MINI-MM6C-2RCQ-XRMR

Bulletin has no description...

CVE-2026-19906

A weakness has been identified in pkp pkp-lib 3.3.0/3.4.0/3.5.0. This vulnerability affects the function setData of the file classes/user/form/APIProfileForm.php of the component API Key Generation. Executing a manipulation of the argument apiKey can lead to insufficient entropy. The attack may b...

CVE-2026-19906 pkp pkp-lib API Key Generation APIProfileForm.php setData entropy

A weakness has been identified in pkp pkp-lib 3.3.0/3.4.0/3.5.0. This vulnerability affects the function setData of the file classes/user/form/APIProfileForm.php of the component API Key Generation. Executing a manipulation of the argument apiKey can lead to insufficient entropy. The attack may b...

CVE-2026-19906

CVE-2026-19906 affects pkp-lib versions 3.3.0/3.4.0/3.5.0, specifically the API Key Generation flow in the file APIProfileForm.php by function setData. The issue arises from manipulating the apiKey argument, which can lead to insufficient entropy. Exploitation is described as remote with high com...

CVE-2026-19906 pkp pkp-lib API Key Generation APIProfileForm.php setData entropy

A weakness has been identified in pkp pkp-lib 3.3.0/3.4.0/3.5.0. This vulnerability affects the function setData of the file classes/user/form/APIProfileForm.php of the component API Key Generation. Executing a manipulation of the argument apiKey can lead to insufficient entropy. The attack may b...

CVE-2026-19906

A weakness has been identified in pkp pkp-lib 3.3.0/3.4.0/3.5.0. This vulnerability affects the function setData of the file classes/user/form/APIProfileForm.php of the component API Key Generation. Executing a manipulation of the argument apiKey can lead to insufficient entropy. The attack may b...

EUVD-2026-59789

A weakness has been identified in pkp pkp-lib 3.3.0/3.4.0/3.5.0. This vulnerability affects the function setData of the file classes/user/form/APIProfileForm.php of the component API Key Generation. Executing a manipulation of the argument apiKey can lead to insufficient entropy. The attack may b...

EUVD-2026-59784

The Link Library plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the lldeletelinkfields function in all versions up to, and including, 7.9.4 This makes it possible for unauthenticated attackers to delete arbitrary files on the server, whic...

CVE-2026-19598

creationtimestamp| type| source ---|---|--- 2026-08-15 18:10:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mt5bgdy5vm23 2026-08-15 19:00:16+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mt5ea3j2qc22 2026-08-17 18:00:05+00:00| seen|...

Security Bulletin: This Power System update is being released to address CVE-2026-4937

Summary PowerVM could allow a local attacker with administrative privileges to decrypt encrypted data due to certain hypervisor calls utilizing less entropy than requested. Vulnerability Details CVEID:CVE-2026-4937 DESCRIPTION: PowerVM could allow a local attacker with administrative privileges t...

Security Bulletin: This Power System update is being released to address CVE-2026-4936

Summary PowerVM Platform KeyStore PKS and virtual TPM use persistent storage key seeds that result in an AES key with reduced strength. An attacker with access to the service processor or HMC could exploit this weakness to derive the encryption key and access the data. Vulnerability Details...

CVE-2026-19896

A flaw has been found in mangroup dtale up to 3.22.0. This vulnerability affects the function buildsecretkey of the file dtale/app.py of the component Flask Session Cookie. This manipulation causes insufficiently random values. Remote exploitation of the attack is possible. The attack's complexit...

EUVD-2026-59768

A flaw has been found in mangroup dtale up to 3.22.0. This vulnerability affects the function buildsecretkey of the file dtale/app.py of the component Flask Session Cookie. This manipulation causes insufficiently random values. Remote exploitation of the attack is possible. The attack's complexit...

CVE-2026-19896

A flaw has been found in mangroup dtale up to 3.22.0. This vulnerability affects the function buildsecretkey of the file dtale/app.py of the component Flask Session Cookie. This manipulation causes insufficiently random values. Remote exploitation of the attack is possible. The attack's complexit...

CVE-2026-19896 mangroup dtale Flask Session Cookie app.py build_secret_key random values

A flaw has been found in mangroup dtale up to 3.22.0. This vulnerability affects the function buildsecretkey of the file dtale/app.py of the component Flask Session Cookie. This manipulation causes insufficiently random values. Remote exploitation of the attack is possible. The attack's complexit...

CVE-2026-19896

CVE-2026-19896 affects mangroup dtale up to version 3.22.0, targeting the build_secret_key function in dtale/app.py (Flask Session Cookie). The issue causes insufficiently random values, enabling remote exploitation with high attack complexity and published exploits. A fix is pending approval via...

CVE-2026-19896 mangroup dtale Flask Session Cookie app.py build_secret_key random values

A flaw has been found in mangroup dtale up to 3.22.0. This vulnerability affects the function buildsecretkey of the file dtale/app.py of the component Flask Session Cookie. This manipulation causes insufficiently random values. Remote exploitation of the attack is possible. The attack's complexit...

SAP Commerce Cloud CVE-2026-58231 Targeted in Exploitation Attempts Days After Patch

A maximum-severity security vulnerability impacting SAP Commerce Cloud is witnessing active exploitation efforts. The vulnerability, tracked as CVE-2026-58231 , is rated 10.0 on the CVSS scoring system. It relates to an instance of insufficient authorization checks and input validation. "SAP...

CVE-2026-54356

creationtimestamp| type| source ---|---|--- 2026-08-15 08:00:04+00:00| seen| Telegram/FN3zo1JYTO4u1-YgV96W0gS9NsAaW44hUrWdmlv8YAKw1wA 2026-08-16 00:00:46+00:00| published-proof-of-concept| Telegram/FN3zo1JYTO4u1-YgV96W0gS9NsAaW44hUrWdmlv8YAKw1wA...

UBUNTU-CVE-2026-74402

In the Linux kernel, the following vulnerability has been resolved: crypto: atmel-sha204a - fix blocking and non-blocking rng logic The blocking and non-blocking paths were failing to provide valid entropy due to improper buffer management. Reading the buffer starting from byte 1, only fetch the ...