28 matches found
Gitea AddTime Function DoS
The vulnerability of the AddTime function in the routers/api/v1/repo/issuetrackedtime.go file of the Git repository management system Gitea is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
CVE-2026-97647
A security vulnerability has been detected in ningzichun student-management-system up to 98760f5711cf6dc8b4adca53a9e207ca49b02ebf. This impacts an unknown function of the file user/editLog.php. Such manipulation of the argument sid/addtime/type/reason/detail/logdate leads to authorization bypass...
EUVD-2026-86495
A security vulnerability has been detected in ningzichun student-management-system up to 98760f5711cf6dc8b4adca53a9e207ca49b02ebf. This impacts an unknown function of the file user/editLog.php. Such manipulation of the argument sid/addtime/type/reason/detail/logdate leads to authorization bypass...
CVE-2026-97647 ningzichun student-management-system editLog.php authorization
A security vulnerability has been detected in ningzichun student-management-system up to 98760f5711cf6dc8b4adca53a9e207ca49b02ebf. This impacts an unknown function of the file user/editLog.php. Such manipulation of the argument sid/addtime/type/reason/detail/logdate leads to authorization bypass...
CVE-2026-97647 ningzichun student-management-system editLog.php authorization
A security vulnerability has been detected in ningzichun student-management-system up to 98760f5711cf6dc8b4adca53a9e207ca49b02ebf. This impacts an unknown function of the file user/editLog.php. Such manipulation of the argument sid/addtime/type/reason/detail/logdate leads to authorization bypass...
CVE-2026-97647
The ningzichun student-management-system (up to version 98760f5711cf6dc8b4adca53a9e207ca49b02ebf ) contains a security vulnerability in the user/editLog.php file. An attacker can perform a remote authorization bypass by manipulating specific arguments, including sid , addtime , type , reason , de...
CVE-2026-97647 ningzichun student-management-system editLog.php authorization
A security vulnerability has been detected in ningzichun student-management-system up to 98760f5711cf6dc8b4adca53a9e207ca49b02ebf. This impacts an unknown function of the file user/editLog.php. Such manipulation of the argument sid/addtime/type/reason/detail/logdate leads to authorization bypass...
CVE-2026-97647: Authorization Bypass Through User-Controlled Key
A security vulnerability has been detected in ningzichun student-management-system up to 98760f5711cf6dc8b4adca53a9e207ca49b02ebf. This impacts an unknown function of the file user/editLog.php. Such manipulation of the argument sid/addtime/type/reason/detail/logdate leads to authorization bypass...
CVE-2026-55984
A flaw was found in Gitea. An authenticated attacker could exploit a null pointer dereference within the AddTime API. This can lead to a denial of service DoS, making the application unavailable to legitimate users...
CVE-2026-55984
Null Pointer Dereference in AddTime API Causes Authenticated Denial of Service...
CVE-2026-55984 Null Pointer Dereference in AddTime API Causes Authenticated Denial of Service
Null Pointer Dereference in AddTime API Causes Authenticated Denial of Service...
CVE-2026-55984
A Null Pointer Dereference in the AddTime API of Gitea (specifically in gitea.dev) allows an authenticated user to cause a Denial of Service (DoS). The vulnerability is present in versions prior to v1.27.0 . Remediation involves upgrading to Gitea v1.27.0 , which includes fixes for this and other...
CVE-2026-55984 Null Pointer Dereference in AddTime API Causes Authenticated Denial of Service
Null Pointer Dereference in AddTime API Causes Authenticated Denial of Service...
CVE-2026-55984 Null Pointer Dereference in AddTime API Causes Authenticated Denial of Service
Null Pointer Dereference in AddTime API Causes Authenticated Denial of Service...
EUVD-2026-58139
Null Pointer Dereference in AddTime API Causes Authenticated Denial of Service...
SUSE CVE-2026-55984
Null Pointer Dereference in AddTime API Causes Authenticated Denial of Service...
GO-2026-6064 Gitea: Null Pointer Dereference in AddTime API Causes Authenticated Denial of Service in gitea.dev
Gitea: Null Pointer Dereference in AddTime API Causes Authenticated Denial of Service in gitea.dev...
PT-2026-65362
Gitea: Null Pointer Dereference in AddTime API Causes Authenticated Denial of Service in gitea.dev...
NULL Pointer Dereference
Overview Affected versions of this package are vulnerable to NULL Pointer Dereference in the AddTime when a non-existent user name is specified in the API request. An attacker can cause the application to panic and disrupt service availability by sending a crafted request with an invalid user nam...
NULL Pointer Dereference
Overview Affected versions of this package are vulnerable to NULL Pointer Dereference in the AddTime when a non-existent user name is specified in the API request. An attacker can cause the application to panic and disrupt service availability by sending a crafted request with an invalid user nam...