ECHO-DB00-4309-1170

Bulletin has no description...

CVE-2026-15065

creationtimestamp| type| source ---|---|--- 2026-08-19 16:09:50+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mth4l22djb2c 2026-08-19 17:00:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mth7ew3prk24 2026-08-21 20:07:06+00:00| seen|...

MINI-MQ62-9W6J-56CW

Bulletin has no description...

CVE-2026-70911

Oracle's August 2026 Critical Patch Update (CSPAug2026) addresses CVE-2026-70911, a medium-severity (CVSS 5.3) Security component flaw in Hyperion Financial Management 11.2.25.0.000 that allows unauthenticated remote attackers to read a subset of accessible data via HTTP; apply Oracle's August 20...

CVE-2026-70799

...

DEBIAN-CVE-2026-74964

Integer overflow in the Graphics component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1...

MINI-9F9W-RJQV-XFM5

Bulletin has no description...

MINI-6G86-53WC-P667

Bulletin has no description...

MINI-WHW7-99X5-7CX2

Bulletin has no description...

PYSEC-2026-2543 kas's late signature validation may allow unnoticed repository manipulations

Impact So far, kas checks out and processes repositories regarding configuration includes prior to validating signatures of those repositories. This may allow to replace on original repository with one under the control of an attacker under very specific conditions. First of all, the attacker mus...

CVE-2026-47137 vm2: GHSA-8hg8-63c5-gwmx patch bypass: nesting:true without explicit require still allows full RCE

vm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.4, the fix for GHSA-8hg8-63c5-gwmx CVE-2023-37903 introduced a check in nodevm.js line 263 that blocks the combination nesting: true + require: false. However, the check uses strict equality options.require === false, which is...

PT-2026-40978

Name of the Vulnerable Software and Affected Versions Microsoft Exchange Server 2016 Microsoft Exchange Server 2019 Microsoft Exchange Server Subscription Edition Description An improper neutralization of input during web page generation in Outlook Web Access OWA allows an unauthorized remote...

PT-2026-28440

Name of the Vulnerable Software and Affected Versions BUFFALO Wi-Fi router products affected versions not specified Description A code injection issue exists in BUFFALO Wi-Fi router products. Successful exploitation of this issue could allow for the execution of arbitrary code on affected devices...

PT-2026-28294

Name of the Vulnerable Software and Affected Versions HCL Aftermarket DPC affected versions not specified Description The software is susceptible to a weak password policy, which simplifies unauthorized access to user accounts by enabling attackers to guess passwords or employ brute-force methods...

PT-2026-7015

Name of the Vulnerable Software and Affected Versions Great Developers Certificate Generation System affected versions not specified Description A security issue exists in Great Developers Certificate Generation System. The issue involves unrestricted upload due to manipulation of the file...

PT-2026-6780

Name of the Vulnerable Software and Affected Versions Tanium Client affected versions not specified Description Tanium Client is subject to a denial of service condition. The vulnerability allows for a denial of service. Recommendations At the moment, there is no information about a newer version...

PT-2026-6619

Name of the Vulnerable Software and Affected Versions Tanium Threat Response affected versions not specified Description Tanium Threat Response contains an information disclosure issue. The vulnerability allows for the potential exposure of information. Recommendations At the moment, there is no...

PT-2026-6604

Name of the Vulnerable Software and Affected Versions Tanium Interact affected versions not specified Description Tanium Interact was found to have improper access controls. This allows unauthorized access to resources. Recommendations At the moment, there is no information about a newer version...

PT-2026-6624

Name of the Vulnerable Software and Affected Versions Tanium Discover affected versions not specified Description Tanium Discover was found to have an incorrect default permissions setting. This could potentially allow unauthorized access or modification of data. Recommendations At the moment,...

PT-2026-2206

Name of the Vulnerable Software and Affected Versions Versions affected versions not specified Description An attacker with a network connection could detect credentials in clear text. Recommendations At the moment, there is no information about a newer version that contains a fix for this...