EUVD-2026-58797

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to write arbitrary files due to improper limitation of a pathname to a restricted directory...

CVE-2026-17081

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to write arbitrary files due to improper limitation of a pathname to a restricted directory...

CVE-2026-16915 IBM Db2 Mirror for i is affected by multiple vulnerabilities

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensitive information due to improper input validation...

CVE-2026-16915

IBM Db2 Mirror for i versions 7.4, 7.5, and 7.6 are affected by CVE-2026-16915 due to improper input validation, enabling a remote authenticated attacker to obtain sensitive information. The IBM bulletin documents multiple vulnerabilities in the same product family and lists CVE-2026-16915 under ...

CVE-2026-16905

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensitive information due to improper authentication...

CVE-2026-16905 IBM Db2 Mirror for i is affected by multiple vulnerabilities

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensitive information due to improper authentication...

EUVD-2026-58793

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to bypass security restrictions due to improper authorization using user-supplied input...

CVE-2026-16879 IBM Db2 Mirror for i is affected by multiple vulnerabilities

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to bypass security restrictions due to improper authorization using user-supplied input...

CVE-2026-16708 IBM Db2 Mirror for i is affected by multiple vulnerabilities

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to obtain sensitive information due to external control of system configuration...

CVE-2026-16708

CVE-2026-16708 affects IBM Db2 Mirror for i versions 7.4, 7.5, and 7.6. The advisory reports that a remote attacker could obtain sensitive information due to external control of system configuration. The IBM Security Bulletin lists this vulnerability among multiple issues, attributing the root ca...

EUVD-2026-58792

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to obtain sensitive information due to external control of system configuration...

CVE-2026-19847

A security flaw has been discovered in TOTOLINK A800R 4.1.2cu.5137B20200730. Affected is the function setWiFiWpsConfig of the file /cgi-bin/cstecgi.cgi of the component wps.so. The manipulation of the argument pin results in stack-based buffer overflow. The attack can be launched remotely. The...

CVE-2026-19682

A command injection vulnerability exists in Security Center where a remote, unauthenticated attacker could exploit this issue to execute arbitrary commands on the underlying operating system with the privileges of the service account...

EUVD-2026-58739

A security flaw has been discovered in TOTOLINK A800R 4.1.2cu.5137B20200730. Affected is the function setWiFiWpsConfig of the file /cgi-bin/cstecgi.cgi of the component wps.so. The manipulation of the argument pin results in stack-based buffer overflow. The attack can be launched remotely. The...

CVE-2026-19847

TOTOLINK A800R (firmware 4.1.2cu.5137_B20200730) contains a vulnerability in wps.so: the setWiFiWpsConfig function in /cgi-bin/cstecgi.cgi accepts a pin argument whose manipulation causes a stack-based buffer overflow. The issue can be triggered remotely, and public exploits have been released. T...

CVE-2026-46603

VP8L decoding in golang.org/x/image/vp8l can allocate an excessive amount of memory when processing a crafted VP8L image containing many unused Huffman tree groups. This allows a remote attacker to cause a denial of service via memory exhaustion...

CVE-2026-19845

A vulnerability was determined in TOTOLINK A800R 4.1.2cu.5137B20200730. This affects the function setStaticDhcpConfig of the file /cgi-bin/cstecgi.cgi of the component lan.so. Executing a manipulation of the argument Comment can lead to stack-based buffer overflow. It is possible to launch the...

CVE-2026-19841

A flaw has been found in TRENDNET TEW-813DRU 1.01b01. Impacted is an unknown function of the file /etc/vsftpd.conf of the component vsftpd. This manipulation causes incorrect default permissions. The attack is possible to be carried out remotely. A high degree of complexity is needed for the...

EUVD-2026-58735

A vulnerability was identified in TOTOLINK A800R 4.1.2cu.5137B20200730. This impacts the function setUrlFilterRules of the file /cgi-bin/cstecgi.cgi of the component firewall.so. The manipulation of the argument url leads to stack-based buffer overflow. The attack can be initiated remotely. The...

CVE-2026-19846

TOTOLINK A800R vulnerability (CVE-2026-19846) affects the firewall.so component via setUrlFilterRules in /cgi-bin/cstecgi.cgi. The argument url can be manipulated to cause a stack-based buffer overflow, with remote exploitation possible. Public exploit appears to be available. Affected version: T...