MINI-Q874-V444-7JGQ

Bulletin has no description...

CVE-2026-46382

The Meeting Room Booking System MRBS is a PHP-based application for booking meeting rooms. Prior to version 1.12.2, a user-supplied private/local URI can be made to be fetched without checks. Version 1.12.2 contains a fix. No known workarounds are available...

ROS-20260813-73-0017

The vulnerability in Gitea is related to the use of a name with an incorrect link. Exploiting this vulnerability can allow an attacker to cause service failures...

PT-2026-71880

Trigger.dev is the open-source platform for building AI workflows in TypeScript. From 4.4.2 until 4.5.0, the packet presign routes in apps/webapp/app/routes/api.v1.packets.$.ts pass a caller-controlled filename through resolveStoreProtocolForPacketPresign to generatePresignedUrl and...

PT-2026-71818

IBM i 7.6 could allow a remote attacker to cause a denial of service due to an out-of-bounds write...

PT-2026-71477

Name of the Vulnerable Software and Affected Versions PostgreSQL versions 17.0 through 17.10 PostgreSQL versions 18.0 through 18.4 Description Improper enforcement of message integrity in GSSAPI support allows a user to negotiate GSSAPI in a manner that contradicts pg hba.conf rules during an...

OPENSUSE-SU-2026:11504-1 dracut-112+suse.29.gc0c5e1d-1.1 on GA media

These are all security issues fixed in the dracut-112+suse.29.gc0c5e1d-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-71404

Name of the Vulnerable Software and Affected Versions Ixia IxVeriWave and Vector Informatik BLF file parser versions 4.6.0 through 4.6.7 Description A crash in the BLF file parser on Windows allows a denial of service. Recommendations At the moment, there is no information about a newer version...

PT-2026-71921

Trix is a what-you-see-is-what-you-get rich text editor for everyday writing. Prior to 2.1.18, Trix is vulnerable to stored cross-site scripting when crafted HTML is pasted into the editor. HTMLParser processes a mock attachment in a with an empty data-trix-attachment="" value, causing...

PT-2026-71675

vLLM is an inference and serving engine for large language models. From 0.19.0 until 0.26.0, the /v1/completions CompletionRequest.prompt field in vllm/entrypoints/openai/completion/protocol.py accepts an unbounded liststr or listlistint, prompt to seq in vllm/renderers/inputs/preprocess.py and...

PT-2026-71636

Name of the Vulnerable Software and Affected Versions rsync versions prior to 3.5.0 Description A privilege confusion issue exists in the name-converter subprocess uid/gid mapping. Local attackers can cause transferred files to be owned by root by influencing the name-converter responses to retur...

EUVD-2026-57701

The Meeting Room Booking System MRBS is a PHP-based application for booking meeting rooms. Prior to version 1.12.2, a user-supplied private/local URI can be made to be fetched without checks. Version 1.12.2 contains a fix. No known workarounds are available...

CVE-2026-46688

CVE-2026-46688 affects the Meeting Room Booking System (MRBS) prior to version 1.12.2, where an unauthenticated request can trigger a redirect to a caller-controlled URL. This open redirect could lead users to attacker-specified sites, including a spoofed MRBS login page. The issue is fixed in MR...

CVE-2026-59890 affecting package python-setuptools for versions less than 69.0.3-6

CVE-2026-59890 affecting package python-setuptools for versions less than 69.0.3-6. A patched version of the package is available...

CVE-2026-68432 affecting package kernel for versions less than 6.6.150.1-1

CVE-2026-68432 affecting package kernel for versions less than 6.6.150.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-68414 affecting package kernel for versions less than 6.6.150.1-1

CVE-2026-68414 affecting package kernel for versions less than 6.6.150.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-64562 affecting package kernel for versions less than 6.6.150.1-1

CVE-2026-64562 affecting package kernel for versions less than 6.6.150.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-64554 affecting package kernel for versions less than 6.6.145.2-1

CVE-2026-64554 affecting package kernel for versions less than 6.6.145.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-64533 affecting package kernel for versions less than 6.6.145.2-1

CVE-2026-64533 affecting package kernel for versions less than 6.6.145.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-64471 affecting package kernel for versions less than 6.6.145.2-1

CVE-2026-64471 affecting package kernel for versions less than 6.6.145.2-1. An upgraded version of the package is available that resolves this issue...