Flowintel Fails to Invalidate Active Sessions After Password Change
CVE-2026-81826
Affected versions of Flowintel do not revoke existing authenticated sessions when a user’s password is changed. This m
2026-08-28 归档
今日共收录 1697 条安全情报，包含 762 个 CVE，507 篇安全通告，以及 120 篇研究论文。
← 返回归档列表Flowintel HTML Injection in MISP Case History Timeline via Crafted Object Attributes
CVE-2026-81820
Affected versions of Flowintel construct timeline HTML using attacker-controllable MISP object fields such as: *
CVE-2026-79653
CVE-2026-79653
In Eclipse SW360 versions 19.0.0, 19.1.0, 19.2.0, 20.0.0, 20.1.0, if the system is configured to use file system storage
Arbitrary File Overwrite via Symlink Following in dool project
CVE-2026-56651
Dool in versions up to 1.3.8 is vulnerable to symlink following when the "--devel" flag is used, as the application open
Formula Injection in dool project
CVE-2026-56652
Dool in versions up to 1.3.8 is vulnerable to a CSV injection vulnerability when exporting data to a CSV file, as it fai
Flowintel Missing Authorization Allows Regular API Users to View Other Users’ Task Assignments
CVE-2026-81819
Affected versions of Flowintel expose the /my_assignment/user API endpoint to any authenticated API user. The endpoint a
Flowintel Organization Administrator Can Reset Full Administrator Password and Escalate Privileges
CVE-2026-81818
Affected versions of Flowintel contain an authorization flaw in the administrative user-edit API. The existing authori
Volmarg Personal Management System Path Traversal via get-file Endpoint
CVE-2026-40526
Volmarg Personal Management System contains a path traversal vulnerability that allows authenticated attackers to read a
Flowintel Missing Task-to-Case Authorization Allows Cross-Case Task Modification
CVE-2026-81817
Affected versions of Flowintel contain an insecure direct object reference / broken object-level authorization issue acr
In the Linux kernel, the following vulnerability has been resolved: hwmon: (occ) unregister sysfs devices outside occ lock occ_active(false) and occ_shutdown() unregister sysf...
CVE-2026-80660
In the Linux kernel, the following vulnerability has been resolved: hwmon: (occ) unregister sysfs devices outside occ l
An integer underflow vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to create a Denial of Service (DoS) condition in VPN proce...
CVE-2026-78011
An integer underflow vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker t
A stack-based buffer overflow vulnerability in the WatchGuard Fireware OS iked process iallows a remote unauthenticated attacker to create a Denial of Service (DoS) condition in...
CVE-2026-78010
A stack-based buffer overflow vulnerability in the WatchGuard Fireware OS iked process iallows a remote unauthenticated
An out-of-bounds read vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to create a Denial of Service (DoS) condition in VPN proc...
CVE-2026-78009
An out-of-bounds read vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker
An out-of-bounds read vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to create a Denial of Service (DoS) condition in VPN proc...
CVE-2026-19317
An out-of-bounds read vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker
A double-free vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to create a Denial of Service (DoS) condition in VPN processing b...
CVE-2026-19316
A double-free vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to creat
An integer underflow vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to create a Denial of Service (DoS) condition in VPN proce...
CVE-2026-19314
An integer underflow vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker t
Ebyte gateway product's vendor configuration utility does not require authentication before allowing certain disruptive administrative actions when default credentials remain ...
CVE-2026-77977
Ebyte gateway product's vendor configuration utility does not require authentication before allowing certain disruptive
A cleartext transmission of sensitive information vulnerability exists in certain Ebyte gateway products. The web management interface does not adequately protect sensitive co...
CVE-2026-73809
A cleartext transmission of sensitive information vulnerability exists in certain Ebyte gateway products. The web manag
FastGPT is an open-source LLM platform for building AI applications on a knowledge base. In versions prior to 4.15.2, the WeChat (iLink) share-channel endpoints authorize reques...
CVE-2026-68929
FastGPT is an open-source LLM platform for building AI applications on a knowledge base. In versions prior to 4.15.2, th
Ceph is an open-source distributed storage platform providing object, block, and file storage. In versions prior to 20.2.4 and 19.2.6, the Ceph Object Gateway (RGW) SigV4 handle...
CVE-2026-54330
Ceph is an open-source distributed storage platform providing object, block, and file storage. In versions prior to 20.2