5 matches found
CVE-2026-52825
Kimai , an open-source time tracking application, contains an improper authorization flaw in its Team assignment APIs. Prior to 2.58.0 , the endpoints POST /api/teams/{id}/members/{userId} and POST /api/teams/{id}/activities/{activityId} verified only that a Teamlead could edit the team, without ...
5.3CVSS5.7AI score0.0027EPSS
SaveExploits0References5
EUVD-2005-1070
Malware in sbrugna...
7.5CVSS6.4AI score0.01219EPSS
SaveExploits0References4
CVE-2005-1067
CVE-2005-1067 describes a local privilege escalation in the Access_user Class prior to version 1.75, where an attacker can gain access as another user using the password “new.” The connected documents confirm this vulnerability but do not provide vendor/product specifics, affected versions beyond...
7.5CVSS7AI score0.01219EPSS
SaveExploits0References3Affected Software1
20