CVE-2026-17191

creationtimestamp| type| source ---|---|--- 2026-07-27 18:04:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrnia6h6xo2z 2026-07-27 19:49:46+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mrno54pgmv2j...

CVE-2026-17191 VeloCloud Orchestrator Flow Metrics API SQL Injection

An input validation vulnerability exists in an API component of the orchestrator. An authenticated user can exploit this flaw to manipulate backend queries, which may result in unauthorized access to data beyond their intended privileges and cause the underlying system to initiate unintended...

CVE-2019-17191

The Signal Private Messenger application before 4.47.7 for Android allows a caller to force a call to be answered, without callee user interaction, via a connect message. The existence of the call is noticeable to the callee; however, the audio channel may be open before the callee can block...

java-21-openjdk security update

1:21.0.5.0.10-3.0.1 - Add Oracle vendor bug URL Orabug: 34340155 1:21.0.5.0.10-3 - Sync the copy of the portable specfile with the latest update - This tarball is embargoed until 2024-10-15 @ 1pm PT. - Related: RHEL-61346 1:21.0.5.0.10-2 - Update to jdk-21.0.5+10 GA - Update release notes to...

CVE-2019-17191

The CVE-2019-17191 entry concerns the Signal Private Messenger app for Android prior to version 4.47.7. The underling issue is a flow that lets a caller force a call to be answered via a connect message without recipient interaction. The callee is aware a call exists, but the audio channel may be...

CVE-2017-17191

CVE-2017-17191 is rejected/not used and does not represent an active vulnerability entry.

CVE-2017-17191

...

CVE-2018-17191

The vulnerability concerns Apache NetBeans (incubating) 9.0 with NetBeans Proxy Auto-Configuration (PAC) interpretation, which is vulnerable to remote command execution (RCE). The root cause, as described in the sources, is the use of the Nashorn JavaScript engine during PAC processing, which lea...