https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 15:32:05 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-368295 EUVD-2026-368295 https://cve.radiocsirt.org/vuln/euvd-2026-368295 https://cve.radiocsirt.org/vuln/fkie_cve-2026-90936 <p>Froxlor before 2.3.7 fails to properly scope sender alias lookups to the current customer in customer_email.php. Authenticated attackers can enumerate global sender alias IDs and read other customers&#39; allowed sender values by supplying arbitrary senderid parameters in delete confirmation requests.</p> <p>Froxlor before 2.3.7 fails to properly scope sender alias lookups to the current customer in customer_email.php. Authenticated attackers can enumerate global sender alias IDs and read other customers&#39; allowed sender values by supplying arbitrary senderid parameters in delete confirmation requests.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-90936 https://cve.radiocsirt.org/vuln/ghsa-wc79-h887-58h9 <p>Froxlor before 2.3.7 fails to properly scope sender alias lookups to the current customer in customer_email.php. Authenticated attackers can enumerate global sender alias IDs and read other customers&#39; allowed sender values by supplying arbitrary senderid parameters in delete confirmation requests.</p> <p>Froxlor before 2.3.7 fails to properly scope sender alias lookups to the current customer in customer_email.php. Authenticated attackers can enumerate global sender alias IDs and read other customers&#39; allowed sender values by supplying arbitrary senderid parameters in delete confirmation requests.</p> https://cve.radiocsirt.org/vuln/ghsa-wc79-h887-58h9 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1737 <p>Ein Angreifer kann mehrere Schwachstellen in Froxlor ausnutzen, um seine Privilegien zu erhöhen, um Informationen offenzulegen, um Dateien zu manipulieren, und um Sicherheitsvorkehrungen zu umgehen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Froxlor ausnutzen, um seine Privilegien zu erhöhen, um Informationen offenzulegen, um Dateien zu manipulieren, und um Sicherheitsvorkehrungen zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1737