[ Latest · 16,702 CVEs ]
Newly published CVEs.
Every CVE the NVD lists as published in the last 30 days, newest first. Rows marked green on the left are on the matters-most list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-21135 | 12 Oct 2026 | CVSS 5.9 | Samsung Mobile Samsung InternetImproper access control in Samsung Internet prior to version 30.0.5.6 allows local attackers to access sensitive information. | |
| CVE-2026-21136 | 12 Oct 2026 | CVSS 6.8 | Samsung Mobile Smart SwitchImproper authorization in Smart Switch prior to version 3.7.73 allows physical attackers to invoke application restore process. | |
| CVE-2026-21137 | 12 Oct 2026 | CVSS 5.1 | Samsung Mobile Smart SwitchPath traversal in Smart Switch prior to version 3.7.73 allows physical attackers to access files with Smart Switch privilege. | |
| CVE-2026-21138 | 12 Oct 2026 | CVSS 6.9 | Samsung Mobile Smart SwitchInsufficient verification of data authenticity in Smart Switch prior to version 3.7.73 allows physical attackers to install arbitrary applications. | |
| CVE-2026-21139 | 12 Oct 2026 | CVSS 7.3 | Samsung Mobile Samsung Continuity Service for windowsImproper access control in Samsung Continuity Service for windows prior to version 4.6.1217.0 allows adjacent attackers to manipulate the connected… | |
| CVE-2026-21125 | 12 Oct 2026 | CVSS 8.6 | Samsung Mobile DevicesImproper input validation in parsing sheifd in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1 allows local attackers to… | |
| CVE-2026-21126 | 12 Oct 2026 | CVSS 6.9 | Samsung Mobile DevicesImproper input validation in getting cover image in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1 allows local attackers to write… | |
| CVE-2026-21127 | 12 Oct 2026 | CVSS 6.9 | Samsung Mobile Samsung AccountImproper export of android application components in Samsung Account prior to version 15.7.01.1 allows local attackers to access sensitive data. | |
| CVE-2026-21128 | 12 Oct 2026 | CVSS 5.1 | Samsung Mobile Samsung CheckoutImproper input validation in CreditCardRegisterActivity of Samsung Checkout prior to version 5.1.03.1 allows local attackers to launch arbitrary… | |
| CVE-2026-21129 | 12 Oct 2026 | CVSS 5.1 | Samsung Mobile Samsung CheckoutImproper input validation in GuestCreditCardRegisterActivity of Samsung Checkout prior to version 5.1.03.1 allows local attackers to launch an… | |
| CVE-2026-21130 | 12 Oct 2026 | CVSS 5.1 | Samsung Mobile Samsung CheckoutImproper input validation in CreditCardRetrieveActivity of Samsung Checkout prior to version 5.1.03.1 allows local attackers to launch an arbitrary… | |
| CVE-2026-21131 | 12 Oct 2026 | CVSS 2.1 | Samsung Mobile Samsung FlowIncorrect default permission in Samsung Flow prior to version 4.9.22.4 allows local attackers to launch an arbitrary activity with Samsung Flow… | |
| CVE-2026-21132 | 12 Oct 2026 | CVSS 6.0 | Samsung Mobile Samsung InternetImproper input validation in Samsung Internet prior to version 30.0.5.24 allows remote attackers to inject arbitrary script. User interaction is… | |
| CVE-2026-21116 | 12 Oct 2026 | CVSS 5.1 | Samsung Mobile DevicesOut-of-bounds write in libsmkvextractor.so prior to SMR Oct-2026 Release 1 allows local attackers to write out-of-bounds memory. | |
| CVE-2026-21117 | 12 Oct 2026 | CVSS 5.1 | Samsung Mobile DevicesImproper access control in CocktailBarService prior to SMR Oct-2026 Release 1 allows local attackers to access sensitive information. | |
