kta1kri

AutomatorWP < 6.0.7 - Unauthenticated Zoom/AWeber Integration Connection Hijack via OAuth Callback

OpenPanel before 3.0.0 Missing Authorization via reference.getChartReferences

OpenPanel before 3.0.0 Improper ClickHouse Escaping in sankey.service.ts

WarehousePG (WHPG) 7.2.1 through 7.6.0 is affected by a missing authorization vulnerability (CWE-862) in the built-in function gp_log_backend_memory_contexts(). Any authenticated database role can run this function without a GRANT. It also gets around the

Apache Kylin: missing JDBC-config authorization

BlueSpiceUserManager: Missing authorization in REST endpoints for blocking and unblocking users

OpenRemote 1.2.0 before 1.31.0 Missing Authorization in Gateway Tunnel Endpoints

Rclone before 1.75.2 Path Traversal via translateLink .rclonelink Suffix Trim

Networknt light-4j 2.1.5 before 2.4.0 Authentication Bypass via Empty LDAP Password

docling-core 2.5.0 before 2.103.0 Local File Disclosure via Plain Path ImageRef