CVE-2026-101006 Frappe HR Permission Validation __init__.py get_attendance_requests authorization

A flaw has been found in Frappe HR up to 16.15.0. This vulnerability affects the function getexpenseclaims/getshiftrequests/getattendancerequests of the file hrms/api/init.py of the component Permission Validation. This manipulation of the argument employee causes incorrect authorization. Remote...

EUVD-2026-88097

A flaw has been found in Frappe HR up to 16.15.0. This vulnerability affects the function getexpenseclaims/getshiftrequests/getattendancerequests of the file hrms/api/init.py of the component Permission Validation. This manipulation of the argument employee causes incorrect authorization. Remote...

CVE-2026-101006 Frappe HR Permission Validation __init__.py get_attendance_requests authorization

A flaw has been found in Frappe HR up to 16.15.0. This vulnerability affects the function getexpenseclaims/getshiftrequests/getattendancerequests of the file hrms/api/init.py of the component Permission Validation. This manipulation of the argument employee causes incorrect authorization. Remote...

postgresql: PostgreSQL: Arbitrary code execution via heap buffer overflow in regexp

A flaw was found in PostgreSQL. A heap buffer overflow vulnerability exists in the regexp component, which can be triggered by a query author providing text that does not pass encoding validation. This can lead to unanticipated data growth, allowing the attacker to execute arbitrary code as the...

postgresql: PostgreSQL: Arbitrary code execution via heap buffer overflow in regexp

A flaw was found in PostgreSQL. A heap buffer overflow vulnerability exists in the regexp component, which can be triggered by a query author providing text that does not pass encoding validation. This can lead to unanticipated data growth, allowing the attacker to execute arbitrary code as the...

postgresql: PostgreSQL: Arbitrary code execution via heap buffer overflow in regexp

A flaw was found in PostgreSQL. A heap buffer overflow vulnerability exists in the regexp component, which can be triggered by a query author providing text that does not pass encoding validation. This can lead to unanticipated data growth, allowing the attacker to execute arbitrary code as the...

proofcms

ProofCMS ProofCMS is a modular Python toolkit for detecting c...

CVE-2026-57836-Confluent_Kafka

CVE-2026-57836: confluent-kafka における HashiCorp Vault KMS の TLS 証明書検証の無効化 深刻度: High、CVSS 3.1 7.4 ベクター v3.1: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N 影響を受けるバージョン: confluent-kafka = 2.8.0, = 2.14.2 修正バージョン: 2.15.0 CWE: CWE-295 不適切な証明書検証 コンポーネント:...

crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption

A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security TLS session resumption when certificate authority CA settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing ...

Multiple perl vulnerabilities impact AIX.

IBM SECURITY ADVISORY First Issued: Mon Sep 28 00:55:59 CDT 2026 The most recent version of this document is available here: https://aix.software.ibm.com/aix/efixes/security/perladvisory14.asc Security Bulletin: Multiple perl vulnerabilities impact AIX...

PT-2026-99874

Name of the Vulnerable Software and Affected Versions connect-xcors npm package affected versions not specified Description An origin validation error in the middleware allows an attacker to bypass origin verification. This flaw enables the execution of cross-domain authenticated requests, which...

CVE-2026-101006: Incorrect Authorization

A flaw has been found in Frappe HR up to 16.15.0. This vulnerability affects the function getexpenseclaims/getshiftrequests/getattendancerequests of the file hrms/api/init.py of the component Permission Validation. This manipulation of the argument employee causes incorrect authorization. Remote...

RHEL 9 : git-lfs (RHSA-2026:72276)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:72276 advisory. Git Large File Storage LFS replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while...

Linux Distros Unpatched Vulnerability : CVE-2026-89133

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wolfSSL versions 5.9.2 and earlier contain a flaw in the X.509 certificate validation logic where it fails to properly enforce NameConstraints extensions when...

HAProxy PROXY v2 Netty DoS

The vulnerability of the HAProxy PROXY v2 framework for developing network applications, servers, and Netty-based clients relates to improper syntax validation during input processing. Exploiting this vulnerability allows an attacker to cause service interruptions remotely...

PHPseclib SSRF

The vulnerability of the PHPseclib cryptographic protocol interpreter library is related to insufficient validation of requests on the server side. Exploiting this vulnerability allows a malicious actor to perform a SSRF attack remotely...

Incus Arbitrary Command Execution

The vulnerability of the container management system and the virtual machine manager Incus is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

CVE-2026-97027: Improper Input Validation

Flatpak passes through arbitrary vendor-extension keys unmodified when exporting an application's Desktop Entry .desktop and D-Bus Service .service files, instead of validating against an allowlist. A malicious Flatpak app can use this to cause denial of service e.g. forced application restart...

CVE-2026-18825: Origin Validation Error

An Origin Validation Error in the middleware of the connect-xcors npm package allows an attacker to bypass origin verification and perform a cross domain authenticated request...

ROS-20260928-73-0024

The vulnerability of the ext4iget function in the fs/ext4/inode.c file of the Linux operating system is related to incorrect validation of input data. Exploiting this vulnerability could allow an attacker to cause a service failure...