| CVE-2026-21118 | 12 Oct 2026 | CVSS 6.9 | Samsung Mobile DevicesImproper access control in DownloadProvider prior to SMR Oct-2026 Release 1 allows local attackers to access files in scoped storage. | |
| CVE-2026-21119 | 12 Oct 2026 | CVSS 4.8 | Samsung Mobile DevicesOut-of-bounds read and write in lib_sag_ai_sound_sep_v2.00.so prior to SMR Oct-2026 Release 1 allows local attackers to read and write out-of-bounds… | |
| CVE-2026-21120 | 12 Oct 2026 | CVSS 8.9 | Samsung Mobile DevicesUse after free in WSM service prior to SMR Oct-2026 Release 1 allows local attackers to potentially execute arbitrary code with system privilege. | |
| CVE-2026-21121 | 12 Oct 2026 | CVSS 6.9 | Samsung Mobile DevicesImproper handling of insufficient permission in CmcCore prior to SMR Oct-2026 Release 1 allows local attackers to use the privileged APIs. | |
| CVE-2026-21122 | 12 Oct 2026 | CVSS 7.0 | Samsung Mobile DevicesOut-of-bounds write in libsamsungtts.so prior to SMR Oct-2026 Release 1 allows local attackers to execute arbitrary code. | |
| CVE-2026-21123 | 12 Oct 2026 | CVSS 6.7 | Samsung Mobile DevicesImproper privilege management in Locksettings prior to SMR Oct-2026 Release 1 allows local privileged attackers with root privilege to access data of… | |
| CVE-2026-21124 | 12 Oct 2026 | CVSS 8.6 | Samsung Mobile DevicesImproper input validation in getting cover image in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1 allows local attackers to… | |
| CVE-2026-108799 | 12 Oct 2026 | CVSS 7.3 | jackq XCMSA vulnerability was determined in jackq XCMS up to 3fab5342cc509945a7ce1b8ec39d19f701b89261. Impacted is the function… | |
| CVE-2026-108800 | 12 Oct 2026 | CVSS 4.3 | yangzongzhuan RuoYiA vulnerability was identified in yangzongzhuan RuoYi 4.8.3. The affected element is an unknown function. Such manipulation leads to cross-site… | |
| CVE-2026-108801 | 12 Oct 2026 | CVSS 6.3 | prasathmani TinyFileManagerA security flaw has been discovered in prasathmani TinyFileManager up to 2.6. The impacted element is the function move_uploaded_file of the file… | |
| CVE-2026-21114 | 12 Oct 2026 | CVSS 7.0 | Samsung Mobile DevicesOut-of-bounds write in libsmkvextractor.so prior to SMR Oct-2026 Release 1 allows local attackers to execute arbitrary code. | |
| CVE-2026-21115 | 12 Oct 2026 | CVSS 5.1 | Samsung Mobile DevicesOut-of-bounds write in libcodec2-sec-flacdec.so prior to SMR Oct-2026 Release 1 allows local attackers to write out-of-bounds memory. | |
| CVE-2026-108796 | 12 Oct 2026 | CVSS 4.3 | ZKTeco BioTimeA flaw has been found in ZKTeco BioTime 9.5.6 Build 20260130.3206. This affects an unknown part of the file /iclock/finger_data/ of the component… | |
| CVE-2026-108797 | 12 Oct 2026 | CVSS 4.3 | ZKTeco BioTimeA vulnerability has been found in ZKTeco BioTime 9.5.6 Build 20260130.3206. This vulnerability affects unknown code of the file… | |
| CVE-2026-108798 | 12 Oct 2026 | CVSS 7.3 | ZKTeco BioTimeA vulnerability was found in ZKTeco BioTime 9.5.6 Build 20260130.3206. This issue affects some unknown processing. The manipulation results in use of… | |
| CVE-2026-108795 | 12 Oct 2026 | CVSS 4.3 | ZKTeco BioTimeA vulnerability was detected in ZKTeco BioTime 9.5.6 Build 20260130.3206. Affected by this issue is some unknown functionality of the file… | |
| CVE-2026-108790 | 12 Oct 2026 | CVSS 4.7 | westboy CicadasCMSA security flaw has been discovered in westboy CicadasCMS up to 2431154dac8d0735e04f1fd2a3c3556668fc8dab. This impacts the function… | |
