68571 matches found
CVE-2026-73679
ImpressCMS contains an authenticated remote code execution vulnerability in the custom tag module that allows authenticated administrators to execute arbitrary PHP code by storing a malicious payload in a custom tag with PHP type enabled. The application decodes HTML-encoded content via...
CVE-2026-73679 ImpressCMS Authenticated RCE via PHP Custom Tag eval()
ImpressCMS contains an authenticated remote code execution vulnerability in the custom tag module that allows authenticated administrators to execute arbitrary PHP code by storing a malicious payload in a custom tag with PHP type enabled. The application decodes HTML-encoded content via...
CVE-2026-19870
Authorization Bypass Through User-Controlled Key in the payroll module in Roskus Prospero Flow CRM before 5.15.10 allows authenticated users holding the read payroll permission to view the salary and banking details of employees of any other company in the instance, and users holding the create...
CVE-2026-19870
The CVE-2026-19870 entry concerns Roskus Prospero Flow CRM (vendor Roskus) prior to version 5.15.10. It is an IDOR in the payroll module where authenticated users with read payroll permission can view salary and banking details of employees from other companies, and users with create payroll perm...
CVE-2026-19870
Authorization Bypass Through User-Controlled Key in the payroll module in Roskus Prospero Flow CRM before 5.15.10 allows authenticated users holding the read payroll permission to view the salary and banking details of employees of any other company in the instance, and users holding the create...
EUVD-2026-58621
Authorization Bypass Through User-Controlled Key in the payroll module in Roskus Prospero Flow CRM before 5.15.10 allows authenticated users holding the read payroll permission to view the salary and banking details of employees of any other company in the instance, and users holding the create...
GO-2026-5766 vulnerabilities
Vulnerabilities for packages: temporal-fips, temporal...
GO-2024-2907 vulnerabilities
Vulnerabilities for packages: nuclei...
GO-2024-3130 vulnerabilities
Vulnerabilities for packages: juicefs...
GO-2022-0368 vulnerabilities
Vulnerabilities for packages: juicefs...
GO-2020-0015 vulnerabilities
Vulnerabilities for packages: k3d, vt-cli...
GO-2025-3632 vulnerabilities
Vulnerabilities for packages: cilium-fips, cilium...
GO-2025-3633 vulnerabilities
Vulnerabilities for packages: cilium-fips, cilium...
GO-2023-1795 vulnerabilities
Vulnerabilities for packages: skaffold, aactl...
GO-2023-2334 vulnerabilities
Vulnerabilities for packages: spire-server, bank-vaults-fips, slsa-verifier, flux-kustomize-controller, tekton-chains, cosign-fips, flux-source-controller, rekor, falcoctl-fips, aactl, oauth2-proxy, argo-workflows, cosign, gitsign, tkn, spire-server-fips, kots, cloudflared, kubescape,...
GO-2025-3848 vulnerabilities
Vulnerabilities for packages: splunk-otel-collector...
GO-2023-1785 vulnerabilities
Vulnerabilities for packages: hubble-ui...
GO-2026-5421 vulnerabilities
Vulnerabilities for packages: falco-no-driver...
CVE-2026-19785
A vulnerability has been found in francoisjacquet RosarioSIS up to 12.7.4. This vulnerability affects unknown code of the file modules/Students/includes/Medical.inc.php of the component Student Medical Module. Such manipulation of the argument table leads to sql injection. The attack may be...