Kimai before 2.62.0 fails to validate create_other_timesheet permission in the QuickEntry...
CVE-2026-80193
Kimai before 2.62.0 fails to validate create_other_timesheet permission in the QuickEntry controller when creating new t
#advisory
共收录 23717 条相关情报。
← 返回所有主题StarRocks performs no privilege check when a legacy synchronous materialized view is dropped....
CVE-2026-80346
StarRocks performs no privilege check when a legacy synchronous materialized view is dropped. Every other statement type
MariaDB has possible SQL injection in Buffer parameter escaping under big5/gbk/sjis/cp932/gb18030 client charsets
CVE-2026-55855
### Summary A SQL injection is possible when the connector escapes Buffer parameters client-side under a multi-byte cli
RestrictedPython guard hooks can be shadowed via positional-only arguments
CVE-2026-55830
### Impact RestrictedPython rewrites sensitive operations to go through guard hooks. Attribute access becomes `_getattr
org.mariadb:r2dbc-mariadb vulnerable to cleartext password disclosure to a man-in-the-middle server (clear-text auth plugins not gated on a secure transport)
CVE-2026-55860
### Summary The connector does not gate clear-text password authentication plugins on transport encryption. A hostile o
org.mariadb:r2dbc-mariadb has Inappropriate Encoding for Output Context and Improper Encoding or Escaping of Output
CVE-2026-55859
### Summary The connector encodes and decodes all character data assuming the connection character set is UTF-8. A serv
org.mariadb.jdbc:mariadb-java-client has Inappropriate Encoding for Output Context
CVE-2026-55858
### Summary The connector encodes and decodes all character data assuming the connection character set is UTF-8. A serv
org.mariadb.jdbc:mariadb-java-client has Cleartext Transmission of Sensitive Information and Insufficiently Protected Credentials
CVE-2026-55857
### Summary When PAM (dialog) authentication is used, the connector can be coerced into sending the account password in
MariaDB has cleartext password disclosure to a MITM on the initial-handshake
CVE-2026-55856
### Summary When a Java application connects with sslMode=verify-full (or verify-ca) and a password but does not pin a
Snipe-IT has an Improper Privilege Management issue
CVE-2026-55843
## Impact The `update()` method in `UsersController` passes the `permission` request field unconditionally to `Normaliz
MapFish Print has XXE that allows reading arbitrary files of certain types
CVE-2026-55848
### Summary XXE on MapFish Print allows reading arbitrary files of certain types. Eg /etc/passwd or k8 secrets and certs
free5GC AUSF uses non-constant-time authentication comparisons and logs XRES* in 5G-AKA
CVE-2026-55785
### Summary The AUSF component of free5GC compares authentication response values with normal Go equality helpers inste
free5GC AUSF authentication contexts can be overwritten by concurrent requests for the same SUPI
CVE-2026-55784
### Summary The AUSF component of free5GC stores per-subscriber authentication state in a global `sync.Map` keyed only
silverstripe/versioned has XSS in archive admin restore
CVE-2026-55779
### Impact It's possible to use the page title as an XSS vector when restoring a page in ArchiveAdmin ### Reporter Stev
SeaweedFS: Path traversal in the S3 gateway X-Amz-Copy-Source header allows cross-bucket object read
CVE-2026-55874
### Summary The SeaweedFS S3 API gateway did not reject `..` path segments in the `X-Amz-Copy-Source` header used by `Co
SeaweedFS: Improper authorization in the S3Tables / Iceberg REST management API lets a low-privileged S3 user enumerate administrator-owned table buckets
CVE-2026-55873
### Summary SeaweedFS routes requests signed with SigV4 service `s3tables` to the S3Tables management API. Authorization
Graylog token revocation endpoint allows authenticated users to delete other users’ access tokens
CVE-2026-55867
### Impact Graylog contains an insecure direct object reference (IDOR) vulnerability in the token revocation endpoint.
Fortigate syslog message parser can be exploited to modify or delete fields from the original message
CVE-2026-55841
### Impact A security issue has been identified in Graylog affecting the parsing of syslog messages that use a key-valu
klever-go: SFT add-quantity `int64` overflow bypasses a finite per-nonce MaxSupply
CVE-2026-55764
## Summary On the SFT add-quantity path the only supply bound is `SFTAddCirculation`, which does `meta.Circulation += am
MariaDB has Cleartext Transmission of Sensitive Information and Insufficiently Protected Credentials
CVE-2026-55854
### Summary When PAM (dialog) authentication is used, the connector can be coerced into sending the account password in