| CVE-2026-108791 | 12 Oct 2026 | CVSS 4.3 | westboy CicadasCMSA weakness has been identified in westboy CicadasCMS up to 2431154dac8d0735e04f1fd2a3c3556668fc8dab. Affected is the function… | |
| CVE-2026-108794 | 12 Oct 2026 | CVSS 6.3 | ZKTeco BioTimeA security vulnerability has been detected in ZKTeco BioTime 9.5.6 Build 20260130.3206. Affected by this vulnerability is an unknown functionality of… | |
| CVE-2026-108981 | 12 Oct 2026 | CVSS 3.6 | denji ngx_cache_purgengx_cache_purge before 3.0.4 can allow file deletion via a symlink attack in certain situations where nginx and a served application (e.g… | |
| CVE-2026-108982 | 12 Oct 2026 | CVSS 7.2 | IDRIX VeraCryptVeraCrypt 1.26.29 (FUSE-T build) on macOS sometimes allows unintended access to decrypted data. It does not terminate the FUSE-T auxiliary service… | |
| CVE-2026-108985 | 12 Oct 2026 | CVSS 7.1 | sahlberg libnfsZDR decoding in libnfs through 6.0.2 before 7613236 has an out-of-bounds write related to lib/libnfs-zdr.c with libnfs_zdr_bytes()… | |
| CVE-2026-107437 | 12 Oct 2026 | CVSS 6.2 | GeoVision Inc. GV-E-map ServerGV-E-Map Server V18.2.0A contains a plaintext database password embedded within an application component. The credential can be recovered through… | |
| CVE-2026-108789 | 12 Oct 2026 | CVSS 5.5 | deepseek-ai deepseek-harnessA vulnerability was identified in deepseek-ai deepseek-harness up to 0.1.1-rc.2. This affects the function agent of the component… | |
| CVE-2026-108788 | 12 Oct 2026 | CVSS 5.3 | deepseek-ai deepseek-harnessA vulnerability was determined in deepseek-ai deepseek-harness up to 0.1.1-rc.2. The impacted element is the function spawn of the component Sandbox… | |
| CVE-2026-108980 | 12 Oct 2026 | CVSS 8.8 | BlinkoBlinko through 1.8.8 allows directory traversal, overwriting startup files as root, via installPlugin. It builds the plugin install path from an… | |
| CVE-2026-66085 | 12 Oct 2026 | CVSS 5.5 | Unisoc (Shanghai) Technologies Co., Ltd. ModemIn modem, there is a possible information disclosure due to missing filtering of sensitive data in crash dumps. This could lead to local information… | |
| CVE-2026-66086 | 12 Oct 2026 | CVSS 9.8 | Unisoc (Shanghai) Technologies Co., Ltd. ModemIn the modem OTA stack, there is a possible stack-based buffer overflow due to improper validation of scheduling information in SIB1 messages. This… | |
| CVE-2026-87765 | 12 Oct 2026 | CVSS 5.5 | Unisoc (Shanghai) Technologies Co., Ltd. kernelIn the kernel apsys DVFS driver, there is a possible out-of-bounds read or hardware register corruption due to improper input validation of the… | |
| CVE-2026-108782 | 12 Oct 2026 | CVSS 6.3 | erzhongxmu JEEWMSA weakness has been identified in erzhongxmu JEEWMS up to 2026.09.27-W39. Affected by this issue is the function CommonServiceImpl.getAutoList of the… | |
| CVE-2026-108783 | 12 Oct 2026 | CVSS 7.3 | PRVTPRO Amnezia-Web-PanelA security vulnerability has been detected in PRVTPRO Amnezia-Web-Panel up to 1.6.2/1.7.2. This affects an unknown part of the file app.py of the… | |
| CVE-2026-108784 | 12 Oct 2026 | CVSS 6.5 | macrozheng mallA vulnerability was detected in macrozheng mall up to 1.0.3. This vulnerability affects the function AlipayServiceImpl.pay of the file… | |
| CVE-2026-108785 | 12 Oct 2026 | CVSS 6.3 | macrozheng mallA flaw has been found in macrozheng mall up to 1.0.3. This issue affects the function JwtTokenUtil.refreshHeadToken of the file /admin/refreshToken… | |
