Known Vulnerabilities for Document by Com.ritense.valtimo
Listed below are 10 of the newest known vulnerabilities associated with "Document" by "Com.ritense.valtimo".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-71285 json | Uptime Kuma's Matomo analytics integration (server/analytics/matomo-analytics.js) injects the admin-configurable Matomo `site... | Not Provided | 2026-08-05 | 2026-08-05 |
| CVE-2026-71249 json | 299Ko's public contact form (plugin/contact/controllers/ContactController.php, home()) sets raw POST field values (name, firs... | Not Provided | 2026-08-05 | 2026-08-05 |
| CVE-2026-71247 json | Documenso's sign-field-with-token.ts, used by the live document-signing UI, allows a recipient with the ASSISTANT role to fet... | Not Provided | 2026-08-05 | 2026-08-05 |
| CVE-2026-69257 json | Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, Flowise's HTTP secur... | Not Provided | 2026-08-04 | 2026-08-04 |
| CVE-2026-68586 json | SiYuan before v3.7.3 fails to apply publish-access filters to the getBacklinkDoc and getBackmentionDoc content endpoints (/ap... | Not Provided | 2026-08-03 | 2026-08-03 |
| CVE-2026-68585 json | SiYuan versions before v3.7.3 contain a metadata disclosure vulnerability in the /api/block/getBlockInfo endpoint that return... | Not Provided | 2026-08-03 | 2026-08-03 |
| CVE-2026-67621 json | Flowise through 3.1.4 contains a missing authorization vulnerability that allows authenticated workspace members to perform u... | Not Provided | 2026-08-06 | 2026-08-07 |
| CVE-2026-67612 json | OpenEMR through 8.2.0 contains a stored cross-site scripting vulnerability in the patient portal template system that allows ... | Not Provided | 2026-08-03 | 2026-08-03 |
| CVE-2026-67307 json | Wazuh 5.0.0-beta1 (fixed in 5.0.0-beta3) does not validate or override the cluster_name and cluster_node fields in inventory-... | Not Provided | 2026-08-01 | 2026-08-03 |
| CVE-2026-67217 json | cJSON through 1.7.19 applies RFC 6902 JSON Patch operations non-atomically in apply_patch() in cJSON_Utils.c. For a replace o... | Not Provided | 2026-07-29 | 2026-07-29 |