CVE-2026-64277 affecting package kernel for versions less than 6.6.145.2-1

CVE-2026-64277 affecting package kernel for versions less than 6.6.145.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-53381 affecting package kernel for versions less than 6.6.150.1-1

CVE-2026-53381 affecting package kernel for versions less than 6.6.150.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-53384 affecting package kernel for versions less than 6.6.150.1-1

CVE-2026-53384 affecting package kernel for versions less than 6.6.150.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-64546 affecting package kernel for versions less than 6.6.145.2-1

CVE-2026-64546 affecting package kernel for versions less than 6.6.145.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-64299 affecting package kernel for versions less than 6.6.145.2-1

CVE-2026-64299 affecting package kernel for versions less than 6.6.145.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-68084 affecting package kernel for versions less than 6.6.150.1-1

CVE-2026-68084 affecting package kernel for versions less than 6.6.150.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-68308 affecting package kernel for versions less than 6.6.150.1-1

CVE-2026-68308 affecting package kernel for versions less than 6.6.150.1-1. An upgraded version of the package is available that resolves this issue...

UBUNTU-CVE-2026-71193

In OpenStack Designate before 22.0.1, zone creation checks issubzone, issuperzone, and the duplicate-zone DB constraint are scoped to the target pool only. An authenticated user can bypass these checks by scheduling a zone to a different pool via the AttributeFilter scheduler, creating an...

CVE-2026-73489

creationtimestamp| type| source ---|---|--- 2026-08-12 22:35:07+00:00| published-proof-of-concept| https://github.com/Eugeny/russh/security/advisories/GHSA-cqjc-rmpq-xprq...

CVE-2026-13367

IBM Informix Dynamic Server 14.10, and 15.0 contain a local privilege escalation vulnerability in the oninit setuid-root utility...

CVE-2026-13367 IBM Informix Dynamic Server Privilege Escalation Vulnerability in oninit Utility

IBM Informix Dynamic Server 14.10, and 15.0 contain a local privilege escalation vulnerability in the oninit setuid-root utility...

CVE-2026-13367

IBM Informix Dynamic Server 14.10, and 15.0 contain a local privilege escalation vulnerability in the oninit setuid-root utility...

CVE-2026-45897

creationtimestamp| type| source ---|---|--- 2026-08-12 20:45:05+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260806...

CVE-2026-73308

creationtimestamp| type| source ---|---|--- 2026-08-12 20:35:15+00:00| published-proof-of-concept| https://github.com/Budibase/budibase/security/advisories/GHSA-gh4h-34gr-87r7...

CVE-2026-19002 Crafted database metadata may cause memory corruption in MongoDB BI Connector ODBC Driver

A missing bounds check when parsing stored procedure parameter metadata in the MongoDB BI Connector ODBC Driver can result in an out-of-bounds write in the client application process. Triggering this issue requires control over the server the driver connects to, or the ability to respond in its...

GHSA-JP6G-7MQJ-WJ53 vulnerabilities

Vulnerabilities for packages: libssh...

GHSA-WP74-JGXH-GV4Q vulnerabilities

Vulnerabilities for packages: dotnet-bootstrap...

io.quarkus/quarkus-rest: io.quarkus/quarkus-vertx-http: io.quarkus.resteasy.reactive/resteasy-reactive: Quarkus REST - Unbounded multipart MIME part-header accumulation allows remote OOM denial of service

A flaw was found in Quarkus REST. An unauthenticated remote attacker can exploit this vulnerability by sending a crafted multipart/form-data request with an excessively large header section. This unbounded accumulation of MIME part-header bytes can exhaust the Java Virtual Machine JVM heap memory...

EUVD-2026-57420

Missing authorization in the Execute Monitor API in Amazon OpenSearch Alerting plugin might allow an authenticated remote user to read, modify, or delete arbitrary index data via a crafted inline monitor request with unintentional data source and input index parameters...

EUVD-2026-57397

Budibase is an open-source low-code platform. Prior to 3.39.25, the GET /api/global/groups endpoint in packages/worker/src/api/routes/global/groups.ts omitted auth.builderOrAdmin, allowing an authenticated BASIC role user to enumerate tenant groups, role mappings and user memberships, builder...