| CVE-2026-108786 | 12 Oct 2026 | CVSS 6.3 | houtini-ai seo-crawler-mcpA vulnerability has been found in houtini-ai seo-crawler-mcp up to 2.1.5. Impacted is the function run_seo_audit of the file… | |
| CVE-2026-108787 | 12 Oct 2026 | CVSS 6.3 | houtini-ai voice-analyser-mcpA vulnerability was found in houtini-ai voice-analyser-mcp up to 2.1.1. The affected element is the function fetch of the file src/utils/crawler.ts… | |
| CVE-2026-108779 | 12 Oct 2026 | CVSS 6.3 | erzhongxmu JEEWMSA vulnerability was identified in erzhongxmu JEEWMS up to 2026.09.27-W39. Affected is the function WmSttInGoodsController.list of the file… | |
| CVE-2026-108781 | 12 Oct 2026 | CVSS 6.3 | erzhongxmu JEEWMSA security flaw has been discovered in erzhongxmu JEEWMS up to 2026.09.27-W39. Affected by this vulnerability is the function… | |
| CVE-2026-108774 | 12 Oct 2026 | CVSS 6.3 | erzhongxmu JEEWMSA flaw has been found in erzhongxmu JEEWMS up to 2026.09.27-W39. The affected element is the function getbinall/getbinallagv of the file… | |
| CVE-2026-108775 | 12 Oct 2026 | CVSS 6.3 | erzhongxmu JEEWMSA vulnerability has been found in erzhongxmu JEEWMS up to 2026.09.27-W39. The impacted element is the function WvNoticeController.list of the file… | |
| CVE-2026-108777 | 12 Oct 2026 | CVSS 6.3 | erzhongxmu JEEWMSA vulnerability was found in erzhongxmu JEEWMS up to 2026.09.27-W39. This affects the function WvGiController.list of the file… | |
| CVE-2026-108778 | 12 Oct 2026 | CVSS 6.3 | erzhongxmu JEEWMSA vulnerability was determined in erzhongxmu JEEWMS up to 2026.09.27-W39. This impacts the function WmInQmIController.list of the file… | |
| CVE-2026-108770 | 11 Oct 2026 | CVSS 5.3 | AppwriteA weakness has been identified in Appwrite up to 2.3.0. This vulnerability affects the function PublicHostname of the file… | |
| CVE-2026-108772 | 11 Oct 2026 | CVSS 5.3 | bleenco abstruseA security vulnerability has been detected in bleenco abstruse up to 2.1.0. This issue affects the function filepath.Join of the file… | |
| CVE-2026-108773 | 11 Oct 2026 | CVSS 6.3 | erzhongxmu JEEWMSA vulnerability was detected in erzhongxmu JEEWMS up to 2026.09.27-W39. Impacted is the function docheck of the file… | |
| CVE-2026-108769 | 11 Oct 2026 | CVSS 4.3 | zhayujie CowAgentA security flaw has been discovered in zhayujie CowAgent up to 2.2.0. This affects an unknown part of the file Markdown.tsx of the component Markdown… | |
| CVE-2026-108978 | 11 Oct 2026 | CVSS 5.5 | Samsung Opensource rlottieHeap-based buffer overflow vulnerability in Samsung Opensource rlottie allows Buffer Overflow via Environment Variables. This issue affects rlottie… | |
| CVE-2026-108976 | 11 Oct 2026 | CVSS 7.8 | GNU EmacsGNU Emacs before 31.2 (and TRAMP through 2.8.2) allows OS command injection via a filename because tramp-user-regexp has an incomplete list of… | |
| CVE-2026-108963 | 11 Oct 2026 | CVSS 8.8 | David-Crty databasementdatabasement before 1.8.2 allows remote code execution because it runs certain commands (e.g., mariadb-dump) with a database name that can be… | |
| CVE-2026-108925 | 11 Oct 2026 | CVSS 6.1 | Cohesity NetBackup Administration Console web interfaceImproper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in Cohesity NetBackup Administration Console web… | |
| CVE-2026-108768 | 11 Oct 2026 | CVSS 4.3 | zhayujie CowAgentA vulnerability was identified in zhayujie CowAgent up to 2.2.0. Affected by this issue is the function json.loads of the component Streaming… | |
