CVE-2026-19898

A vulnerability was found in VictoriaMetrics up to 1.146.0. Impacted is the function requestHandler of the file app/vmauth/main.go of the component VMAuth Authentication Endpoint. Performing a manipulation results in improper restriction of excessive authentication attempts. The attack is possibl...

CVE-2026-19898 VictoriaMetrics VMAuth Authentication Endpoint main.go requestHandler excessive authentication

A vulnerability was found in VictoriaMetrics up to 1.146.0. Impacted is the function requestHandler of the file app/vmauth/main.go of the component VMAuth Authentication Endpoint. Performing a manipulation results in improper restriction of excessive authentication attempts. The attack is possibl...

EUVD-2026-59771

A vulnerability has been found in mangroup dtale up to 3.22.0. This issue affects the function Login of the file dtale/auth.py of the component Login Endpoint. Such manipulation leads to improper restriction of excessive authentication attempts. The attack can be executed remotely. This attack is...

Exploit for CVE-2026-6440

No d...

CVE-2026-19896 mangroup dtale Flask Session Cookie app.py build_secret_key random values

A flaw has been found in mangroup dtale up to 3.22.0. This vulnerability affects the function buildsecretkey of the file dtale/app.py of the component Flask Session Cookie. This manipulation causes insufficiently random values. Remote exploitation of the attack is possible. The attack's complexit...

MINI-3348-2PH5-HRWX

Bulletin has no description...

MINI-HCRJ-H7C3-R5RH

Bulletin has no description...

MINI-583J-RCV9-855X

Bulletin has no description...

MINI-HQ52-8QRP-3X8C

Bulletin has no description...

MINI-PMX5-RF7R-GHW7

Bulletin has no description...

MINI-FJ9X-9JPX-3WQ5

Bulletin has no description...

MINI-W5HG-C9GV-RCFP

Bulletin has no description...

CVE-2026-19895 opensourcepos Open Source Point of Sale Login Endpoint Filters.php index excessive authentication

A vulnerability was detected in opensourcepos Open Source Point of Sale up to 3.4.2. This affects the function Login::index of the file app/Config/Filters.php of the component Login Endpoint. The manipulation results in improper restriction of excessive authentication attempts. The attack may be...

CVE-2026-19895

CVE-2026-19895 affects open source POS Open Source Point of Sale, version up to 3.4.2. The vulnerability lies in Login::index (file app/Config/Filters.php, Login Endpoint), where excessive authentication attempts are improperly restricted. This allows a remote attack with high complexity; exploit...

CVE-2026-19894

A security flaw has been discovered in itsourcecode Hospital Management System 1.0. Affected is an unknown function of the file /viewmedicine.php. Performing a manipulation of the argument delid results in sql injection. The attack can be initiated remotely. The exploit has been released to the...

UBUNTU-CVE-2026-74501

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: fix use-after-free in umptoendpoint createmidi2ump registers a card-owned sndumpendpoint and stores a back-pointer to its per-interface sndusbmidi2ump object in ump-privatedata, but it never installs an...

CVE-2026-74520

In the Linux kernel, the following vulnerability has been resolved: iommu/iommufd: Fix IOPF group ownership UAF iopfgroupalloc links each last-page IOPF group into the generic IOPF pending list before invoking the domain fault handler. iommufdfaultiopfhandler also queued an accepted group in the...

CVE-2026-74485 binfmt_misc: reject a flag character as the field delimiter

In the Linux kernel, the following vulnerability has been resolved: binfmtmisc: reject a flag character as the field delimiter The registration string starts with a user chosen delimiter that separates the individual fields. So that the field parsers terminate even on a truncated string createent...

EUVD-2026-59746

A security flaw has been discovered in itsourcecode Hospital Management System 1.0. Affected is an unknown function of the file /viewmedicine.php. Performing a manipulation of the argument delid results in sql injection. The attack can be initiated remotely. The exploit has been released to the...

CVE-2026-19894

The CVE-2026-19894 entry concerns itsourcecode Hospital Management System 1.0. Affected is an unknown function in /viewmedicine.php where manipulating the delid parameter yields a SQL injection. This can be triggered remotely, and public exploits exist. Connected sources corroborate an attacker-c...