PT-2026-72148

Name of the Vulnerable Software and Affected Versions Image Uploader for Welcart versions prior to 1.4.7 Description The Image Uploader for Welcart plugin for WordPress contains a SQL Injection flaw. This occurs because the plugin does not sufficiently escape the post title parameter and fails to...

PT-2026-72493

In the Linux kernel, the following vulnerability has been resolved: VDUSE: avoid leaking information to userspace The bounceing is not necessarily page aligned, so current VDUSE can leak kernel information through mapping bounce pages to userspace. Allocate bounce pages with GFP ZERO to avoid...

Linux Distros Unpatched Vulnerability : CVE-2026-74290

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/sched: clsflow: Dont expose folded kernel pointers The flow classifier falls back to addrfold for fields that are missing from packet headers. In map mode,...

PT-2026-72151

Name of the Vulnerable Software and Affected Versions KiviCare – Clinic & Patient Management System EHR versions prior to 4.5.2 Description An issue exists where authenticated attackers with custom-level access and above can perform a generic SQL Injection. This occurs due to insufficient escapin...

PT-2026-72882

Exposure of data element to wrong session vulnerability in the JSON plugin of Apache Struts. Per-request parsing state could be shared across concurrent requests, allowing data associated with one request to become observable in another, and configured parsing limits not to be enforced as intende...

PT-2026-72883

Exposure of data element to wrong session vulnerability in the JSON plugin of Apache Struts. Per-response serialization state could be shared across concurrent requests, allowing response content associated with one request to become observable in another. Only the SMD / JSON-RPC handling of the...

PT-2026-72726

In the Linux kernel, the following vulnerability has been resolved: net/sched: cls flow: Dont expose folded kernel pointers The flow classifier falls back to addr fold for fields that are missing from packet headers. In map mode, userspace controls mask, xor, rshift, addend and divisor, and can...

CVE-2026-74247

A flaw was found in Red Hat Quay. A user with FEATUREBUILDSUPPORT enabled and repository write access can exploit a Server-Side Request Forgery SSRF vulnerability within the build API. This allows the user to provide a malicious URL, causing the Quay builder to make requests to internal network...

MINI-96J6-9VFP-J96Q

Bulletin has no description...

Security Bulletin: Multiple vulnerabilities in IBM Rational Developer for i (CVE-2026-10051, CVE-2026-6790, CVE-2026-8384, CVE-2026-10050, CVE-2026-59879, CVE-2026-59880)

Summary IBM Rational Developer for i is affected by a sensitive information exposure vulnerability in Eclipse Jetty-server CVE-2026-10051, an improper input validation vulnerability in Eclipse Jetty-server CVE-2026-6790, an authorization decision vulnerability in Eclipse Jetty-util CVE-2026-8384,...

MINI-RJQH-JPJ8-G5CH

Bulletin has no description...

MINI-6493-XMCM-VR5G

Bulletin has no description...

MINI-285P-GPFP-6W56

Bulletin has no description...

CVE-2026-49844 vulnerabilities

Vulnerabilities for packages: keycloak-config-cli, celeborn, cruise-control-fips, druid, kayenta-fips, nacos-docker, neo4j, opensearch, solr, traccar, pinot, apache-activemq-artemis-fips, airbyte-server, spark, kserve-modelmesh, kafbat-ui, apache-tika-fips, flink-kubernetes-operator-fips,...

MINI-W279-XHJ6-J78M

Bulletin has no description...

CVE-2026-18554

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensitive information due to improper limitation of a pathname to a restricted directory...

CVE-2026-17182

CVE-2026-17182 affects IBM Db2 Mirror for i versions 7.4, 7.5, and 7.6. It allows a remote attacker to bypass authentication and obtain or alter sensitive information due to improper validation of request URI path segments (CWE-287). The vulnerability has a high impact: CVSS v3.1 base score 9.8 (...

CVE-2026-19639

An improper access control vulnerability exists where an authenticated non-administrative application user could potentially view settings outside of their assigned scope...

MINI-W34V-Q6JV-MC5R

Bulletin has no description...

CVE-2026-19639

CVE-2026-19639 is an Improper Access Control vulnerability affecting Tenable Security Center. The issue allows an authenticated non-administrative application user to view settings outside their assigned scope. Tenable’s advisory (TENABLE:20EF43...) indicates the fix is delivered with Security Ce...