Known Vulnerabilities for View by Bentley
Listed below are 10 of the newest known vulnerabilities associated with "View" by "Bentley".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-94104 json | NivoCart through 2.4.0 contains an arbitrary file upload vulnerability in the File Manager multi() endpoint that fails to val... | Not Provided | 2026-09-20 | 2026-09-20 |
| CVE-2026-93660 json | SQLBot through 1.10.1 fails to verify dashboard ownership in update_resource and update_canvas endpoints, allowing authentica... | Not Provided | 2026-09-18 | 2026-09-18 |
| CVE-2026-93296 json | MISP contains a stored cross-site scripting (XSS) vulnerability in the Overmind theme's statistics views. The event General c... | Not Provided | 2026-09-17 | 2026-09-17 |
| CVE-2026-92918 json | admin3 through 3.0.0 persists user session tokens in the audit log event body when publishing UserLoggedIn domain events. Att... | Not Provided | 2026-09-17 | 2026-09-17 |
| CVE-2026-92761 json | WebVirtCloud fails to properly validate permission flags in UserInstance grants, allowing view-only users to perform privileg... | Not Provided | 2026-09-16 | 2026-09-16 |
| CVE-2026-92759 json | SecObserve versions before 1.59.1 contain an information disclosure vulnerability in the ApiConfigurationSerializer that fail... | Not Provided | 2026-09-16 | 2026-09-17 |
| CVE-2026-92708 json | Svelte devalue is a JavaScript library that serializes values into strings when JSON.stringify isn't sufficient for the job. ... | Not Provided | 2026-09-18 | 2026-09-18 |
| CVE-2026-92622 json | The Strong Testimonials plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'lightbox_class' Shortcode Attr... | Not Provided | 2026-09-18 | 2026-09-18 |
| CVE-2026-92593 json | Craft CMS versions 5.10.0 through 5.10.12 contain an incomplete fix for CVE-2026-55794: the Controller::getPostedRedirectUrl(... | Not Provided | 2026-09-16 | 2026-09-17 |
| CVE-2026-92589 json | Craft CMS 5.0.0 through 5.10.12 (fixed in 5.10.13) contains a broken access control flaw in the nested-elements reorder endpo... | Not Provided | 2026-09-16 | 2026-09-18 |