Improper preservation of SQL mode when renaming databases in cPanel allows execution of SQL in...
CVE-2026-58048
Improper preservation of SQL mode when renaming databases in cPanel allows execution of SQL in root context.
#severity:critical
共收录 1468 条相关情报。
← 返回所有主题The fix for CVE-2026-12045 in pgAdmin 4 9.16 required the LLM-supplied query passed to the AI...
CVE-2026-17351
The fix for CVE-2026-12045 in pgAdmin 4 9.16 required the LLM-supplied query passed to the AI Assistant's execute_sql_qu
/misc/workspace/adhoc_connect_server, part of the Workspaces feature introduced in pgAdmin 4 9.0,...
CVE-2026-17349
/misc/workspace/adhoc_connect_server, part of the Workspaces feature introduced in pgAdmin 4 9.0, when passed the id of
pgAdmin 4's Import/Export Data tool builds a psql \copy (...) command line by interpolating a...
CVE-2026-17566
pgAdmin 4's Import/Export Data tool builds a psql \copy (...) command line by interpolating a user-supplied SQL query in
vault-addr annotation SSRF -- webhook makes outbound HTTP call to attacker URL during admission; vault-serviceaccount enables cluster-wide SA token theft via TokenRequest API
CVE-2026-54725
## Summary The vault-secrets-webhook reads the `vault.security.banzaicloud.io/vault-addr` annotation from any ConfigMap
Wings exposes node configuration secrets through egg configuration-file templating
CVE-2026-52855
### Impact **Type:** Exposure of sensitive information / insufficiently protected credentials leading to privilege esca
Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could...
CVE-2026-48449
Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could result in arbitrary code
Logging operator has Fluentd configuration injection that allows remote code execution
CVE-2026-54680
### Summary The Fluentd configuration renderer in Logging operator writes strings from CRDs such as `Flow` directly int
prebid-server's request forgery vulnerability allows for possible host environment data extraction
CVE-2026-54735
### Impact Certain bidder adapters accept user-supplied parameters that are interpolated into outbound request URLs. Wit
@hypequery/clickhouse has SQL Injection in parameter escaping that allows arbitrary SQL execution
CVE-2026-54658
### Impact A SQL injection vulnerability exists in the `escapeValue()` function used for parameter substitution. Attack
goshs --no-delete WebDAV MOVE bypass allows file deletion/overwrite
CVE-2026-64863
## Summary The WebDAV mode-flag guard added to fix GHSA-3whc-qvhv-xqjp still does not enforce `--no-delete` on the WebD
goshs SFTP authentication bypass via empty password (incomplete fix of CVE-2026-40884)
CVE-2026-62325
## Summary Start goshs v2.1.3 with `-b 'admin:' -sftp`. No `-fkf`. SFTP accepts connections without password. CVE-2026-
IBM Aspera Desktop App 1.0.5 through 1.0.19 IBM Aspera for desktop can allow files to be written...
CVE-2026-14973
IBM Aspera Desktop App 1.0.5 through 1.0.19 IBM Aspera for desktop can allow files to be written outside of the user's s
IBM WebSphere Application Server 9.0, and 8.5 traditional is vulnerable to pre-authentication...
CVE-2026-14512
IBM WebSphere Application Server 9.0, and 8.5 traditional is vulnerable to pre-authentication unsafe deserialization whi
IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to broken access control/privilege...
CVE-2026-14446
IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to broken access control/privilege escalation in the adminis
IBM Aspera Faspex 5 5.0.0 through 5.0.15.4 could allow a remote authenticated attacker to execute...
CVE-2026-14958
IBM Aspera Faspex 5 5.0.0 through 5.0.15.4 could allow a remote authenticated attacker to execute arbitrary code due to
IBM Aspera Faspex 5 5.0.0 through 5.0.15.4 could allow a remote authenticated attacker to execute...
CVE-2026-14959
IBM Aspera Faspex 5 5.0.0 through 5.0.15.4 could allow a remote authenticated attacker to execute arbitrary code due to
A SQL Injection in the Giving Reports functionality in Ellucian Advance Web and Legacy Advance...
CVE-2026-6881
A SQL Injection in the Giving Reports functionality in Ellucian Advance Web and Legacy Advance allows an authenticated a
When applying replicated changes for a row that is missing one or more columns, pglogical...
CVE-2026-50737
When applying replicated changes for a row that is missing one or more columns, pglogical evaluates the affected table's
The pglogical queue mechanism, used to convey out-of-band commands such as replicated DDL from a...
CVE-2026-50736
The pglogical queue mechanism, used to convey out-of-band commands such as replicated DDL from a publisher to a subscrib