85084 matches found
CVE-2026-75587 Plaintext pre-auth secret exposure via Desktop App diagnostics report
Mattermost Desktop App versions =6.2 6.2.2.0 fail to redact the pre-auth secret when generating a diagnostics report, which allows a local attacker with access to a user's diagnostics report or log files to obtain the plaintext pre-auth secret configured for a connected server via inspecting the...
CVE-2026-75587
Mattermost Desktop App versions =6.2 6.2.2.0 fail to redact the pre-auth secret when generating a diagnostics report, which allows a local attacker with access to a user's diagnostics report or log files to obtain the plaintext pre-auth secret configured for a connected server via inspecting the...
CVE-2026-75587
Mattermost Desktop App versions
CVE-2026-75587 Plaintext pre-auth secret exposure via Desktop App diagnostics report
Mattermost Desktop App versions =6.2 6.2.2.0 fail to redact the pre-auth secret when generating a diagnostics report, which allows a local attacker with access to a user's diagnostics report or log files to obtain the plaintext pre-auth secret configured for a connected server via inspecting the...
CVE-2026-65822 ERPNext: SQL Injection in "Inactive Customers" report via unvalidated `doctype` filter
ERPNext is a free and open source Enterprise Resource Planning tool. Prior to 15.116.0 and 16.23.0, erpnext/selling/report/inactivecustomers/inactivecustomers.py accepts an unvalidated doctype filter and interpolates it into raw SQL in getsalesdetails and getlastsalesamt, allowing an authenticate...
CVE-2026-65822 ERPNext: SQL Injection in "Inactive Customers" report via unvalidated `doctype` filter
ERPNext is a free and open source Enterprise Resource Planning tool. Prior to 15.116.0 and 16.23.0, erpnext/selling/report/inactivecustomers/inactivecustomers.py accepts an unvalidated doctype filter and interpolates it into raw SQL in getsalesdetails and getlastsalesamt, allowing an authenticate...
CVE-2026-75479 JimuReport Unauthenticated Report Listing and Share Token Disclosure
JimuReport contains an authentication bypass vulnerability in the report folder template listing endpoint that allows unauthenticated attackers to enumerate all reports and retrieve share tokens. Attackers can use disclosed share tokens to access protected report endpoints and retrieve full repor...
CVE-2026-75479 JimuReport Unauthenticated Report Listing and Share Token Disclosure
JimuReport contains an authentication bypass vulnerability in the report folder template listing endpoint that allows unauthenticated attackers to enumerate all reports and retrieve share tokens. Attackers can use disclosed share tokens to access protected report endpoints and retrieve full repor...
EUVD-2026-60391
JimuReport contains an authentication bypass vulnerability in the report folder template listing endpoint that allows unauthenticated attackers to enumerate all reports and retrieve share tokens. Attackers can use disclosed share tokens to access protected report endpoints and retrieve full repor...
CVE-2026-75479
JimuReport's report folder template listing endpoint lacks authentication, letting unauthenticated attackers enumerate all reports, harvest share tokens, then access protected endpoints to retrieve full report definitions including embedded SQL and live query data. CVSS 3.1 scores this HIGH (7.5)...
CVE-2026-75479 JimuReport Unauthenticated Report Listing and Share Token Disclosure
JimuReport contains an authentication bypass vulnerability in the report folder template listing endpoint that allows unauthenticated attackers to enumerate all reports and retrieve share tokens. Attackers can use disclosed share tokens to access protected report endpoints and retrieve full repor...
MINI-3C2G-R424-XFF6
Bulletin has no description...
CVE-2026-59903
creationtimestamp| type| source ---|---|--- 2026-08-17 19:31:21+00:00| seen| https://gist.github.com/alon710/53c9694ceb5875fbe39960b018952b7c 2026-09-20 05:20:11+00:00| seen| https://bsky.app/profile/gcpweekly.bsky.social/post/3mvwh6pl5ah2v 2026-09-20 05:20:13+00:00| seen|...
CVE-2026-72496
creationtimestamp| type| source ---|---|--- 2026-08-17 13:50:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtbttbdppn2t 2026-10-01 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20261002 2026-10-01 18:00:00+00:00|...
MINI-75X2-6G3G-CJ44
Bulletin has no description...
MINI-5X2J-G6RH-3CQ4
Bulletin has no description...
MINI-4JXG-4JFW-W59W
Bulletin has no description...
MINI-8JQM-663C-9WJ6
Bulletin has no description...
CVE-2026-74895
creationtimestamp| type| source ---|---|--- 2026-08-17 12:10:19+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtboauu7st2b 2026-08-17 12:48:05+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/5wvod3x3ygyvu 2026-08-17 19:10:04+00:00| seen|...