Alle CVE’s van de afgelopen zes maanden, dagelijks bijgewerkt.

5 van 5 getoond

• GemiddeldCVE-2026-82191CVSS-score 5.315 sep 2026

  Joomla Extension - j2commerce.com - Unescaped request data reflected into PayPal notify redirect in J2Store 1.0.0-3.3.2, 4.0.0-4.0.22, 4.1.0-4.1.7 - A crafted link to the paypal notify endpoint, if followed by a victim's browser (or an automated system that fe

  CWE-1241
• GemiddeldCVE-2026-82190CVSS-score 6.315 sep 2026

  Joomla Extension - j2commerce.com - Predictable/forgeable order access token in J2Store 1.0.0-3.3.2, 4.0.0-4.0.22, 4.1.0-4.1.7 - Anyone who obtains the site's Joomla `secret` can compute a valid access token for *any* order on the site without ever having plac

  CWE-1241
• GemiddeldCVE-2026-73576CVSS-score 6.313 aug 2026

  In Zimbra Collaboration (ZCS) before 10.1.17, weak cryptographic key generation vulnerability exists in the OnlyOffice integration. The zimbraDocumentEditingJwtSecret is generated using an insecure random number generator, resulting in insufficient entropy. An

  CWE-1241synacor zimbra_collaboration_suite
• HoogCVE-2026-57869CVSS-score 7.17 jul 2026

  Broken object-level access controls and the use of a deterministic pattern during random ID generation in MicroRealEstate allows attackers to access documents uploaded by landlords or tenants without authorization. This issue affects MicroRealEstate: through 1

  CWE-639CWE-1241
• GemiddeldCVE-2026-6420CVSS-score 6.36 mei 2026

  A flaw was found in Keylime. An attacker with root access on an enrolled monitored machine, where the Keylime agent runs, can exploit a vulnerability in the Keylime verifier. The verifier uses a hardcoded challenge nonce for Trusted Platform Module (TPM) quote

  CWE-1241