EUVD-2026-57630

A data source definition containing an over-length file path setting may cause the MongoDB BI Connector ODBC Driver setup dialog to write outside the bounds of an allocated buffer. The issue stems from an incorrect buffer capacity calculation in the dialog's file and folder selection handling, an...

The vulnerability of the btrfs/tree-log.c component in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the btrfs/tree-log.c component in the Linux operating system’s kernel is related to improper handling of conflicting special elements. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2026-71624

Name of the Vulnerable Software and Affected Versions rsync versions prior to 3.5.0 Description A path traversal issue exists when using --relative mode. A malicious sender can write files outside the intended destination directory tree by crafting relative paths containing symlink components. Th...

ALSA-2026:54510 Important: bind security update

The Berkeley Internet Name Domain BIND is an implementation of the Domain Name System DNS protocols. BIND includes a DNS server named; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server is operating correctly. Security Fixes:...

ROS-20260813-73-0021

The vulnerability in Gitea is related to the use of a name with an incorrect link. Exploiting this vulnerability can allow an attacker to cause service failures...

SUSE SLES12: libpython3_4m1_0 / libpython3_4m1_0-32bit / python3 / python3-base / etc (SUSE-SU-2026:3601-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3601-1 advisory. - CVE-2026-0864: improper handling of line-ending characters can lead to configuration file injection when the configparser module is used...

PT-2026-71482

Name of the Vulnerable Software and Affected Versions PostgreSQL versions prior to 18.5 PostgreSQL versions prior to 17.11 PostgreSQL versions prior to 16.15 PostgreSQL versions prior to 15.19 PostgreSQL versions prior to 14.24 Description An integer underflow in the ECPG client allows a database...

Linux Distros Unpatched Vulnerability : CVE-2026-68454

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - KVM: s390: pci: Fix handling of AIF enable without AISB When a guest seeks to register IRQs without a summary bit specified, ensure that the associated GAITE th...

CVE-2026-68454

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: pci: Fix handling of AIF enable without AISB When a guest seeks to register IRQs without a summary bit specified, ensure that the associated GAITE then stores 0 for the guest AISB location instead of...

PT-2026-71868

Name of the Vulnerable Software and Affected Versions IBM Storage Scale versions 5.2.3.0 through 5.2.3.8 IBM Storage Scale versions 6.0.0.0 through 6.0.1.0 Description Sensitive information may be exposed within the log files of the IBM Storage Scale Management GUI. Specifically, the administrato...

RHEL 8 : bind9.16 (RHSA-2026:54509)

"The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:54509 advisory. The Berkeley Internet Name Domain BIND is an implementation of the Domain Name System DNS protocols. BIND includes a DNS server named...

PT-2026-71627

Name of the Vulnerable Software and Affected Versions rsync versions prior to 3.5.0 Description Improper path handling allows a malicious sender to expand the scope of --delete operations beyond the intended destination subtree. By sending a crafted file list, an attacker can cause the receiver t...

The vulnerability of the mac80211/ocb.c component in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the mac80211/ocb.c component in the Linux operating system is related to improper handling of the absence of a specific element. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2026-73232

A flaw was found in ffuf, a fast web fuzzer. A malicious server could exploit this vulnerability by sending a specially crafted HTTP response that, when decompressed by ffuf, consumes excessive memory. This can lead to an out-of-memory condition, causing a denial of service DoS for the ffuf...

MongoDB BI Connector ODBC driver may write outside an allocated buffer when the setup dialog opens a data source with oversized path settings

A data source definition containing an over-length file path setting may cause the MongoDB BI Connector ODBC Driver setup dialog to write outside the bounds of an allocated buffer. The issue stems from an incorrect buffer capacity calculation in the dialog's file and folder selection handling, an...

CVE-2026-19003 MongoDB BI Connector ODBC driver may write outside an allocated buffer when the setup dialog opens a data source with oversized path settings

A data source definition containing an over-length file path setting may cause the MongoDB BI Connector ODBC Driver setup dialog to write outside the bounds of an allocated buffer. The issue stems from an incorrect buffer capacity calculation in the dialog's file and folder selection handling, an...

CVE-2026-19001 MongoDB BI Connector ODBC driver may write outside an allocated buffer when handling oversized catalog object names

The MongoDB BI Connector ODBC Driver may write outside the bounds of a fixed-size buffer when an application supplies an unusually long catalog, schema, or object name to a metadata retrieval function. This may result in memory corruption within the calling application's process, leading to...

GHSA-5XVQ-CP9X-6P6R vulnerabilities

Vulnerabilities for packages: yazi...

GHSA-97FP-2VW9-Q5JG vulnerabilities

Vulnerabilities for packages: libssh...

CVE-2026-13267

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 and IBM Verify Identity Access Container 11.0 through 11.0.3 could allow an authenticated user to gain privileges of another user via a specially crafted request...