57009 matches found
SUSE CVE-2026-14671
Type confusion in PostgreSQL module "refint" allows an object creator to execute arbitrary code as the operating system user running the database. The fix for this emerged as a non-security bug report, and the fix appear in the git repository with subject "refint: Remove plan cache.", without a C...
CVE-2026-73679
ImpressCMS contains an authenticated remote code execution vulnerability in the custom tag module that allows authenticated administrators to execute arbitrary PHP code by storing a malicious payload in a custom tag with PHP type enabled. The application decodes HTML-encoded content via...
EUVD-2026-58789
ImpressCMS contains an authenticated remote code execution vulnerability in the custom tag module that allows authenticated administrators to execute arbitrary PHP code by storing a malicious payload in a custom tag with PHP type enabled. The application decodes HTML-encoded content via...
CVE-2026-73679
ImpressCMS has an authenticated remote code execution vulnerability in the custom tag module. The issue allows authenticated administrators to run arbitrary PHP by storing a payload in a custom tag with PHP type enabled. The application decodes HTML-encoded content via undoHtmlSpecialChars() and ...
CVE-2026-73679 ImpressCMS Authenticated RCE via PHP Custom Tag eval()
ImpressCMS contains an authenticated remote code execution vulnerability in the custom tag module that allows authenticated administrators to execute arbitrary PHP code by storing a malicious payload in a custom tag with PHP type enabled. The application decodes HTML-encoded content via...
CVE-2026-19870
Authorization Bypass Through User-Controlled Key in the payroll module in Roskus Prospero Flow CRM before 5.15.10 allows authenticated users holding the read payroll permission to view the salary and banking details of employees of any other company in the instance, and users holding the create...
CVE-2026-19870
The CVE-2026-19870 entry concerns Roskus Prospero Flow CRM (vendor Roskus) prior to version 5.15.10. It is an IDOR in the payroll module where authenticated users with read payroll permission can view salary and banking details of employees from other companies, and users with create payroll perm...
CVE-2026-19870
Authorization Bypass Through User-Controlled Key in the payroll module in Roskus Prospero Flow CRM before 5.15.10 allows authenticated users holding the read payroll permission to view the salary and banking details of employees of any other company in the instance, and users holding the create...
EUVD-2026-58621
Authorization Bypass Through User-Controlled Key in the payroll module in Roskus Prospero Flow CRM before 5.15.10 allows authenticated users holding the read payroll permission to view the salary and banking details of employees of any other company in the instance, and users holding the create...
GO-2026-5766 vulnerabilities
Vulnerabilities for packages: temporal, temporal-fips...
GO-2024-2907 vulnerabilities
Vulnerabilities for packages: nuclei...
GO-2020-0015 vulnerabilities
Vulnerabilities for packages: vt-cli, k3d...
GO-2022-0368 vulnerabilities
Vulnerabilities for packages: juicefs...
GO-2024-3130 vulnerabilities
Vulnerabilities for packages: juicefs...
GO-2025-3632 vulnerabilities
Vulnerabilities for packages: cilium, cilium-fips...
GO-2025-3633 vulnerabilities
Vulnerabilities for packages: cilium, cilium-fips...
GO-2023-2334 vulnerabilities
Vulnerabilities for packages: flux-kustomize-controller, timestamp-authority-fips, dex, argo-workflows, fulcio, slsa-verifier, oauth2-proxy, vexctl, cosign, kubescape, fulcio-fips, sops, spire-server-fips, terragrunt, cloudflared, spire-server, rekor, tkn, falcoctl-fips, kots, tekton-chains,...
GO-2023-1795 vulnerabilities
Vulnerabilities for packages: aactl, skaffold...
