| BDVDB আইডি | CVE আইডি | শিরোনাম | ভেন্ডর | তীব্রতা | প্রকাশিত | খুলুন |
|---|---|---|---|---|---|---|
| BDVDB-2026-401819 | CVE-2026-97195 | Secure Custom Fields < 6.9.8 - Admin+ Stored XSS via HTML Attribute Name Injection into Field Definition | নেই | |||
| BDVDB-2026-401818 | CVE-2026-97194 | Secure Custom Fields < 6.9.8 - Contributor+ Unpublished Post Title and Status Disclosure via Relational Fields | নেই | |||
| BDVDB-2026-401817 | CVE-2026-97193 | Secure Custom Fields < 6.9.8 - Contributor+ Relationship Field Update on Arbitrary Objects via IDOR | নেই | |||
| BDVDB-2026-401816 | CVE-2026-97192 | Secure Custom Fields < 6.9.8 - Contributor+ Admin-Restricted Custom Field Update via Post Save Path | নেই | |||
| BDVDB-2026-401815 | CVE-2026-96963 | Pie Register <= 3.8.4.15 - Contributor+ Invitation Code Modification | নেই | |||
| BDVDB-2026-401814 | CVE-2026-96961 | Pie Register <= 3.8.4.15 - Unauthenticated Plugin Settings Reset and Redirect Data Destruction | নেই | |||
| BDVDB-2026-401813 | CVE-2026-85344 | FV Player < 7.5.57.7212 - Subscriber+ Bulk Post Modification via Missing Authorization | নেই | |||
| BDVDB-2026-401812 | CVE-2026-61987 | WordPress WCFM – Frontend Manager for WooCommerce plugin <= 6.8.1 - Cross Site Scripting (XSS) দুর্বলতা | WC Lovers | মাঝারি | ||
| BDVDB-2026-402052 | CVE-2026-124553 | BabelDOC from 0.3.61 before 0.7.0 Denial of Service via ToUnicode CMap Parsing | funstory-ai | উচ্চ | ||
| BDVDB-2026-402051 | CVE-2026-124552 | Webmin through 2.670 Stored XSS via Shorewall and Shorewall6 list.cgi | webmin | মাঝারি | ||
| BDVDB-2026-402050 | CVE-2026-124551 | ClassroomIO through 1.0.0 Cross-Organization Course Disclosure via Clone Endpoint | classroomio | মাঝারি | ||
| BDVDB-2026-402049 | CVE-2026-124494 | SunEditor before 3.4.0 Stored XSS via : Entity Sanitizer Bypass | JiHong88 | সংকটপূর্ণ | ||
| BDVDB-2026-402048 | CVE-2026-124493 | SunEditor before 3.4.0 Stored XSS via DocumentType Header textContent | JiHong88 | সংকটপূর্ণ | ||
| BDVDB-2026-402047 | CVE-2026-124492 | SunEditor before 3.4.0 Stored XSS via Link Modal Bookmark List | JiHong88 | উচ্চ | ||
| BDVDB-2026-402046 | CVE-2026-124491 | SunEditor before 3.4.0 Stored XSS via FileUpload Plugin Filename | JiHong88 | মাঝারি | ||
| BDVDB-2026-402045 | CVE-2026-124490 | OpenEMR before 8.3.0 Arbitrary File Read/Write via oe-module-faxsms disposeDocument | openemr | সংকটপূর্ণ | ||
| BDVDB-2026-402044 | CVE-2026-124489 | OpenEMR before 8.3.0 Broken Access Control via portal_payment.php | openemr | উচ্চ | ||
| BDVDB-2026-402043 | CVE-2026-124488 | OpenEMR before 8.3.0 Authorization Bypass via load_form.php High-Sensitivity Encounters | openemr | উচ্চ | ||
| BDVDB-2026-402042 | CVE-2026-124487 | OpenEMR before 8.4.0 Improper Authorization in FHIR DocumentReference $docref | openemr | মাঝারি | ||
| BDVDB-2026-402041 | CVE-2026-124486 | OpenEMR before 8.3.0 Missing Authorization in Classic Document Controller | openemr | উচ্চ | ||
| BDVDB-2026-402040 | CVE-2026-124485 | OpenEMR before 8.3.0 Cross-Patient Document Disclosure via Onsite Documents API | openemr | মাঝারি | ||
| BDVDB-2026-402039 | CVE-2026-124484 | OpenEMR before 8.4.0 Missing Authorization in Portal Onsite-Document APIs | openemr | উচ্চ | ||
| BDVDB-2026-402038 | CVE-2026-124483 | OpenEMR before 8.4.0 Improper Authorization via Prescription REST API | openemr | উচ্চ | ||
| BDVDB-2026-402037 | CVE-2026-124482 | OpenEMR before 8.4.0 Cross-Patient PHI Exfiltration via SMART Patient Launch | openemr | মাঝারি | ||
