CVE-2026-17419 IBM i is Affected By Multiple Vulnerabilities in SQL

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to modify SQL tables due to improper neutralization of special elements used in an SQL command...

CVE-2026-17419 IBM i is Affected By Multiple Vulnerabilities in SQL

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to modify SQL tables due to improper neutralization of special elements used in an SQL command...

CVE-2026-17419

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to modify SQL tables due to improper neutralization of special elements used in an SQL command...

EUVD-2026-57366

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to modify SQL tables due to improper neutralization of special elements used in an SQL command...

SUSE CVE-2026-71391

GNU Emacs for Android contains an off-by-one error in the gvar table parser in src/sfnt.c. The shared-coordinate index boundary check in sfntvarysimpleglyph and sfntvarycompoundglyph uses a strict greater-than comparison instead of greater-than-or-equal, allowing a crafted TrueType variable font ...

EUVD-2026-57109

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Essekia Tablesome Table allows Blind SQL Injection. This issue affects Tablesome Table: from n/a through 1.2.9...

CVE-2026-66659 WordPress Tablesome Table plugin <= 1.2.9 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Essekia Tablesome Table allows Blind SQL Injection. This issue affects Tablesome Table: from n/a through 1.2.9...

CVE-2026-66659

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Essekia Tablesome Table allows Blind SQL Injection. This issue affects Tablesome Table: from n/a through 1.2.9...

CVE-2026-66659

CVE-2026-66659 describes an SQL Injection vulnerability in the WordPress plugin “Tablesome Table” (Essekia) affected versions up to 1.2.9. The root cause is improper neutralization of special elements in SQL commands, leading to Blind SQL Injection. Impact is listed as high for confidentiality an...

CVE-2026-66659: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Essekia Tablesome Table allows Blind SQL Injection. This issue affects Tablesome Table: from n/a through 1.2.9...

PT-2026-71162

Name of the Vulnerable Software and Affected Versions IBM i versions 7.3 through 7.6 Description Remote authenticated attackers can modify SQL tables because the system fails to properly neutralize special elements used within an SQL command, leading to an SQL injection issue. Recommendations...

CVE-2026-73307: Server-Side Request Forgery (SSRF)

Budibase is an open-source low-code platform. Prior to 3.39.4, uploadUrl in packages/server/src/utilities/fileUtils.ts used a bare server-side fetch for string attachment values passed by processAttachments in packages/server/src/sdk/workspace/ai/helpers/rows.ts. A builder with the AI...

PT-2026-71256

Budibase is an open-source low-code platform. Prior to 3.39.4, uploadUrl in packages/server/src/utilities/fileUtils.ts used a bare server-side fetch for string attachment values passed by processAttachments in packages/server/src/sdk/workspace/ai/helpers/rows.ts. A builder with the AI...

PT-2026-71488

Name of the Vulnerable Software and Affected Versions PostgreSQL versions prior to 18.5 PostgreSQL versions prior to 17.11 PostgreSQL versions prior to 16.15 PostgreSQL versions prior to 15.19 PostgreSQL versions prior to 14.24 Description An incorrect ownership assignment occurs during the...

PT-2026-71215

Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions 18.2 through 19.0.5 GitLab CE/EE versions 19.1 through 19.1.3 GitLab CE/EE versions 19.2 through 19.2.1 Description An issue exists where an analytics dashboard component fails to properly neutralize user-controlled value...

Exploit for CVE-2026-68138

CVE-2026-68138: Linux qdisc rate-table race to local root !C...

CVE-2026-68172

A flaw was found in the Linux kernel, specifically within the hugeptepget helper function for the arm64 architecture. When this function is provided with an unaligned virtual address, it can incorrectly process Page Table Entries PTEs. This can lead to the kernel dereferencing invalid memory...

CVE-2026-68191

A flaw was found in the Linux kernel's ath12k Wi-Fi driver. When the ath12k driver is unbound, a NULL pointer dereference can occur in the rhash table destroy functions. This issue arises because the hash tables may not be fully initialized before their destroy functions are called unconditionall...

CVE-2026-68238

A flaw was found in the drm/amdgpu component of the Linux kernel. The amdgpuacpivfctbios function fails to release a reference to the VFCT ACPI table after fetching it. This oversight leads to a resource leak, where memory allocated for the table mapping is not properly freed, potentially impacti...

CVE-2026-73161

Affected versions of cti-transmute improperly handle conversion-table values passed through the search highlighting feature. The highlight function previously returned the underlying text directly when no search query was supplied, or performed a regex replacement that inserted tags without first...