CVE-2026-73650 vulnerabilities

Vulnerabilities for packages: arangodb...

CVE-2026-71312 vulnerabilities

Vulnerabilities for packages: telegraf...

GHSA-QW24-GH76-8RVV vulnerabilities

Vulnerabilities for packages: telegraf...

GHSA-25QR-6MPR-F7QX vulnerabilities

Vulnerabilities for packages: telegraf...

MINI-CF29-MF8V-GC2R

Bulletin has no description...

CVE-2026-71571

Joomla Extension - icagenda.com - Authenticated SQL injection via unescaped numeric filter in iCagenda 2.0.0-4.0.11 - Backend operators with permissions to access iCagenda could inject SQL...

CVE-2026-17227

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to bypass security restrictions due to improper neutralization of special elements used in an SQL command...

CVE-2026-18178

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to delete arbitrary files due to path traversal...

CVE-2026-17179

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to cause a denial of service due to command injection...

CVE-2026-16915

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensitive information due to improper input validation...

CVE-2026-71570 Joomla Extension - icagenda.com - ACL bypass allowing arbitrary user enumeration < 2.0.0-4.0.11

Joomla Extension - icagenda.com - ACL bypass allowing arbitrary user enumeration 2.0.0-4.0.11 - A backend operator granted access scoped to comicagenda only could enumerate Joomla user profiles...

EUVD-2026-58805

Joomla Extension - icagenda.com - ACL bypass allowing arbitrary user enumeration 2.0.0-4.0.11 - A backend operator granted access scoped to comicagenda only could enumerate Joomla user profiles...

MINI-G25V-V8XV-RF4Q

Bulletin has no description...

MINI-X5HC-P5F5-Q7RP

Bulletin has no description...

MINI-H475-7772-5RQ7

Bulletin has no description...

EUVD-2026-58804

Joomla Extension - icagenda.com - Authenticated SQL injection via unescaped numeric filter in iCagenda 2.0.0-4.0.11 - Backend operators with permissions to access iCagenda could inject SQL...

MINI-FJ84-57F5-8WHG

Bulletin has no description...

MINI-M7V3-R58V-QVPV

Bulletin has no description...

MINI-F5VP-V633-Q543

Bulletin has no description...

CVE-2026-73680 Cockpit CMS 2.14.0 Authenticated Command Injection via FFmpeg Filename

Cockpit CMS 2.14.0 and prior contains a command injection vulnerability in the FFmpeg integration that allows authenticated users with only the assets/upload permission to execute arbitrary commands by uploading a video file with a shell metacharacter-laden filename. The unsanitized filename is...