| BDVDB-2026-402036 | CVE-2026-124481 | OpenEMR before 8.4.0 Cross-Patient Payment Tampering via Rainforest Portal Payments | openemr | মাঝারি | ||
| BDVDB-2026-402035 | CVE-2026-124480 | OpenEMR before 8.4.0 Authorization Bypass via FHIR QuestionnaireResponse APICSRFTOKEN | openemr | উচ্চ | ||
| BDVDB-2026-402034 | CVE-2026-124479 | OpenEMR before 8.4.0 Arbitrary File Read via REST Document Download | openemr | মাঝারি | ||
| BDVDB-2026-402033 | CVE-2026-124478 | OpenEMR before 8.3.0 Missing Authorization via addRecall in save.php | openemr | মাঝারি | ||
| BDVDB-2026-402032 | CVE-2026-124477 | OpenEMR before 8.3.0 Missing Authorization via delete_Recall in save.php | openemr | উচ্চ | ||
| BDVDB-2026-402031 | CVE-2026-124476 | OpenEMR before 8.3.0 IDOR via form_pid in portal/lib/paylib.php | openemr | মাঝারি | ||
| BDVDB-2026-402030 | CVE-2026-124475 | OpenEMR before 8.3.0 IDOR via portal/lib/persist.php setting_patient | openemr | উচ্চ | ||
| BDVDB-2026-402029 | CVE-2026-124474 | MRBS before 1.12.3 Reflected XSS via error parameter of view_entry.php | meeting-room-booking-system | মাঝারি | ||
| BDVDB-2026-402028 | CVE-2026-124473 | OpenEMR before 8.3.0 Broken Object Authorization via SOAP Note Update API | openemr | উচ্চ | ||
| BDVDB-2026-402027 | CVE-2026-124472 | OpenEMR before 8.3.0 Missing Authorization via sl_eob_patient_note.php | openemr | উচ্চ | ||
| BDVDB-2026-402026 | CVE-2026-124471 | OpenEMR before 8.3.0 Missing Authorization and IDOR via sl_eob_invoice.php | openemr | উচ্চ | ||
| BDVDB-2026-402025 | CVE-2026-124470 | OpenEMR before 8.3.0 BOLA via portal_custom_report.php Exposes Patient Problem Lists | openemr | মাঝারি | ||
| BDVDB-2026-402024 | CVE-2026-124469 | OpenEMR before 8.3.0 SQL Injection via Fee Sheet warehouse parameter | openemr | সংকটপূর্ণ | ||
| BDVDB-2026-402023 | CVE-2026-124468 | OpenEMR before 8.3.0 SQL Injection via Patient Insurance and Employer REST API | openemr | উচ্চ | ||
| BDVDB-2026-402022 | CVE-2026-124467 | OpenEMR before 8.4.0 Remote Code Execution via ESign LFI and fax upload | openemr | উচ্চ | ||
| BDVDB-2026-402021 | CVE-2026-124466 | OpenEMR before 8.4.0 Unauthenticated SSRF via OAuth2 Client jwks_uri | openemr | উচ্চ | ||
| BDVDB-2026-402020 | CVE-2026-124465 | Trendyol kafka-konsumer 2.3.3 before 2.6.18 Denial of Service via Batch Consumer Panic | Trendyol | মাঝারি | ||
| BDVDB-2026-402019 | CVE-2026-124464 | OpenEMR before 8.4.0 FHIR Patient Compartment Bypass via QuestionnaireResponse | openemr | মাঝারি | ||
| BDVDB-2026-402018 | CVE-2026-124463 | OpenEMR before 8.3.0 Stored XSS via CAMOS Rx Print View | openemr | উচ্চ | ||
| BDVDB-2026-402017 | CVE-2026-124462 | OpenEMR before 8.3.0 Patient Portal IDOR via Case-Sensitive Pid Parameter | openemr | মাঝারি | ||
| BDVDB-2026-402016 | CVE-2026-124461 | OpenEMR before 8.3.0 IDOR via DICOM library/ajax/upload.php Endpoint | openemr | উচ্চ | ||
| BDVDB-2026-402015 | CVE-2026-124460 | OpenEMR before 8.3.0 IDOR in Patient Portal PortalPatientController | openemr | মাঝারি | ||
| BDVDB-2026-402014 | CVE-2026-124459 | OpenEMR before 8.3.0 Cross-Patient IDOR via Encounter Form Viewers and Save Handlers | openemr | উচ্চ | ||
| BDVDB-2026-402013 | CVE-2026-124458 | OpenEMR before 8.4.0 FHIR Patient Compartment Bypass via Person Endpoint | openemr | মাঝারি | ||
| BDVDB-2026-402012 | CVE-2026-124457 | OpenEMR before 8.3.0 Path Traversal via sl_eob_process.php eraname | openemr | উচ্চ | ||
| BDVDB-2026-402011 | CVE-2026-124456 | OpenEMR before 8.3.0 Missing Authorization and IDOR in Prior-Authorizations Module | openemr | উচ্চ |
এই ফিল্টারের সঙ্গে কোনো এন্ট্রি মেলেনি।