22972 matches found
CVE-2026-16627
GitLab CE/EE versions 19.2 before 19.2.2 are affected by a privilege escalation vulnerability caused by improper sanitization of HTML content rendered in a CI job modal. An authenticated user with developer-role permissions can exploit this under certain conditions to escalate privileges. The iss...
CVE-2026-18244
GitLab EE remediation: CVE-2026-18244 affects all GitLab EE versions 17.7–before 19.0.6, 19.1–before 19.1.4, and 19.2–before 19.2.2, where an authenticated user could view restricted group settings due to improper authorization checks on a group settings page. The CVSS 3.1 base score is 4.3 (Medi...
EUVD-2026-57391
GitLab has remediated an issue in GitLab EE affecting all versions from 17.7 before 19.0.6, 19.1 before 19.1.4, and 19.2 before 19.2.2 that under certain conditions could have allowed an authenticated user to view restricted configuration settings due to improper authorization checks on a group...
CVE-2026-18244 Missing Authorization in GitLab
GitLab has remediated an issue in GitLab EE affecting all versions from 17.7 before 19.0.6, 19.1 before 19.1.4, and 19.2 before 19.2.2 that under certain conditions could have allowed an authenticated user to view restricted configuration settings due to improper authorization checks on a group...
CVE-2026-17419 IBM i is Affected By Multiple Vulnerabilities in SQL
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to modify SQL tables due to improper neutralization of special elements used in an SQL command...
EUVD-2026-57359
IBM i 7.6, 7.5, 7.4, and 7.3 s vulnerable to privilege escalation via Navigator for i. An authenticated user could elevate privileges to a root user to execute commands...
CVE-2026-18713 IBM i is Affected By Multiple Vulnerabilities in Navigator for i
IBM i 7.6, 7.5, 7.4, and 7.3 s vulnerable to privilege escalation via Navigator for i. An authenticated user could elevate privileges to a root user to execute commands...
DEBIAN-CVE-2026-48550
Nagios Core before 4.5.14 and Nagios XI before 2026R1.7 are vulnerable to reflected cross-site scripting in cmd.cgi via the NagFormId parameter. An unauthenticated remote attacker can craft a malicious link that, when followed by an authenticated user, executes arbitrary JavaScript in the victim'...
CVE-2026-18683
IBM i 7.6, 7.5, 7.4, and 7.3 is vulnerable to privilege escalation via Navigator for i. An authenticated user could elevate privileges to a root user to execute commands...
CVE-2026-16694
IBM i 7.6, 7.5, 7.4, and 7.3 is vulnerable to stored cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...
EUVD-2026-57354
IBM i 7.6, 7.5, 7.4, and 7.3 is vulnerable to stored cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...
CVE-2026-16694 IBM i is Affected By Stored Cross-site Scripting for i
IBM i 7.6, 7.5, 7.4, and 7.3 is vulnerable to stored cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...
EUVD-2026-57347
IBM i 7.6, 7.5, 7.4, and 7.3 is vulnerable to privilege escalation via Navigator for i. An authenticated user could elevate privileges to a root user to execute commands...
CVE-2026-18683 IBM i is Affected By privilege escalation in Navigator for i
IBM i 7.6, 7.5, 7.4, and 7.3 is vulnerable to privilege escalation via Navigator for i. An authenticated user could elevate privileges to a root user to execute commands...
CVE-2026-18683
IBM i 7.6/7.5/7.4/7.3 are affected by CVE-2026-18683, a privilege-escalation flaw in Navigator for i. An authenticated user could elevate privileges to root and execute commands. Root cause involves improper access control in Navigator for i on IBM i. Affected components/versions: IBM i 7.3–7.6. ...
CVE-2026-70547
An authenticated user without repository read permission may access package metadata under specific conditions...
CVE-2026-68758
A low-privileged authenticated user may access restricted support information under specific conditions...
CVE-2026-59242
Apache Airflow vulnerability CVE-2026-59242: The XCom GET /api/v2/{...}/xcomEntries/{key}?deserialize=true endpoint can deserialize a string-literal payload via BaseXCom.deserialize_value without the _check_forbidden_xcom_keys guard, enabling an authenticated API user with XCom write-and-read acc...
