MINI-M5V4-V6GJ-RHXC

Bulletin has no description...

CVE-2026-50060

creationtimestamp| type| source ---|---|--- 2026-08-12 23:00:39+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mswab7irh72p 2026-08-12 23:00:57+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117085021129724985...

MINI-QC42-4QFV-357P

Bulletin has no description...

MINI-6F4R-X5FJ-8CQ5

Bulletin has no description...

MINI-V8X2-R4XP-42CJ

Bulletin has no description...

CVE-2026-19151 vulnerabilities

Vulnerabilities for packages: chromium...

MINI-P66X-7M8P-XG8X

Bulletin has no description...

MINI-2456-743M-H4J8

Bulletin has no description...

MINI-3RW7-74XX-9HMM

Bulletin has no description...

PT-2026-71046

When Microsoft Excel imports a CSV file, it executes cells beginning with certain characters as formulas, giving such CSV files arbitrary execution. Velociraptor fails to sanitize such cells when exporting to CSV from various places such as the GUI, offline collector or data exports. It is not...

CVE-2026-18707

An issue in MongoDB Server could allow an authenticated user, including one with no assigned privileges, to cause the server process to terminate unexpectedly by submitting a specially formed aggregation command. This could result in a denial of service...

CVE-2026-18706

An issue in MongoDB Server's $graphLookup aggregation stage could allow an authenticated user able to issue aggregation and memory-management commands to cause an internal reference to be used after the underlying memory has been freed. This could result in a server crash or, potentially, executi...

UBUNTU-CVE-2026-18707

An issue in MongoDB Server could allow an authenticated user, including one with no assigned privileges, to cause the server process to terminate unexpectedly by submitting a specially formed aggregation command. This could result in a denial of service...

CVE-2026-70312 Powerpoint Information Disclosure Vulnerability

...

MINI-96FJ-66JR-83Q9

Bulletin has no description...

CVE-2026-72610 Koha Community Koha - Stored SQL Injection via Patron lang Field in Issue Slip Generation

A stored SQL injection vulnerability in Koha through 24.11.17, 25.05.12, 25.11.06, and 26.05.01 allows authenticated staff with the borrowers = editborrowers permission to cause a time-based denial of service by storing a SQL payload in a patron lang field. The value is concatenated raw into a...

CVE-2026-72610

Koha CVE-2026-72610 is a stored SQL injection affecting Koha releases up to 26.05.01 where an authenticated staff member with the borrowers => edit_borrowers permission can store a SQL payload in a patron lang field. The payload concatenates into a subquery in Koha::AdditionalContents->sear...

CVE-2026-72610 Koha Community Koha - Stored SQL Injection via Patron lang Field in Issue Slip Generation

A stored SQL injection vulnerability in Koha through 24.11.17, 25.05.12, 25.11.06, and 26.05.01 allows authenticated staff with the borrowers = editborrowers permission to cause a time-based denial of service by storing a SQL payload in a patron lang field. The value is concatenated raw into a...

EUVD-2026-56131

A stored SQL injection vulnerability in Koha through 24.11.17, 25.05.12, 25.11.06, and 26.05.01 allows authenticated staff with the borrowers = editborrowers permission to cause a time-based denial of service by storing a SQL payload in a patron lang field. The value is concatenated raw into a...

CVE-2026-72610

A stored SQL injection vulnerability in Koha through 24.11.17, 25.05.12, 25.11.06, and 26.05.01 allows authenticated staff with the borrowers = editborrowers permission to cause a time-based denial of service by storing a SQL payload in a patron lang field. The value is concatenated raw into a...