| CVE-2026-19738 | 11 Oct 2026 | CVSS 6.5 | zephyrproject zephyrThe Bluetooth Link Layer Control Procedure (LLCP) implementation for Connected Isochronous Stream (CIS) creation retains an RX node… | |
| CVE-2026-19739 | 11 Oct 2026 | CVSS 6.5 | zephyrproject zephyrThe Bluetooth Link Layer control procedure code in subsys/bluetooth/controller/ll_sw/ull_llcp_conn_upd.c retains the received RX node while a… | |
| CVE-2026-19740 | 11 Oct 2026 | CVSS 6.5 | zephyrproject zephyrThe Link Layer Control Procedure (LLCP) implementation of the Zephyr software Bluetooth LE Controller retains the receive node that carried an… | |
| CVE-2026-19935 | 11 Oct 2026 | CVSS 7.5 | zephyrproject zephyrThe Bluetooth LE host queues received L2CAP connection-oriented channel (CoC) data for deferred processing through a struct k_work embedded in the… | |
| CVE-2026-59508 | 11 Oct 2026 | CVSS 5.9 | Interuse i-BosImproper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Interuse i-Bos. This issue affects i-Bos: 3.0. | |
| CVE-2026-18418 | 11 Oct 2026 | CVSS 3.4 | zephyrproject zephyrThe zbus proxy agent IPC backend in subsys/zbus/proxy_agent/zbus_proxy_agent_ipc.c logged the channel name of a rejected inter-domain frame with a… | |
| CVE-2026-19576 | 11 Oct 2026 | CVSS 6.8 | zephyrproject zephyrThe Goodix GT9xx input driver in drivers/input/input_gt911.c reads the touch point count from the controller's status register and masks it with… | |
| CVE-2026-19577 | 11 Oct 2026 | CVSS 7.1 | zephyrproject zephyrnet_route_ipv6_packet() in subsys/net/ip/route_ipv6.c resolved the nexthop's link-layer address with net_nbr_get_lladdr(nbr->idx) without first… | |
| CVE-2026-19669 | 11 Oct 2026 | CVSS 7.8 | zephyrproject zephyrThe user-mode syscall verifiers z_vrfy_fuel_gauge_get_props() and z_vrfy_fuel_gauge_set_props() in drivers/fuel_gauge/fuel_gauge_syscall_handlers.c… | |
| CVE-2026-19735 | 11 Oct 2026 | CVSS 4.8 | zephyrproject zephyrThe RFC 6528 initial-sequence-number implementation in subsys/net/ip/tcp.c derived every TCP ISN from SHA-256(unique_key || four-tuple) plus a… | |
| CVE-2026-19736 | 11 Oct 2026 | CVSS 7.8 | zephyrproject zephyrThe NXP MCUX TRNG entropy driver in drivers/entropy/entropy_mcux_trng.c passed the caller's byte count straight to the vendor SDK routine… | |
| CVE-2026-19737 | 11 Oct 2026 | CVSS 5.5 | zephyrproject zephyri2s_esp32_trigger_check() in drivers/i2s/i2s_esp32.c validates the requested direction only for I2S_DIR_BOTH. The I2S_DIR_RX and I2S_DIR_TX branches… | |
| CVE-2026-108913 | 11 Oct 2026 | CVSS 7.1 | Omarchyomarchy-theme-set in Omarchy 4 before 4.0.1 allows code execution via a third-party theme because the files placed into… | |
| CVE-2026-107761 | 11 Oct 2026 | CVSS 5.3 | GitroomHQ postiz-appSeveral Postiz endpoints return the complete database row of the record they operate on instead of only the fields the client needs. Two of them… | |
| CVE-2026-108888 | 11 Oct 2026 | CVSS 4.3 | JeecgBootJeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysDepartRoleController exportXls handler that allows any authenticated… | |
| CVE-2026-108891 | 11 Oct 2026 | CVSS 4.3 | JeecgBootJeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysUserController getUserDetailByUserId handler that allows any… | |
| CVE-2026-108902 | 11 Oct 2026 | CVSS 8.1 | ph7software ph7builderpH7Builder (pH7 Social Dating CMS) before 18.5.0 contains a path traversal vulnerability in the picture module deletePhoto() action that allows… | |
