MINI-C95P-FV5V-JWWX

Bulletin has no description...

CVE-2026-79209

creationtimestamp| type| source ---|---|--- 2026-08-26 05:16:59+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260826 2026-08-31 05:16:37+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260831...

CVE-2026-79147

creationtimestamp| type| source ---|---|--- 2026-08-26 05:15:16+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260826 2026-08-31 04:52:40+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260831...

MiracleLinux 9 : mysql:8.4 (AXSA:2026-1665:01)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1665:01 advisory. mysql: Performance Schema unspecified vulnerability CPU Jul 2026 CVE-2026-61081 mysql: Optimizer unspecified vulnerability CPU Jul 2026 CVE-2026-470...

CVE-2026-18261

Vulnerability in Drupal Powerful Surveys. This issue affects Powerful Surveys versions:...

CVE-2026-18260

Improper Restriction of Excessive Authentication Attempts vulnerability in Drupal Disable Login Page allows Brute Force. This issue affects Disable Login Page versions: from 0.0.0 to 1.1.4...

CVE-2026-16641

Vulnerability in Drupal Commerce Elavon. This issue affects Commerce Elavon versions:...

CGA-JR52-7XPJ-F5H2

Bulletin has no description...

CGA-Q4GC-J2PW-FQ7J

Bulletin has no description...

CGA-MQVX-HCGH-47VX

Bulletin has no description...

CVE-2026-16641

CVE-2026-16641 affects the Drupal Commerce Elavon contrib module, with all versions (. ) impacted. The project has been marked unsupported by the Drupal security team, and the known security issue remains unaddressed by the maintainer . No specific root cause or fixed version is provided in the a...

MINI-49JP-4GW5-3RCF

Bulletin has no description...

MINI-FGXJ-7J7Q-R4WF

Bulletin has no description...

MINI-M8P6-68VV-C9P2

Bulletin has no description...

DEBIAN-CVE-2026-65979

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. From version 3.4.0 through 3.4.12, the HTJ2K decoder parses a header-length field PLEN from a chunk's compressed data but never checks that this value fits within the...

CVE-2026-59682

creationtimestamp| type| source ---|---|--- 2026-08-25 16:59:57+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/c4gajlaaid4bv 2026-08-26 09:50:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mty2mg26242c 2026-08-29 05:30:03+00:00| seen|...

DEBIAN-CVE-2026-79782

rclone before 1.74.4 fails to strip the X-Amz-Security-Token header when an S3 redirect changes scheme from HTTPS to HTTP on the same host. Attackers can intercept plaintext HTTP traffic to capture AWS STS session tokens sent in request headers...

DEBIAN-CVE-2026-79778

rclone before v1.75.0 contains a denial of service vulnerability in the WebDAV TUS creation handler that dereferences a nil response before checking for transport errors. A malicious or compromised configured endpoint can reset connections during TUS uploads to trigger a panic that terminates...

DEBIAN-CVE-2026-79780

rclone before v1.75.0 fails to sanitize IBM IAM bearer tokens and SSE-C encryption keys during S3 redirect callbacks, allowing credentials to be preserved across scheme or host changes. Attackers observing network traffic from a trusted endpoint can capture reusable IBM IAM tokens on same-host...

DEBIAN-CVE-2026-79776

rclone before 1.75.0 mounts the pprof debug handler as its own router route, bypassing the fail-closed authentication rule in the main handler. Attackers can access the /debug/pprof/cmdline endpoint unauthenticated to retrieve the full process argv including backend credentials...