Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: kuaifan Clear all filters
TI-2026-75426 CVE-2026-111640 · GHSA-mhf9-f2rf-r32c

Missing authorization in DooTask OKR comment dialogs

Priority MEDIUM 57

DooTask through 1.9.66 contains a missing authorization vulnerability in WebSocketDialog::checkDialog() that skips the membership check for dialogs with group_type 'okr'.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00288 Published 2026-10-16 No fix listed CWE-639
TI-2019-10958 CVE-2019-14746 · GHSA-7r82-qff2-hhcm

A issue was discovered in KuaiFanCMS 5.0.

Priority MEDIUM 44

A issue was discovered in KuaiFanCMS 5.0.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01212 Published 2019-08-07 No fix listed CWE-94