CVE-2026-27016: Improper Neutralization of Input During Web Page Generation

LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring tool. Versions 24.10.0 through 26.1.1 are vulnerable to Stored XSS via the unit parameter in Custom OID. The Custom OID functionality lacks striptags sanitization while other fields name, oid, datatype are sanitized. The...

CVE-2026-26991: Improper Neutralization of Input During Web Page Generation

LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring tool. In versions 26.1.1 and below, the device group name is not sanitized, allowing attackers with admin privileges to perform Stored Cross-Site Scripting XSS attacks. When a user adds a device group, an HTTP POST request is...

CVE-2025-15585

Fileflows versions before 25.05.2 are affected by an authenticated SQL injection vulnerability in the library-file search function. Successful exploitation requires the system to use MySQL as the underlying database and could result in privilege escalation or data exfiltration...

CVE-2025-15585: Improper Neutralization of Special Elements used in an SQL Command

Fileflows versions before 25.05.2 are affected by an authenticated SQL injection vulnerability in the library-file search function. Successful exploitation requires the system to use MySQL as the underlying database and could result in privilege escalation or data exfiltration...

CVE-2025-15585

Fileflows CVE-2025-15585 affects Fileflows versions before 25.05.2. An authenticated SQL injection flaw exists in the library-file search function when using MySQL as the backend database. Successful exploitation could lead to privilege escalation or data exfiltration. No exploitation details are...

filippo.io/edwards25519 MultiScalarMult produces invalid results or undefined behavior if receiver is not the identity

Point.MultiScalarMult failed to initialize its receiver. If the method was called on an initialized point that is not the identity point, MultiScalarMult produced an incorrect result. If the method was called on an uninitialized point, the behavior was undefined. In particular, if the receiver wa...

CVE-2026-0994 affecting package mysql for versions less than 8.0.45-2

CVE-2026-0994 affecting package mysql for versions less than 8.0.45-2. A patched version of the package is available...

CVE-2026-25923

my little forum is a PHP and MySQL based internet forum that displays the messages in classical threaded view. Prior to 20260208.1, the application fails to filter the phar:// protocol in URL validation, allowing attackers to upload a malicious Phar Polyglot file disguised as JPEG via the image...

OPENSUSE-SU-2026:20193-1 Security update for orthanc, gdcm, orthanc-authorization, orthanc-dicomweb, orthanc-gdcm, orthanc-indexer, orthanc-mysql, orthanc-neuro, orthanc-postgresql, orthanc-python, orthanc-stl, orthanc-tcia, orthanc-wsi, python-pyorthanc

This update for orthanc, gdcm, orthanc-authorization, orthanc-dicomweb, orthanc-gdcm, orthanc-indexer, orthanc-mysql, orthanc-neuro, orthanc-postgresql, orthanc-python, orthanc-stl, orthanc-tcia, orthanc-wsi, python-pyorthanc fixes the following issues: Changes in orthanc: - dcmtk 370 breaks TW...

CVE-2026-21937 affecting package mysql for versions less than 8.0.45-1

CVE-2026-21937 affecting package mysql for versions less than 8.0.45-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-21936 affecting package mysql for versions less than 8.0.45-1

CVE-2026-21936 affecting package mysql for versions less than 8.0.45-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-21964 affecting package mysql for versions less than 8.0.45-1

CVE-2026-21964 affecting package mysql for versions less than 8.0.45-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-21968 affecting package mysql for versions less than 8.0.45-1

CVE-2026-21968 affecting package mysql for versions less than 8.0.45-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-21948 affecting package mysql for versions less than 8.0.45-1

CVE-2026-21948 affecting package mysql for versions less than 8.0.45-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-21941 affecting package mysql for versions less than 8.0.45-1

CVE-2026-21941 affecting package mysql for versions less than 8.0.45-1. An upgraded version of the package is available that resolves this issue...

SQL_ARES_LZL

SQL ARES LZL - Suite de Inyección SQL Avanzada ARES LZL...

K000159916: MySQL vulnerability CVE-2026-21936

Security Advisory Description Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 8.0.0-8.0.44, 8.4.0-8.4.7 and 9.0.0-9.5.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocol...

MariaDB 12.1.0 < 12.1.2

The version of MariaDB installed on the remote host is prior to 12.1.2. It is, therefore, affected by a vulnerability as referenced in the 12.1.2 advisory. - Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are...

MariaDB 10.6.0 < 10.6.24

The version of MariaDB installed on the remote host is prior to 10.6.24. It is, therefore, affected by a vulnerability as referenced in the 10.6.24 advisory. - Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are...

MariaDB 11.8.0 < 11.8.4

The version of MariaDB installed on the remote host is prior to 11.8.4. It is, therefore, affected by a vulnerability as referenced in the 11.8.4 advisory. - Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are...