Known Vulnerabilities for Download Attachments by DFactory
Listed below are 1 of the newest known vulnerabilities associated with "Download Attachments" by "DFactory".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-53929 json | NocoDB is software for building databases as spreadsheets. Prior to 2026.05.1, with NC_SECURE_ATTACHMENTS=true, an authentica... | Not Provided | 2026-06-23 | 2026-06-25 |
| CVE-2026-52799 json | Gogs is an open source self-hosted Git service. Prior to 0.14.3, GET /attachments/:uuid returns the raw attachment file witho... | Not Provided | 2026-06-24 | 2026-06-25 |
| CVE-2026-48944 json | The K2 frontend article-save handler accepts an `attachment[N][existing]` POST field that is concatenated with `JPATH_SITE/` ... | Not Provided | 2026-06-25 | 2026-06-25 |
| CVE-2026-46551 json | NocoDB is software for building databases as spreadsheets. Prior to 2026.04.4, the uploadViaURL path in the v1/v2 attachment ... | Not Provided | 2026-06-23 | 2026-06-24 |
| CVE-2026-45282 json | Nextcloud is an open source content collaboration platform. In Nextcloud Server from versions 32.0.0 to before 32.0.9, and 33... | Not Provided | 2026-06-01 | 2026-06-01 |
| CVE-2026-42277 json | Onyx is an open-source AI platform. Prior to versions 3.0.9, 3.1.6, and 3.2.6, the GET /chat/file/{file_id} endpoint allows a... | Not Provided | 2026-05-08 | 2026-05-08 |
| CVE-2026-42071 json | Mantis Bug Tracker (MantisBT) is an open source issue tracker. From 2.23.0 to 2.28.1, a missing authorization check in Mantis... | Not Provided | 2026-05-28 | 2026-05-29 |
| CVE-2026-40514 json | SmarterTools SmarterMail builds prior to 9610 contain a cryptographic weakness in the file and email sharing endpoints that u... | Not Provided | 2026-04-27 | 2026-04-27 |
| CVE-2026-39616 json | Authorization Bypass Through User-Controlled Key vulnerability in dFactory Download Attachments download-attachments allows E... | Not Provided | 2026-04-08 | 2026-04-29 |
| CVE-2026-39348 json | OrangeHRM is a comprehensive human resource management (HRM) system. From 5.0 to 5.8, OrangeHRM Open Source omits authorizati... | Not Provided | 2026-04-07 | 2026-04-08 |