.NET: .NET Core: .NET Security Feature Bypass Vulnerability

Inconsistent interpretation of http requests 'http request/response smuggling' in .NET allows an unauthorized attacker to bypass a security feature over a network...

ALPINE-CVE-2026-70460

rsync 2.3.3 before 3.5.0 contains a path traversal vulnerability that allows a malicious sender to escape the module root by exploiting symlinks within the module file tree when using --partial-dir or --backup-dir options. Attackers with write access to place a symlink under the module root, or w...

CVE-2026-19710

A vulnerability was found in SourceCodester Simple Student Information System. Affected by this vulnerability is an unknown functionality of the file app/admin/departments/viewdepartment.php. Performing a manipulation of the argument ID results in sql injection. The attack is possible to be carri...

CVE-2026-15994

Technical details (affected product, versions, root cause, and exploit scenarios) are not publicly available in the provided documents. Monitor for updates from Lenovo and CVE/NVD records.

CVE-2026-70460

rsync 2.3.3 before 3.5.0 contains a path traversal vulnerability that allows a malicious sender to escape the module root by exploiting symlinks within the module file tree when using --partial-dir or --backup-dir options. Attackers with write access to place a symlink under the module root, or w...

PT-2026-71874

Name of the Vulnerable Software and Affected Versions EnzoVezzaro mcp-dominican-layer versions up to 39dd373786712650097ad31db27d5c477c8f9c82 Description A flaw in the parse-csv tool component allows remote attackers to perform server-side request forgery SSRF, a technique where an attacker induc...

VulnCheck KEV: CVE-2025-55583

D-Link DIR-868L B1 router firmware version FW2.05WWB02 contains an unauthenticated OS command injection vulnerability in the fileaccess.cgi component. The endpoint /dws/api/UploadFile accepts a preapiarg parameter that is passed directly to system-level shell execution functions without...

ROS-20260813-73-0048

The vulnerability in uriparser is related to an uncontrolled recursion. Exploiting this vulnerability can allow attackers to cause service failures...

CVE-2026-64382 affecting package kernel for versions less than 6.6.145.2-1

CVE-2026-64382 affecting package kernel for versions less than 6.6.145.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-64189 affecting package kernel for versions less than 6.6.145.2-1

CVE-2026-64189 affecting package kernel for versions less than 6.6.145.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-64352 affecting package kernel for versions less than 6.6.145.2-1

CVE-2026-64352 affecting package kernel for versions less than 6.6.145.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-68209 affecting package kernel for versions less than 6.6.150.1-1

CVE-2026-68209 affecting package kernel for versions less than 6.6.150.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-10534 IBM® Db2® is vulnerable to buffer overflow in the IXF IMPORT parser

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to buffer overflow in the IXF IMPORT parser...

GHSA-W7CW-XP7H-6J5J vulnerabilities

Vulnerabilities for packages: dotnet-bootstrap...

EUVD-2026-57516

An authorization bypass vulnerability in LXD allows an authenticated attacker to bypass project-level container isolation restrictions. When a project is configured with restrictions on container privileges such as enforcing restricted.containers.privilege=isolated, LXD fails to enforce the...

ECHO-1A92-FEB4-84CA

Bulletin has no description...

CVE-2026-19147 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-18962

The WP Photo Album Plus WordPress plugin versions prior to 9.2.09.002 contains an authorization bypass vulnerability. The plugin fails to verify if an authenticated user, such as a Subscriber , has the necessary permissions to upload files into a specific album during front-end processing. This a...

CVE-2026-19143 vulnerabilities

Vulnerabilities for packages: chromium...

EUVD-2026-57057

A flaw was found in the multicloud-integrations component. The Application propagation controller processes the ocm-managed-cluster annotation from an Application Custom Resource CR without proper validation. A tenant with permissions to create Applications on the hub cluster can exploit this to...