CVE-2026-18707

creationtimestamp| type| source ---|---|--- 2026-08-13 04:45:50+00:00| seen| https://www.hkcert.org/security-bulletin/mongodb-multiple-vulnerabilities20260813...

CVE-2026-18701

creationtimestamp| type| source ---|---|--- 2026-08-13 04:45:36+00:00| seen| https://www.hkcert.org/security-bulletin/mongodb-multiple-vulnerabilities20260813...

CVE-2026-18695

creationtimestamp| type| source ---|---|--- 2026-08-13 04:45:21+00:00| seen| https://www.hkcert.org/security-bulletin/mongodb-multiple-vulnerabilities20260813...

PT-2026-71822

IBM i 7.6, 7.5, and 7.4 s vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database...

PT-2026-71577

Unauthenticated SQL Injection in Everest Backup = 2.3.12 versions...

Linux Distros Unpatched Vulnerability : CVE-2026-14671

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Type confusion in PostgreSQL module refint allows an object creator to execute arbitrary code as the operating system user running the database. The fix for thi...

PT-2026-71884

FreePBX is an open source IP PBX. From 16.0.0 until 16.0.11 and 17.0.4, the FreePBX missedcall module places the inbound Caller ID name from crafted SIP From headers into the missedcalllog INSERT in agi-bin/missedcallnotify.php without escaping or bound parameters. An unauthenticated caller can...

PT-2026-71707

ASP-CMS contains a SQL injection vulnerability in the commentList.asp endpoint that allows unauthenticated remote attackers to inject arbitrary SQL by manipulating the id parameter in GET requests to the comment listing script. Attackers can bypass the application's keyword blocklist by...

CVE-2026-71469

creationtimestamp| type| source ---|---|--- 2026-08-12 23:01:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/637i7bpnm3hto 2026-08-13 08:00:46+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msx6gxhtfw2o...

CVE-2026-16480

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is affected by an improper authorization vulnerability in the certain command, allowing a non-privileged user to bypass authority checks and modify database catalog data...

EUVD-2026-57621

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to privilege escalation with a specially crafted query...

GHSA-PFVM-W89X-94JW

creationtimestamp| type| source ---|---|--- 2026-08-12 20:31:49+00:00| seen| https://gist.github.com/alon710/05e3ea6ef79e0a47d082b88eec33ae87...

GHSA-4H4R-Q9XG-GFMM vulnerabilities

Vulnerabilities for packages: libssh...

CVE-2026-72798

SiYuan versions before v3.7.4 fail to properly filter related-database content in renderAttributeView, allowing anonymous readers to access Relation and Rollup cell contents from hidden or password-protected databases. Attackers can request published databases that relate to restricted databases ...

CVE-2026-72791

SiYuan v3.7.4-alpha.1 a pre-release; the endpoint does not exist in stable v3.7.3 or earlier contains an information disclosure vulnerability in the /api/av/getAttributeViewFieldViews endpoint. The route is registered with CheckAuth only and applies no publish-access filtering, so reader-role...

CVE-2026-17111

IBM i 7.6, 7.5, 7.4, and 7.3 s vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database...

EUVD-2026-57523

IBM i 7.6, 7.5, 7.4, and 7.3 s vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database...

CVE-2026-17111

IBM i versions 7.6, 7.5, 7.4, and 7.3 are vulnerable to CWE-89 SQL injection in the SQL component, allowing remote attackers to view, add, modify, or delete backend database data. NVD rates it CVSS 9.8 (critical); IBM rates 7.6 (high, requiring low privileges). Fixes: PTF SJ10867 (7.6), SJ10868 (...

CVE-2026-17111

IBM i 7.6, 7.5, 7.4, and 7.3 s vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database...

CVE-2026-7427

creationtimestamp| type| source ---|---|--- 2026-08-12 19:18:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/4eiui2orbis7y 2026-08-13 14:05:08+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3msxssijrld2m...