Koillection through 1.8.4 Stored XSS via Datum File Attachment Uploads
CVE-2026-110101
Koillection through 1.8.4 contains a stored cross-site scripting vulnerability that allows authenticated users to upload
#advisory
共收录 23043 条相关情报。
← 返回所有主题Jorani before 1.0.4 Missing Authorization and SSRF via Contracts::import()
CVE-2026-110100
Jorani before 1.0.4 contains a missing authorization vulnerability in Contracts::import() that allows any authenticated
Jorani before 1.0.4 Missing Authorization in HR Export Actions
CVE-2026-110099
Jorani before 1.0.4 contains a missing authorization vulnerability in the Hr controller's exportLeaves, exportOvertime a
Jorani before 1.0.4 Insecure Direct Object Reference in Leave and Overtime Requests
CVE-2026-110098
Jorani before 1.0.4 contains an insecure direct object reference vulnerability that allows authenticated users to modify
Ikaros 1.2.0 through 1.2.5 TOTP Authentication Bypass via Temp Token
CVE-2026-110097
Ikaros 1.2.0 through 1.2.5 contains an authentication bypass vulnerability that allows attackers with a valid password t
Podman: The `podman run` command can be instructed to disable almost all sandboxing by image annotation
CVE-2026-94603
Podman is a tool for managing OCI containers and pods. From 4.4.0 until 5.8.8 and 6.1.3, podman run treats an image carr
Frappe: Possibility of SQL injection in reportview
CVE-2026-55823
Frappe is a full-stack web application framework. Prior to 16.23.0, the get_count() method in reportview composes a coun
Frappe: Open Redirect via Unsanitized OAuth State Param.
CVE-2026-66057
Frappe is a full-stack web application framework. Prior to 15.116.0 and 16.29.0, the OAuth login flow uses an unsanitize
GPAC AIT Parser ait.c gf_m2ts_decode_ait out-of-bounds write
CVE-2026-109827
A vulnerability has been found in GPAC up to 26.07.0. This vulnerability affects the function gf_m2ts_decode_ait of the
Bluetooth HFP AG reuses a connection slot while a delayable work item is still armed, corrupting kernel timeout bookkeeping
CVE-2026-19940
The Bluetooth Classic Hands-Free Profile Audio Gateway implementation in subsys/bluetooth/host/classic/hfp_ag.c keeps it
Bluetooth Classic AVDTP: stale timeout work on signalling-channel disconnect leads to kernel timeout-list corruption
CVE-2026-19939
The AVDTP signalling layer arms a 6-second command timeout (AVDTP_TIMEOUT) in avdtp_send_cmd() whenever the local device
JumpServer: Ansible Automation Template Rendering Allows Unsafe Lookup Plugin Invocation
CVE-2026-104126
JumpServer is an open source bastion host and an operation and maintenance security audit system. Prior to 4.10.17-lts,
OpenCATS: Authenticated RCE in the Import module
CVE-2026-54454
OpenCATS is an open-source applicant tracking system and recruitment CRM for staffing agencies and hiring teams. Prior t
Squid Request Smuggling in HTTP Transfer-Encoding
CVE-2026-61642
Squid is a caching proxy for the Web. From 3.3.0.1 to before 7.6, due to an improper enforcement of behavioral workflow
unstructured: Stored XSS via unescaped HTML generation
CVE-2026-104250
The unstructured library provides open-source components for ingesting and pre-processing images and text documents, suc
Argo CD: AppProject destination-namespace and resource restrictions bypassed by PreDelete/PostDelete resource hooks
CVE-2026-77459
Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 2.10.0 until 3.3.15, 3.4.10, 3.5.4, and 3
FrankenPHP: Docker images serve phpinfo() as the default index.php, leaking environment variables
CVE-2026-85733
FrankenPHP is a modern application server for PHP. Prior to 1.12.5, the official FrankenPHP Debian and Alpine Docker ima
FrankenPHP: Cross-request PHP session ID leak in worker mode when the session extension is a shared module
CVE-2026-82416
FrankenPHP is a modern application server for PHP. Prior to 1.12.5, FrankenPHP worker mode can retain PHP session state
RClone Manager: Unauthenticated RClone Daemon Enables Remote Attack via Malicious Web Page
CVE-2026-55183
RClone Manager is a cross-platform GUI application designed to help users manage Rclone remotes efficiently. Prior to 0.
Cronicle: Stored XSS in admin Activity Log via account full_name field
CVE-2026-55562
Cronicle is a multi-server task scheduler and runner, with a web based front-end UI. Prior to 0.9.119, the administrator