112720 matches found
CVE-2026-19483: Insertion of Sensitive Information into Log File
IBM Storage Scale 5.2.3.0 through 5.2.3.8, and 6.0.0.0 through 6.0.1.0 Secrets may be disclosed in log files in IBM Storage Scale Management GUI The admin password is logged into the GUI log of IBM Storage Scale Systems Deploy and Upgrade from GUI. Secrets may be disclosed in information related ...
PT-2026-71868
Name of the Vulnerable Software and Affected Versions IBM Storage Scale versions 5.2.3.0 through 5.2.3.8 IBM Storage Scale versions 6.0.0.0 through 6.0.1.0 Description Sensitive information may be exposed within the log files of the IBM Storage Scale Management GUI. Specifically, the administrato...
CVE-2026-73670: Improper Neutralization of Special Elements used in an SQL Command
A CMS contains a SQL injection vulnerability in admin/dbdata.php at line 509 that allows authenticated administrators to inject arbitrary SQL into a SHOW COLUMNS FROM statement by supplying unsanitized input through the tablename GET or POST parameter. Attackers can perform table traversal,...
CVE-2026-73482: Cross-Site Request Forgery (CSRF)
phpList before 3.7.0-RC5 contains a cross-site request forgery CSRF vulnerability in lists/admin/admins.php. The administrator deletion action is triggered via an unauthenticated GET request ?page=admins&delete=N that is not protected by a CSRF token the central verifyCsrfGetToken check uses...
PT-2026-71524
Unauthenticated Cross Site Scripting XSS in Visitors Traffic Real Time Statistics = 8.11 versions...
PT-2026-71691
Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A CMS contains a SQL injection flaw in the 'admin/db data.php' endpoint. Authenticated administrators can inject arbitrary SQL into a SHOW COLUMNS FROM statement...
PT-2026-71704
CyberPanel before 3.0.0 contains a path traversal vulnerability that allows authenticated administrators to read arbitrary files from the server filesystem by supplying unsanitized file paths to the cloudAPI ReadReport endpoint. Attackers can manipulate the reportFile parameter in the JSON reques...
PT-2026-71883
Name of the Vulnerable Software and Affected Versions FreePBX versions 17.0.1 through 17.0.6 Description The Music on Hold module allows dangerous command-line options for /usr/bin/mpg123 and other permitted players within the validateCustomConfiguration function in Music.class.php. Because the...
Metabase 0.63.4 SQL Injection Checker
A vulnerability checker for an unauthenticated SQL injection vulnerability in Metabase versions 0.58.0 through 0.63.4. The vulnerability affects the password reset functionality and can allow a remote unauthenticated attacker to execute arbitrary SQL against the Metabase application database,...
CVE-2026-19710: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in SourceCodester Simple Student Information System. Affected by this vulnerability is an unknown functionality of the file app/admin/departments/viewdepartment.php. Performing a manipulation of the argument ID results in sql injection. The attack is possible to be carri...
PT-2026-71395
The Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Notification Smartcode Values in all versions up to, and including, 6.2.11 due to insufficient input sanitization and output escaping...
PT-2026-71689
Fluent Forms Pro 6.2.7 contains an embedded malicious code vulnerability introduced via a tampered plugin build served through a decommissioned update server. The tampered build introduced a rogue PHP file libs/class-license-sync.php, loaded via a require once directive added to fluentformpro.php...
CVE-2026-18750
vinny/views.py: ModifyEmailNotifications IDOR: view fetches VinceCommEmail by raw pk from URL and toggles emailfunction/name without checking the record's contact belongs to the requesting group-admin. Lets a vendor admin flip notification routing or read email/name for another vendor's contact...
GHSA-8WX9-J7J5-H9VP Duplicate Advisory: Localhost-trust admin bypass on auth-code-gated endpoints, with potential remote reachability via the fixed-port prox
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-3mp7-4rh5-jrv9. This link is maintained to preserve external references. Original Description SiYuan versions = v3.7.2 patched in v3.7.4 contain an authentication bypass vulnerability in the kernel's CheckAuth...
Duplicate Advisory: Localhost-trust admin bypass on auth-code-gated endpoints, with potential remote reachability via the fixed-port prox
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-3mp7-4rh5-jrv9. This link is maintained to preserve external references. Original Description SiYuan versions = v3.7.2 patched in v3.7.4 contain an authentication bypass vulnerability in the kernel's CheckAuth...
CVE-2026-18750 CVE-2026-18750
vinny/views.py: ModifyEmailNotifications IDOR: view fetches VinceCommEmail by raw pk from URL and toggles emailfunction/name without checking the record's contact belongs to the requesting group-admin. Lets a vendor admin flip notification routing or read email/name for another vendor's contact...
CVE-2026-18750 CVE-2026-18750
vinny/views.py: ModifyEmailNotifications IDOR: view fetches VinceCommEmail by raw pk from URL and toggles emailfunction/name without checking the record's contact belongs to the requesting group-admin. Lets a vendor admin flip notification routing or read email/name for another vendor's contact...
CVE-2026-18750
A Insecure Direct Object Reference (IDOR) vulnerability exists in the vinny/views.py file within the ModifyEmailNotifications view. The application fetches a VinceCommEmail object using a raw primary key (pk) provided in the URL but fails to verify if the record's contact belongs to the requestin...
CVE-2026-18750
vinny/views.py: ModifyEmailNotifications IDOR: view fetches VinceCommEmail by raw pk from URL and toggles emailfunction/name without checking the record's contact belongs to the requesting group-admin. Lets a vendor admin flip notification routing or read email/name for another vendor's contact...
CVE-2026-18750 CVE-2026-18750
vinny/views.py: ModifyEmailNotifications IDOR: view fetches VinceCommEmail by raw pk from URL and toggles emailfunction/name without checking the record's contact belongs to the requesting group-admin. Lets a vendor admin flip notification routing or read email/name for another vendor's contact...