| CVE-2026-108903 | 11 Oct 2026 | CVSS 5.3 | ph7software ph7builderpH7Builder (pH7 Social Dating CMS) before 19.3.0 contains a CAPTCHA bypass vulnerability that allows unauthenticated attackers to skip form… | |
| CVE-2026-108904 | 11 Oct 2026 | CVSS 6.5 | ph7software ph7builderpH7Builder (pH7 Social Dating CMS) before 18.5.0 contains an information disclosure vulnerability that allows API clients to obtain sensitive member… | |
| CVE-2026-108905 | 11 Oct 2026 | CVSS 7.5 | ph7software ph7builderpH7Builder (pH7 Social Dating CMS) before 18.6.0 contains a hard-coded API key vulnerability in Tool.class.php that allows unauthenticated attackers… | |
| CVE-2026-108880 | 11 Oct 2026 | CVSS 4.3 | JeecgBootJeecgBoot through 3.9.5 contains a missing authorization vulnerability in the PUT /sys/dict/editDictByLowAppId endpoint that allows any authenticated… | |
| CVE-2026-108881 | 11 Oct 2026 | CVSS 4.3 | JeecgBootJeecgBoot through 3.9.5 contains a missing authorization vulnerability in the getTenantPackInfo handler that allows any authenticated user to read… | |
| CVE-2026-108882 | 11 Oct 2026 | CVSS 5.4 | JeecgBootJeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysPositionController removeUserPosition handler that allows any… | |
| CVE-2026-108883 | 11 Oct 2026 | CVSS 6.5 | JeecgBootJeecgBoot through 3.9.5 contains a missing authorization vulnerability in the editThirdAppConfig handler that allows any authenticated user to modify… | |
| CVE-2026-108884 | 11 Oct 2026 | CVSS 5.4 | JeecgBootJeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysMessageTemplateController delete handler that allows any… | |
| CVE-2026-108885 | 11 Oct 2026 | CVSS 5.4 | JeecgBootJeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysMessageController delete handler that allows low-privileged… | |
| CVE-2026-108886 | 11 Oct 2026 | CVSS 4.3 | JeecgBootJeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysUserController queryChildrenByUsername handler that allows any… | |
| CVE-2026-108887 | 11 Oct 2026 | CVSS 4.3 | JeecgBootJeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysCommentController exportXls handler that allows any authenticated… | |
| CVE-2026-108873 | 11 Oct 2026 | CVSS 4.3 | JeecgBootJeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to modify any department by… | |
| CVE-2026-108874 | 11 Oct 2026 | CVSS 4.3 | JeecgBootJeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows any authenticated user to assign or remove department heads by… | |
| CVE-2026-108875 | 11 Oct 2026 | CVSS 4.3 | JeecgBootJeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysUserController addSysUserGroup handler that allows any authenticated… | |
| CVE-2026-108876 | 11 Oct 2026 | CVSS 4.3 | JeecgBootJeecgBoot through 3.9.5 contains a missing authorization vulnerability in the putCancelQuit handler of SysUserController, allowing any authenticated… | |
| CVE-2026-108877 | 11 Oct 2026 | CVSS 5.4 | JeecgBootJeecgBoot through 3.9.5 contains a missing authorization vulnerability in AiragPromptsController that allows any authenticated user to delete AI… | |
| CVE-2026-108878 | 11 Oct 2026 | CVSS 4.3 | JeecgBootJeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragAppController queryById handler that allows low-privileged… | |
| CVE-2026-108879 | 11 Oct 2026 | CVSS 4.3 | JeecgBootJeecgBoot through 3.9.5 contains an insecure direct object reference vulnerability in AiragBaseApiController that allows authenticated users to read… |
Page 89 of 168