MINI-M39M-4V94-3XPJ

Bulletin has no description...

MINI-FHHG-5QW8-HCXR

Bulletin has no description...

MINI-QHMQ-RMPM-2VXC

Bulletin has no description...

MINI-R9HH-X9V3-CFQQ

Bulletin has no description...

MINI-4W67-58FQ-W52R

Bulletin has no description...

Exploit for Path Traversal in Apache Http_Server

No d...

CVE-2026-71062

creationtimestamp| type| source ---|---|--- 2026-08-19 13:35:24+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mtgtwvco7x2l 2026-08-19 16:45:12+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...

GHSA-XPR4-8VP6-C87J

creationtimestamp| type| source ---|---|--- 2026-08-19 11:32:39+00:00| seen| https://gist.github.com/alon710/3948341428804c685cf1bc5b4fc0d3f1...

CVE-2026-74369

A flaw was found in the Linux kernel's liveupdate component. This use-after-free vulnerability occurs due to an incorrect order of operations when managing file handler modules. Specifically, the system attempts to access module operations after the module's reference count has been decremented,...

Vulnerabilities in Oracle Commerce Platform

Oracle has identified several vulnerabilities in the Oracle Commerce Platform version 11.4.0. These vulnerabilities allow unauthorized attackers with network access to perform critical actions without authentication. This includes gaining unauthorized access to sensitive data, modifying, deleting...

GHSA-XPMJ-WJCP-6PWW

creationtimestamp| type| source ---|---|--- 2026-08-19 09:32:00+00:00| seen| https://gist.github.com/alon710/f8eaee2020ed8f819add6f9d1de77bf8...

BIT-JUPYTERLAB-2026-73416 jupyterlab: PyPI extension blocklist package-name canonicalization bypass

jupyterlab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. From 4.5.0 until 4.5.10 and 4.6.2, in jupyterlab/extensions/manager.py and jupyterlab/extensions/pypi.py, JupyterLab's PyPI extension manager enforces...

CVE-2026-58087

The GETALL and SETALL commands in semctl2 recorded the number of semaphores in the target set, dropped the lock protecting the set, allocated a buffer sized for that count, and reacquired the lock. A sequence-number check was used to verify that the set had not been replaced in the interim, but t...

CVE-2026-74356

A flaw was found in the Linux kernel's vhost subsystem. An incorrect return value from the vhostgetavailidx function can cause the host to livelock. A malicious guest operating system OS can exploit this by not processing virtqueue entries, leading to the host repeatedly disabling notifications a...

EUVD-2026-62338

To retrieve the previous timer value, the kernel calls realtimergettime, which obtains the current time for the timer's clock. For a timer using CLOCKTAI this can fail when no TAI offset has been configured, but the error return was not checked, so the uninitialized output buffer was copied to...

CVE-2026-49428

Certain system calls, such open2 with the OTRUNC flag set, and fspacectl2, could incorrectly free memory in largepage objects. These operations are not permitted on largepage objects, but the implementation did not verify this. An unprivileged local user can abuse the bug to access freed kernel...

CVE-2026-49422

The RACK setsockopt2 handler drops the connection lock in order to copy option data from userspace, then reacquires the lock. After reacquiring, it verifies that the TCP stack had not been switched away, but did not reload its pointer to the stack's per-connection control block. If userspace...

CVE-2026-49428 posixshm: system calls can incorrectly free memory of largepage objects

Certain system calls, such open2 with the OTRUNC flag set, and fspacectl2, could incorrectly free memory in largepage objects. These operations are not permitted on largepage objects, but the implementation did not verify this. An unprivileged local user can abuse the bug to access freed kernel...

EUVD-2026-62255

Certain system calls, such open2 with the OTRUNC flag set, and fspacectl2, could incorrectly free memory in largepage objects. These operations are not permitted on largepage objects, but the implementation did not verify this. An unprivileged local user can abuse the bug to access freed kernel...

CVE-2026-49428

In FreeBSD's posixshm module, open(2) with O_TRUNC and fspacectl(2) failed to verify whether operations are permitted on largepage objects, incorrectly freeing kernel memory. An unprivileged local user can read freed kernel memory and escalate privileges. Affected: all supported versions prior to...