https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-07T19:35:28.826413+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-100228 fkie_cve-2026-100228 2026-11-07T19:35:28.828557+00:00

Improper Input Validation in Order Returns in Apache OFBiz 24.09.07 on all platforms allows an authenticated user without the ORDERMGR_CREATE permission to persist an arbitrary price on a return item via the createReturnItem service, bypassing the intended server-computed price ceiling. Users are recommended to upgrade to version 24.09.08, which fixes this issue.

 https://db.gcve.eu/vuln/ghsa-29j7-h7qg-q9xv GHSA-29j7-h7qg-q9xv 2026-11-07T19:35:28.828620+00:00

Improper Input Validation in Order Returns in Apache OFBiz 24.09.07 on all platforms allows an authenticated user without the ORDERMGR_CREATE permission to persist an arbitrary price on a return item via the createReturnItem service, bypassing the intended server-computed price ceiling. Users are recommended to upgrade to version 24.09.08, which fixes this issue.

 https://db.gcve.eu/vuln/wid-sec-w-2026-4357 WID-SEC-W-2026-4357 — Apache OFBiz: Mehrere Schwachstellen 2026-11-07T19:35:28.828647+00:00

Ein Angreifer kann mehrere Schwachstellen in Apache OFBiz ausnutzen, um Code auszuführen, Sicherheitsmaßnahmen zu umgehen, Daten offenzulegen, Bestell- und Zahlungsdaten zu manipulieren oder einen DoS auszulösen.