mysql: mysql: unauthorized data modification via replication component

A flaw was found in the MySQL Server replication component. An unauthenticated remote attacker with network access could exploit this vulnerability to create, delete, or modify critical database data. A successful attack can also lead to a Denial of Service DoS by causing the server to hang or...

mysql: MySQL: Unauthorized data modification in JSON component

A flaw was found in the MySQL Server JSON component. An authenticated remote attacker with low privileges can exploit this vulnerability over network protocols to modify, create, or delete accessible database records. Successful exploitation can also result in a Denial of Service DoS by crashing ...

mysql: mysql: unauthorized data modification via replication component

A flaw was found in the MySQL Server replication component. An unauthenticated remote attacker with network access could exploit this vulnerability to create, delete, or modify critical database data. A successful attack can also lead to a Denial of Service DoS by causing the server to hang or...

mysql: MySQL: Unauthorized data modification in JSON component

A flaw was found in the MySQL Server JSON component. An authenticated remote attacker with low privileges can exploit this vulnerability over network protocols to modify, create, or delete accessible database records. Successful exploitation can also result in a Denial of Service DoS by crashing ...

openjdk: Enhance Network Clients (Oracle CPU 2026-10)

A flaw was found in the OpenJDK networking component. This vulnerability may allow an unauthenticated remote attacker to cause unauthorized data modification. By supplying crafted input to exposed networking application programming interfaces APIs, such as through a web service, an attacker can...

kernel: nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed()

A flaw was found in the Linux kernel's NVMe Non-Volatile Memory Express input/output control ioctl handling. An unprivileged local user could exploit this vulnerability by bypassing access checks in the NVMEIOCTLSUBMITIO function. This allows them to perform unauthorized I/O operations on a...

kernel: kernel: xfs: Unauthorized data modification via improper file size exchange handling

A flaw was found in the Linux kernel's XFS file system. This vulnerability allows a local user to cause unauthorized data modification or potential privilege escalation by bypassing Copy-on-Write CoW protections. When exchanging file data ranges up to the end of a file, the file system incorrectl...

kernel: nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed()

A flaw was found in the Linux kernel's NVMe Non-Volatile Memory Express input/output control ioctl handling. An unprivileged local user could exploit this vulnerability by bypassing access checks in the NVMEIOCTLSUBMITIO function. This allows them to perform unauthorized I/O operations on a...

CVE-2026-124850 SQL Injection in Database Migration via Stored Connector Identifiers in flowintel

A SQL injection vulnerability exists in a database migration script in flowintel. The migration process reads stored connector identifier values from the database and interpolates them directly into SQL statements without parameterization. An attacker who has previously written a malicious...

CVE-2026-124850 SQL Injection in Database Migration via Stored Connector Identifiers in flowintel

A SQL injection vulnerability exists in a database migration script in flowintel. The migration process reads stored connector identifier values from the database and interpolates them directly into SQL statements without parameterization. An attacker who has previously written a malicious...

openjdk: Enhance JShell (Oracle CPU 2026-10)

A flaw was found in OpenJDK's JDK tools component. An unauthenticated local attacker can exploit this vulnerability by convincing a user to interact with untrusted code in an environment relying on the Java security sandbox. A successful attack can result in unauthorized creation, modification, o...

CVE-2026-122038

A flaw was found in EmployeeRecruitmentSystem. A remote, unauthenticated attacker can submit specially crafted input to the Requirement Board Update Handler source/reqformprocessing.php, leading to a Structured Query Language SQL injection vulnerability. This flaw allows an attacker to execute...

CVE-2026-54382

A flaw was found in the VitaFit cloud API. An authenticated remote attacker can exploit overly permissive Amazon Web Services AWS role permissions to upload files across an entire shared Amazon Simple Storage Service S3 bucket rather than remaining restricted to their designated folder. This allo...

CVE-2026-107014

A flaw was found in Bander Notepad. Due to insecure permission configurations, an unauthorized attacker can read and modify note databases belonging to other users. This issue leads to information disclosure and unauthorized data modification...

openjdk: Enhance Network Clients (Oracle CPU 2026-10)

A flaw was found in the OpenJDK networking component. This vulnerability may allow an unauthenticated remote attacker to cause unauthorized data modification. By supplying crafted input to exposed networking application programming interfaces APIs, such as through a web service, an attacker can...

openjdk: Enhance JShell (Oracle CPU 2026-10)

A flaw was found in OpenJDK's JDK tools component. An unauthenticated local attacker can exploit this vulnerability by convincing a user to interact with untrusted code in an environment relying on the Java security sandbox. A successful attack can result in unauthorized creation, modification, o...

openjdk: Enhance JShell (Oracle CPU 2026-10)

A flaw was found in OpenJDK's JDK tools component. An unauthenticated local attacker can exploit this vulnerability by convincing a user to interact with untrusted code in an environment relying on the Java security sandbox. A successful attack can result in unauthorized creation, modification, o...

openjdk: Enhance Network Clients (Oracle CPU 2026-10)

A flaw was found in the OpenJDK networking component. This vulnerability may allow an unauthenticated remote attacker to cause unauthorized data modification. By supplying crafted input to exposed networking application programming interfaces APIs, such as through a web service, an attacker can...

openjdk: Enhance JShell (Oracle CPU 2026-10)

A flaw was found in OpenJDK's JDK tools component. An unauthenticated local attacker can exploit this vulnerability by convincing a user to interact with untrusted code in an environment relying on the Java security sandbox. A successful attack can result in unauthorized creation, modification, o...

openjdk: Enhance Network Clients (Oracle CPU 2026-10)

A flaw was found in the OpenJDK networking component. This vulnerability may allow an unauthenticated remote attacker to cause unauthorized data modification. By supplying crafted input to exposed networking application programming interfaces APIs, such as through a web service, an attacker can...