SUSE-SU-2026:4016-1 Security update for postgresql17

This update for postgresql17 fixes the following issues: - CVE-2026-6464: psql COPY FROM STDIN early failure processes data lines as psql commands bsc1275046. - CVE-2026-6469: ALTER TABLE ALTER TYPE resets extended statistics ownership bsc1275044. - CVE-2026-6470: failure to check type USAGE...

SUSE-SU-2026:4015-1 Security update for postgresql18

This update for postgresql18 fixes the following issues: - CVE-2026-6464: psql COPY FROM STDIN early failure processes data lines as psql commands bsc1275046. - CVE-2026-6469: ALTER TABLE ALTER TYPE resets extended statistics ownership bsc1275044. - CVE-2026-6470: failure to check type USAGE...

Security update for postgresql18

This update for postgresql18 fixes the following issues: CVE-2026-6464: psql COPY FROM STDIN early failure processes data lines as psql commands bsc1275046. CVE-2026-6469: ALTER TABLE ALTER TYPE resets extended statistics ownership bsc1275044. CVE-2026-6470: failure to check type USAGE privilege...

SUSE-SU-2026:4014-1 Security update for postgresql18

This update for postgresql18 fixes the following issues: - CVE-2026-6464: psql COPY FROM STDIN early failure processes data lines as psql commands bsc1275046. - CVE-2026-6469: ALTER TABLE ALTER TYPE resets extended statistics ownership bsc1275044. - CVE-2026-6470: failure to check type USAGE...

Security update for postgresql17

This update for postgresql17 fixes the following issues: CVE-2026-6464: psql COPY FROM STDIN early failure processes data lines as psql commands bsc1275046. CVE-2026-6469: ALTER TABLE ALTER TYPE resets extended statistics ownership bsc1275044. CVE-2026-6470: failure to check type USAGE privilege...

SUSE-SU-2026:4013-1 Security update for postgresql17

This update for postgresql17 fixes the following issues: - CVE-2026-6464: psql COPY FROM STDIN early failure processes data lines as psql commands bsc1275046. - CVE-2026-6469: ALTER TABLE ALTER TYPE resets extended statistics ownership bsc1275044. - CVE-2026-6470: failure to check type USAGE...

CVE-2026-75650: Improper Neutralization of Special Elements Used in a Template Engine

Adobe Commerce is affected by an Improper Neutralization of Special Elements Used in a Template Engine vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue...

VulnCheck KEV: CVE-2023-37569

This vulnerability exists in ESDS Emagic Data Center Management Suit due to lack of input sanitization in its Ping component. A remote authenticated attacker could exploit this by injecting OS commands on the targeted system. Successful exploitation of this vulnerability could allow the attacker ...

APSB26-146 : Security update available for Adobe Commerce

Adobe has released a security update for Adobe Commerce and Magento Open Source. This update resolves a critical vulnerability that could result in arbitrary code execution. Adobe is aware of CVE-2026-75650 being exploited in the wild...

ROS-20260907-73-0024

The vulnerability of the RAR5 file archiver WinRAR’s volume recovery processing system, as well as the UnRAR decompression tool, is related to unvalidated array indexing. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

ROS-20260907-73-0037

The vulnerability in ffmpeg is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

ROS-20260907-73-0070

The vulnerability in dotnet10.0 is related to the use of memory after it is released. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

WAD (Web Access Daemon) Code Execution

The vulnerability of WAD Web Access Daemon in FortiOS operating systems is related to buffer overflow in the stack. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using specially created sockets...

Fortinet FortiClient DNS Modification Code Execution

The vulnerability of the Fortinet FortiClient Windows security tool lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows an attacker to remotely alter or forge DNS responses for the target host and execute arbitrary code using specially...

D-Link DNS-340L CGI Handler Code Execution

The vulnerability of the /cgi-bin/dropbox.cgi script of the CGI Handler component in the D-Link DNS-340L network storage software is related to the lack of measures taken at the administrative level to ensure data cleanup. Exploiting this vulnerability could allow an attacker operating remotely t...

ROS-20260907-73-0076

The vulnerability in dotnet10.0 is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

SIPROTEC 5 File Upload Code Execution

The vulnerability of SIPROTEC 5 devices for relay protection, automation, and control is related to the unlimited loading of dangerous files. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code or cause service failures...

PT-2026-86933

Name of the Vulnerable Software and Affected Versions knowns versions prior to 0.30.0 Description Failure to validate the settings.lsp.languages binary field in project configuration files allows the execution of arbitrary binaries. An attacker can achieve this by crafting a malicious...

IBM Sterling B2B Integrator SQL Injection

The vulnerability of the IBM Sterling B2B Integrator and the IBM Sterling File Gateway file gateway software lies in the lack of security measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Siman Executable Code Execution

The vulnerability of the exprt.exe executable component of the Siman software for discrete event simulation and automation in Rockwell Automation Arena lies in the issue of out-of-buffer writing. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending a specially...