312949 matches found
PT-2026-72689
In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt re: Initialize dpi variable to zero dpi is initialized only for BNXT RE ALLOC WC PAGE, but copied for all the cases. So initialize the dpi to 0...
Linux Distros Unpatched Vulnerability : CVE-2026-72402
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: Mask pseudo pointer values in verifier logs printbpfinsn masks ldimm64 immediates for pointer- bearing pseudo sources when pointer leaks are not allowed, b...
SUSE CVE-2026-14678
Buffer over-read in PostgreSQL pgtrgm index picksplit function reads past end of a heap buffer. This might allow a table maintainer to infer limited memory values, via the lossy signal of index split choices. Versions before PostgreSQL 18.6, 17.11, 16.15, 15.19, and 14.24 are affected...
SUSE CVE-2026-18024
Buffer over-read in PostgreSQL ascii SQL function allows a user to disclose up to 3 bytes after the end of a specific allocation, via a crafted text value. This is the same class of defect that CVE-2026-2006 fixed, though this instance has less impact. Versions before PostgreSQL 18.6, 17.11, 16.1...
CVE-2026-74245
A flaw was found in Red Hat Quay's exported logs feature. An unauthenticated attacker with a valid file ID could download exported action logs without proper authorization. While file IDs are complex, they can be intercepted from plaintext email or webhook callbacks. This vulnerability leads to...
CVE-2026-74242
A flaw was found in Red Hat Quay. An administrator of any repository, by knowing or guessing a target notification's Universally Unique Identifier UUID, can read the notification configuration, including sensitive details like webhook URLs, Slack tokens, and email addresses. This vulnerability al...
CVE-2026-19846
creationtimestamp| type| source ---|---|--- 2026-08-14 23:04:57+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117096362627838188...
CVE-2026-74247
Red Hat Quay contains a Server-Side Request Forgery (SSRF) vulnerability in its build API , specifically through the archive_url parameter. A user with repository write access and the FEATURE_BUILD_SUPPORT feature enabled can supply a malicious URL, causing the Quay builder to issue requests to i...
CVE-2026-74245 Quay: unauthenticated exported logs download in quay
A flaw was found in Red Hat Quay's exported logs feature. An unauthenticated attacker with a valid file ID could download exported action logs without proper authorization. While file IDs are complex, they can be intercepted from plaintext email or webhook callbacks. This vulnerability leads to...
CVE-2026-74245
Red Hat Quay 's exported logs feature contains an authorization flaw that allows an unauthenticated attacker with a valid file ID to download exported action logs. While file IDs are complex, they can be intercepted from plaintext email or webhook callbacks . The impact is information disclosure ...
CVE-2026-74245
A flaw was found in Red Hat Quay's exported logs feature. An unauthenticated attacker with a valid file ID could download exported action logs without proper authorization. While file IDs are complex, they can be intercepted from plaintext email or webhook callbacks. This vulnerability leads to...
CVE-2026-74242
Affects Red Hat Quay. The issue allows a repository administrator to read a notification’s configuration (including webhook URLs, Slack tokens, and email addresses) by knowing or guessing the target notification UUID, and to trigger test notifications for another repository. Root cause: unauthori...
CVE-2026-74242 Quay: repository notification uuid idor in quay api
A flaw was found in Red Hat Quay. An administrator of any repository, by knowing or guessing a target notification's Universally Unique Identifier UUID, can read the notification configuration, including sensitive details like webhook URLs, Slack tokens, and email addresses. This vulnerability al...
CVE-2026-74242
A flaw was found in Red Hat Quay. An administrator of any repository, by knowing or guessing a target notification's Universally Unique Identifier UUID, can read the notification configuration, including sensitive details like webhook URLs, Slack tokens, and email addresses. This vulnerability al...
MINI-G5R6-4FCJ-J79P
Bulletin has no description...
MINI-H6XJ-3PQG-FHQ5
Bulletin has no description...
MINI-J44P-25G3-2275
Bulletin has no description...
Security Bulletin: Multiple vulnerabilities in IBM Rational Developer for i (CVE-2026-10051, CVE-2026-6790, CVE-2026-8384, CVE-2026-10050, CVE-2026-59879, CVE-2026-59880)
Summary IBM Rational Developer for i is affected by a sensitive information exposure vulnerability in Eclipse Jetty-server CVE-2026-10051, an improper input validation vulnerability in Eclipse Jetty-server CVE-2026-6790, an authorization decision vulnerability in Eclipse Jetty-util CVE-2026-8384,...