55624 matches found
CVE-2026-23922
The email media OAuth field 'Client secret' cannot be read after saving, but a Super Admin can leak it by setting a malicious 'Token endpoint'. Changes were made to reset the client secret upon changing the token endpoint...
UBUNTU-CVE-2026-23931
The frontend validatate.api.exists action can be exploited by authenticated users to extract plaintext user macro values leading to potential loss of confidentiality...
CVE-2026-74983
Mitigation bypass in the Data Loss Prevention component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1...
CVE-2026-75850
ArcadeDB before 26.8.1 fails to bind the authenticated principal setCurrentUser on its batch and time-series HTTP handlers. Because no principal is bound on the worker thread, the engine's fine-grained per-type ACL layer LocalBucket.checkPermissionsOnFile does not execute for these handlers. In...
CVE-2026-74903
SiYuan before v3.7.4 contains an insufficient access control vulnerability in the /api/lute/spinBlockDOM endpoint, which is guarded only by CheckAuth middleware instead of CheckAdminRole like its sibling endpoint. Authenticated users with RoleEditor or RoleReader roles can invoke the endpoint to...
EUVD-2026-60738
An authenticated user is able to cause disproportionate CPU load on the Frontend webserver by sending specifically crafted requests to the Frontend validate.api.exists action, leading to potential denial of service...
CVE-2026-23922
Zabbix contains a vulnerability in the email media OAuth configuration where the 'Client secret' field cannot normally be read after saving. However, a Super Admin can disclose (and modify) the client secret by setting a malicious Token endpoint . The fix resets the client secret whenever the tok...
EUVD-2026-60731
The email media OAuth field 'Client secret' cannot be read after saving, but a Super Admin can leak it by setting a malicious 'Token endpoint'. Changes were made to reset the client secret upon changing the token endpoint...
CVE-2026-23922 Email media OAuth secret leak to Super Admin
The email media OAuth field 'Client secret' cannot be read after saving, but a Super Admin can leak it by setting a malicious 'Token endpoint'. Changes were made to reset the client secret upon changing the token endpoint...
CVE-2026-23922 Email media OAuth secret leak to Super Admin
The email media OAuth field 'Client secret' cannot be read after saving, but a Super Admin can leak it by setting a malicious 'Token endpoint'. Changes were made to reset the client secret upon changing the token endpoint...
CVE-2026-23922
The email media OAuth field 'Client secret' cannot be read after saving, but a Super Admin can leak it by setting a malicious 'Token endpoint'. Changes were made to reset the client secret upon changing the token endpoint...
nightingale v9.1.1
Open-Source Alerting Expert English | δΈζ π― What is Nightingale Nightingale is an open-source monitoring project that focuses on alerting. Similar to Grafana, Nightingale also connects with various existing data sources. However, while Grafana emphasizes visualization, Nightingale places greater...
CVE-2026-75855
ArcadeDB versions before 26.8.1 do not sanitize database names in the POST /api/v1/server endpoint, allowing authenticated root users to supply ../ sequences for arbitrary file creation or recursive directory deletion. CVSS 8.7 HIGH; exploitation details not provided. Remediation is to upgrade to...
CVE-2026-75855 ArcadeDB before 26.8.1 Path Traversal via create/drop database
ArcadeDB versions before 26.8.1 fail to sanitize database names in the POST /api/v1/server endpoint's create database and drop database commands, allowing authenticated root users to write and delete arbitrary files outside the configured database directory. Attackers can supply database names...
EUVD-2026-60611
ArcadeDB before 26.8.1 fails to bind the authenticated principal setCurrentUser on its batch and time-series HTTP handlers. Because no principal is bound on the worker thread, the engine's fine-grained per-type ACL layer LocalBucket.checkPermissionsOnFile does not execute for these handlers. In...
CVE-2026-75850
ArcadeDB before 26.8.1 fails to bind the authenticated principal setCurrentUser on its batch and time-series HTTP handlers. Because no principal is bound on the worker thread, the engine's fine-grained per-type ACL layer LocalBucket.checkPermissionsOnFile does not execute for these handlers. In...
CVE-2026-75850
ArcadeDB before 26.8.1 contains a per-type ACL bypass in its batch and time-series HTTP handlers . The root cause is that the authenticated principal (setCurrentUser) is not bound on the worker thread, causing the engine's fine-grained ACL layer (LocalBucket.checkPermissionsOnFile) to be skipped ...
CVE-2026-75839
ArcadeDB com.arcadedb:arcadedb-server versions = 26.7.3 contain an insecure direct object reference IDOR vulnerability in the Raft cluster-info endpoints GetClusterHandler and PostBootstrapStateHandler, which authenticate but do not authorize access. On an ArcadeDB HA cluster only reachable when...
CVE-2026-75829 grav-plugin-api before 1.0.15 Twig SSTI via translate endpoint
grav-plugin-api versions before 1.0.15 fail to validate Twig content in the translate endpoint, allowing attackers with api.pages.write permission to persist pages with process.twig enabled. Attackers can submit crafted header and content parameters to execute server-side template injection...
CVE-2026-74903
SiYuan before v3.7.4 has an insufficient access control flaw in the /api/lute/spinBlockDOM endpoint, guarded only by CheckAuth middleware rather than CheckAdminRole like its sibling endpoint. Authenticated users with RoleEditor or RoleReader roles can invoke it to transform arbitrary DOM input, a...