共收录 22911 条相关情报。
← 返回所有主题CVE-2026-78402
Stack-based buffer overflow and out-of-bounds write vulnerability in Thales Sentinel Keys Server on Windows allows Overf
CVE-2026-119730
Maxthon Browser for Android before 7.5.8.103 contains an address bar spoofing vulnerability that allows remote attackers
CVE-2026-116252
pgAdmin 4's materialized view refresh passed the target database's name to psql's --dbname argument unchanged. libpq tre
CVE-2026-116251
pgAdmin 4 did not invalidate a user's existing sessions when their password changed, either through the user's own chang
CVE-2026-116250
In server mode pgAdmin 4 validates a path a user gives for a file in their storage directory with check_access_permissio
CVE-2026-116249
In server mode pgAdmin 4 resolves a server's password file, SSL certificate, key, CRL and SSH tunnel identity file relat
CVE-2026-116248
In pgAdmin 4 server mode only administrators are meant to share a server with all users; the server dialog shows the Sha
CVE-2026-116247
When a server in pgAdmin 4 had no password file, client certificate or client key configured, or the configured one coul
CVE-2026-116246
To pass a server's password to psql and to the utilities pgAdmin 4 runs as background processes, the server manager wrot
CVE-2026-116245
libpq looks a connection service up in the service file of the operating-system account running pgAdmin 4, and an entry
CVE-2026-116244
When a pgAdmin 4 connection was not meant to use a Kerberos user's delegated credentials, pgAdmin removed KRB5CCNAME fro
CVE-2026-116243
pgAdmin 4 runs pg_dump, pg_restore, pg_dumpall and psql from the binary path a user sets in their preferences. In server
CVE-2026-116242
pgAdmin 4 opens SSH tunnels with the sshtunnel library but gave it neither host_pkey_directories nor ssh_config_file, so
CVE-2026-116241
pgAdmin 4's Import/Export Data tool wraps a user's query export in a psql \copy (...) TO command and checks that the que
CVE-2026-116240
In server mode pgAdmin 4 validates a path into the user's storage directory with check_access_permission(), which builds
CVE-2026-116239
In server mode pgAdmin 4 keeps an account per authentication source, so the same username can exist as, for example, an
CVE-2026-116238
In server mode pgAdmin 4 locks an internal account after MAX_LOGIN_ATTEMPTS failed logins (3 by default). The limit coul
CVE-2026-115830
In Secret Server versions earlier than 12.3.1, a user under certain conditions could submit an unsigned JWT and receive
CVE-2026-115829
In Secret Server versions earlier than 12.3.1, a user could bypass the initial login step and authenticate by successful
CVE-2026-115828
In Secret Server versions earlier than 12.3.1, Secret Server did not always validate the PIN or biometric check when usi