Known Vulnerabilities for Domain-admin by Dromara
Listed below are 10 of the newest known vulnerabilities associated with "Domain-admin" by "Dromara".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-121552 json | Dromara domain-admin before 1.6.79 contains a missing authorization vulnerability in the POST /api/getGroupUserList handler t... | Not Provided | 2026-11-03 | 2026-11-03 |
| CVE-2026-119658 json | PowerDNS-Admin through 2026.08.1 contains an authorization bypass vulnerability that allows authenticated User-role accounts ... | Not Provided | 2026-10-30 | 2026-10-30 |
| CVE-2026-109953 json | FreeRDP 3.0.0 before 3.32.0 contains an insufficiently protected credentials vulnerability where the /restricted-admin option... | Not Provided | 2026-10-13 | 2026-10-14 |
| CVE-2026-105679 json | Ghost is a Node.js content management system. From 6.22.1 until 6.64.0, Ghost restricted the content type used to serve uploa... | Not Provided | 2026-10-05 | 2026-10-05 |
| CVE-2026-105651 json | Ghost is a Node.js content management system. From 5.94.0 until 6.64.0, when creating a bookmark card, Ghost could store non-... | Not Provided | 2026-10-05 | 2026-10-07 |
| CVE-2026-105649 json | Ghost is a Node.js content management system. From 4.22.0 until 6.65.0, SVG media thumbnails and SVG images uploaded with a n... | Not Provided | 2026-10-05 | 2026-10-06 |
| CVE-2026-105644 json | Ghost is a Node.js content management system. From 4.0.0 until 6.67.0, SVG images included in content imports were stored wit... | Not Provided | 2026-10-05 | 2026-10-06 |
| CVE-2026-104411 json | Ghost from 6.22.1 before 6.64.0 contains a stored cross-site scripting vulnerability that allows staff users to host scripts ... | Not Provided | 2026-10-02 | 2026-10-02 |
| CVE-2026-100710 json | Froxlor through 2.3.10 does not filter sensitive columns from API responses: Domains::get(), Domains::listing(), SubDomains::... | Not Provided | 2026-09-26 | 2026-09-26 |
| CVE-2026-100708 json | Froxlor before 2.3.13 returns the ssl_key_file column — which stores the raw PEM TLS private-key content — verbatim in th... | Not Provided | 2026-09-26 | 2026-09-28 |