authorization vulnerability in certain document creation endpoints that fail to verify that the requesting portal user belongs to the target party. Authenticated portal users c | 2026-10-12 23:17:28 | 2026-10-12 23:17:28 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/13471
Zapisa po stranici: