Improper Authentication vulnerability in Apache Tomcat meant that in some circumstances (e.g....
CVE-2026-68569
Improper Authentication vulnerability in Apache Tomcat meant that in some circumstances (e.g. CLIENT-CERT, SPNEGO) that
#advisory
共收录 23507 条相关情报。
← 返回所有主题A SQL injection vulnerability in the country-code lookup endpoint in GazellePW (GazellePosterWall...
CVE-2026-38468
A SQL injection vulnerability in the country-code lookup endpoint in GazellePW (GazellePosterWall) commit 86c4bedf727691
GazellePW (GazellePosterWall) commit 86c4bedf727691b5a97af42a4864869d18446449 suffers from a...
CVE-2026-38474
GazellePW (GazellePosterWall) commit 86c4bedf727691b5a97af42a4864869d18446449 suffers from a Broken access control vulne
A Stored XSS vulnerability in the custom bonus title feature in GazellePW (GazellePosterWall)...
CVE-2026-38469
A Stored XSS vulnerability in the custom bonus title feature in GazellePW (GazellePosterWall) commit 86c4bedf727691b5a97
A Stored XSS vulnerability in the subtitle deletion flow in GazellePW (GazellePosterWall) commit...
CVE-2026-38473
A Stored XSS vulnerability in the subtitle deletion flow in GazellePW (GazellePosterWall) commit 86c4bedf727691b5a97af42
A Stored XSS vulnerability in the torrent remaster custom title feature in GazellePW ...
CVE-2026-38466
A Stored XSS vulnerability in the torrent remaster custom title feature in GazellePW (GazellePosterWall) commit 86c4bedf
A Stored XSS vulnerability in the donor avatar mouse-over text feature in GazellePW ...
CVE-2026-38465
A Stored XSS vulnerability in the donor avatar mouse-over text feature in GazellePW (GazellePosterWall) commit 86c4bedf7
A Stored XSS vulnerability in forum reward comments in GazellePW (GazellePosterWall) commit...
CVE-2026-38472
A Stored XSS vulnerability in forum reward comments in GazellePW (GazellePosterWall) commit 86c4bedf727691b5a97af42a4864
A Broken access control vulnerability in the API user endpoint in GazellePW (GazellePosterWall)...
CVE-2026-38470
A Broken access control vulnerability in the API user endpoint in GazellePW (GazellePosterWall) commit 86c4bedf727691b5a
A SQL injection vulnerability in the tags manager in GazellePW (GazellePosterWall) commit...
CVE-2026-38467
A SQL injection vulnerability in the tags manager in GazellePW (GazellePosterWall) commit 86c4bedf727691b5a97af42a486486
Kimai before 2.56.0 Authorization Bypass via TimesheetVoter
CVE-2026-80202
Kimai before 2.56.0 does not enforce team-membership checks in TimesheetVoter::voteOnAttribute(), which maps permissions
Kimai before 2.53.0 API Token Leakage via Invoice Template
CVE-2026-80201
Kimai before 2.53.0 fails to block sensitive User methods in the Twig invoice template sandbox, allowing admins to call
Kimai before 2.53.0 Open Redirect via RelayState
CVE-2026-80200
Kimai before 2.53.0 contains an open redirect vulnerability in the SAML authentication success handler that accepts unva
Kimai before 2.54.0 Username Enumeration via Timing Oracle
CVE-2026-80199
Kimai before 2.54.0 contains a timing oracle vulnerability in TokenAuthenticator that allows unauthenticated attackers t
Kimai before 2.57.0 Improper Authorization via Favorite Endpoints
CVE-2026-80197
Kimai before 2.57.0 contains an improper authorization vulnerability in the favorite timesheet add and remove endpoints
Kimai before 2.58.0 Authentication Bypass via Password Reset Link
CVE-2026-80196
Kimai before 2.58.0 contains an authentication bypass vulnerability where password reset links remain valid after passwo
Kimai before 2.63.0 Team Membership Removal via API
CVE-2026-80195
Kimai before 2.63.0 contains a business logic / improper authorization vulnerability in the team update API endpoint (PA
Kimai before 2.64.0 Missing Authorization via ProjectViewController export
CVE-2026-80194
Kimai before 2.64.0 contains a missing authorization vulnerability in the ProjectViewController export route (report_pro
better-auth SSO before 1.6.27 Domain Ownership Authentication Bypass
CVE-2026-80192
@better-auth/sso before 1.6.27 (and before 1.4.8 in the 1.4.x line and before 1.7.0-rc.5 in the 1.7 prerelease line) con
LeafWiki 0.10.0 through 0.12.0 Uncontrolled Resource Consumption via Unbounded ZIP Extraction
CVE-2026-80189
LeafWiki extracts an uploaded ZIP archive without limiting how much data it will write. ZipExtractor.ExtractToDir in int