Known Vulnerabilities for Download Attachments by DFactory
Listed below are 1 of the newest known vulnerabilities associated with "Download Attachments" by "DFactory".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-45282 json | Nextcloud is an open source content collaboration platform. In Nextcloud Server from versions 32.0.0 to before 32.0.9, and 33... | Not Provided | 2026-06-01 | 2026-06-01 |
| CVE-2026-42277 json | Onyx is an open-source AI platform. Prior to versions 3.0.9, 3.1.6, and 3.2.6, the GET /chat/file/{file_id} endpoint allows a... | Not Provided | 2026-05-08 | 2026-05-08 |
| CVE-2026-42071 json | Mantis Bug Tracker (MantisBT) is an open source issue tracker. From 2.23.0 to 2.28.1, a missing authorization check in Mantis... | Not Provided | 2026-05-28 | 2026-05-29 |
| CVE-2026-40514 json | SmarterTools SmarterMail builds prior to 9610 contain a cryptographic weakness in the file and email sharing endpoints that u... | Not Provided | 2026-04-27 | 2026-04-27 |
| CVE-2026-39616 json | Authorization Bypass Through User-Controlled Key vulnerability in dFactory Download Attachments download-attachments allows E... | Not Provided | 2026-04-08 | 2026-04-29 |
| CVE-2026-39348 json | OrangeHRM is a comprehensive human resource management (HRM) system. From 5.0 to 5.8, OrangeHRM Open Source omits authorizati... | Not Provided | 2026-04-07 | 2026-04-08 |
| CVE-2026-35593 json | Trilium Notes is an open-source, cross-platform hierarchical note taking application for building large personal knowledge ba... | Not Provided | 2026-05-20 | 2026-05-20 |
| CVE-2026-34744 json | Mantis Bug Tracker (MantisBT) is an open source issue tracker. Versions 2.28.1 and prior permit a user to list and download t... | Not Provided | 2026-05-19 | 2026-05-19 |
| CVE-2026-33678 json | Vikunja is an open-source self-hosted task management platform. Prior to version 2.2.1, `TaskAttachment.ReadOne()` queries at... | Not Provided | 2026-03-24 | 2026-03-24 |
| CVE-2026-8238 json | Concrete CMS 9.5.0 and below is vulnerable to IDOR. The '/ccm/frontend/conversations/message_page' endpoint returns the fu... | Not Provided | 2026-05-21 | 2026-05-22 |