Budibase server before 3.45.0 Cross-Tenant Information Disclosure
CVE-2026-100688
Budibase server before 3.45.0 contains a cross-tenant information disclosure vulnerability in the GET /api/applications/
2026-09-27 归档
今日共收录 1038 条安全情报，包含 222 个 CVE，481 篇安全通告，以及 74 篇研究论文。
← 返回归档列表Budibase Server before 3.45.0 Credential Exposure via External Table Broadcast
CVE-2026-100687
Budibase Server before 3.45.0 fails to redact plaintext datasource credentials before broadcasting external table update
Budibase before 3.45.0 Cross-Workspace Privilege Escalation via POST /api/global/groups/:groupId/apps
CVE-2026-100686
Budibase versions before 3.45.0 fail to validate per-app authorization in the POST /api/global/groups/:groupId/apps endp
Budibase before 3.45.0 SQL Injection via column-rename DDL
CVE-2026-100683
Budibase (@budibase/server) before 3.45.0 builds MySQL and MSSQL column-rename DDL in packages/backend-core/src/sql/sqlT
Budibase Server before 3.45.0 Arbitrary File Write via ZIP Symlink
CVE-2026-100682
Budibase Server before 3.45.0 contains an arbitrary file write vulnerability in the PWA icon upload endpoint that extrac
Budibase before 3.45.0 SSRF and OAuth Token Exfiltration via Teams Webhook
CVE-2026-100681
Budibase before 3.45.0 contains an unauthenticated server-side request forgery and credential exfiltration vulnerability
Budibase before 3.45.0 Arbitrary Local File Read via OpenAPI Import
CVE-2026-100680
Budibase versions before 3.45.0 fail to disable external JSON reference resolution in the OpenAPI/Swagger import validat
stoatchat before 0.15.5 MFA Bypass via Cross-Account Ticket
CVE-2026-100679
stoatchat before 0.15.5 fails to validate that MFA tickets belong to the authenticated user, allowing attackers to bypas
stoatchat before 0.15.5 MFA Brute Force via Insufficient Rate Limiting
CVE-2026-100678
stoatchat before 0.15.5 fails to enforce account-level attempt limits on MFA login challenges, allowing attackers who kn
stoatchat before 0.15.5 Account Enumeration via Error Location
CVE-2026-100677
stoatchat before 0.15.5 contains an account enumeration vulnerability in the login endpoint that exposes source file loc
stoatchat before 0.15.5 Local Filesystem Read via SVG
CVE-2026-100676
January, the media proxy/embed service of stoatchat (stoatchat/stoatchat), before version 0.15.5 improperly resolves SVG
stoatchat before 0.15.5 Username Validation Bypass via Unicode Sanitization
CVE-2026-100674
stoatchat before 0.15.5 fails to revalidate usernames after Unicode sanitization, allowing attackers to create usernames
Grav Data Manager before 1.4.5 Stored XSS via item-detail view
CVE-2026-100673
The Grav Data Manager plugin (getgrav/grav-plugin-datamanager) versions 1.0.1 through 1.4.4 render stored data entries i
Grav CMS 2.0.14 through 2.0.24 Privilege Escalation via Blueprint Guard Bypass
CVE-2026-100670
Grav CMS 2.0.14 through 2.0.24 contains a privilege escalation vulnerability in the group and account blueprints. The ac
Grav before 2.0.25 Sensitive File Disclosure via Case-Variation Bypass
CVE-2026-100669
Grav before 2.0.25 ships web server configuration samples whose access-control deny rules are matched case-sensitively.
Grav before 2.0.25 Sandbox Escape via array Filter
CVE-2026-100668
Grav 2.0.0 through 2.0.24 contain a Twig content sandbox escape. The `array` filter (and its identical function form) is
Netty 4.2.0 through 4.2.17 Response Desynchronization via HttpServerCodec
CVE-2026-100666
Netty's HttpServerCodec (io.netty:netty-codec-http) in versions 4.2.0.Final through 4.2.16.Final and in versions up to a
Netty 4.2.11 through 4.2.17 QUIC Hostname Verification Bypass
CVE-2026-100665
Netty versions from 4.2.11.Final before 4.2.18.Final contain an incomplete hostname verification fix in the QUIC certifi
Netty HTTP/3 QPACK encoder-stream unbounded memory exhaustion DoS
CVE-2026-100662
Netty's HTTP/3 codec (io.netty:netty-codec-http3) versions 4.2.0.Final through 4.2.17.Final contain an uncontrolled reso
Netty HTTP/3 QPACK Prefixed Integer DoS via Unbounded Accumulation
CVE-2026-100661
Netty's HTTP/3 codec (io.netty:netty-codec-http3) versions 4.2.0.Final through 4.2.17.Final contain a denial-of-service