https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-07T20:36:08.764420+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-83538 fkie_cve-2026-83538 2026-11-07T20:36:08.766333+00:00

Missing Authorization in Apache OFBiz 24.09 before 24.09.08 on all platforms allows a remote unauthenticated attacker to disclose internal business records — including organization, employee, product catalog, and product-store data — by requesting several helper endpoints across the Human Resources, Catalog, and Order Manager applications that are configured to skip authentication and perform no permission check before returning the requested record. Users are recommended to upgrade to version 24.09.08, which fixes this issue.

 https://db.gcve.eu/vuln/ghsa-x974-v464-v25m GHSA-x974-v464-v25m 2026-11-07T20:36:08.766417+00:00

Missing Authorization in Apache OFBiz 24.09 before 24.09.08 on all platforms allows a remote unauthenticated attacker to disclose internal business records — including organization, employee, product catalog, and product-store data — by requesting several helper endpoints across the Human Resources, Catalog, and Order Manager applications that are configured to skip authentication and perform no permission check before returning the requested record. Users are recommended to upgrade to version 24.09.08, which fixes this issue.

 https://db.gcve.eu/vuln/wid-sec-w-2026-4357 WID-SEC-W-2026-4357 — Apache OFBiz: Mehrere Schwachstellen 2026-11-07T20:36:08.766447+00:00

Ein Angreifer kann mehrere Schwachstellen in Apache OFBiz ausnutzen, um Code auszuführen, Sicherheitsmaßnahmen zu umgehen, Daten offenzulegen, Bestell- und Zahlungsdaten zu manipulieren oder einen DoS auszulösen.