MINI-PQFM-62G4-FJPP

Bulletin has no description...

PT-2026-72036

A flaw was found in Undertow, an HTTP server, within its HTTP response header writing path. The writeString method performs a silent narrowing cast from 16-bit Unicode characters to 8-bit bytes when writing HTTP response header values. A remote attacker can exploit this by supplying specific...

PT-2026-72010

Name of the Vulnerable Software and Affected Versions SiYuan versions prior to 3.7.4 Description An information disclosure issue exists in the 'getAttributeViewBacklinks' endpoint. The system incorrectly consults the forbidden access list instead of the visibility list when filtering backlinks...

PT-2026-72128

Name of the Vulnerable Software and Affected Versions Red Hat Quay affected versions not specified Description An Insecure Direct Object Reference IDOR exists where a repository administrator can access notification configurations of other repositories by knowing or guessing the Universally Uniqu...

SAP NetWeaver Memory Corruption (3756674)

The version of the SAP NetWeaver kernel detected on the remote host is affected by a memory corruption vulnerability as referenced in SAP Security Note 3756674: - SAP ABAP Platform allows an unauthenticated user to send a specially crafted request to an internal component. This could disclose...

AlmaLinux 10 : .NET 8.0 (ALSA-2026:54541)

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:54541 advisory. .NET: .NET Core: .NET Security Feature Bypass Vulnerability CVE-2026-62899 .NET: .NET Information Disclosure Vulnerability CVE-2026-62900 .NET: .NET...

RockyLinux 10 : .NET 9.0 (RLSA-2026:54590)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:54590 advisory. .NET: .NET Core: .NET Security Feature Bypass Vulnerability CVE-2026-62899 .NET: .NET Information Disclosure Vulnerability CVE-2026-62900 .NET: .NET...

PT-2026-72090

Name of the Vulnerable Software and Affected Versions IBM Db2 Mirror for i versions 7.4 through 7.6 Description Remote attackers can obtain sensitive information because the system configuration is subject to external control. Recommendations At the moment, there is no information about a newer...

Security Updates for Azure CycleCloud < 8.9.2 (August 2026)

The Azure CycleCloud product is missing a security update. It is, therefore, affected by the following vulnerabilities: - Missing authorization in Azure CycleCloud allows an authorized attacker to elevate privileges over a network. CVE-2026-70340 - Missing authorization in Azure CycleCloud allows...

AlmaLinux 8 : .NET 10.0 (ALSA-2026:54542)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:54542 advisory. .NET: .NET Core: .NET Security Feature Bypass Vulnerability CVE-2026-62899 .NET: .NET Information Disclosure Vulnerability CVE-2026-62900 .NET: .NET Deni...

MiracleLinux 9 : ruby:4.0 (AXSA:2026-1542:01)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1542:01 advisory. ruby: net-imap: Net::IMAP: Denial of Service via crafted IMAP responses CVE-2026-42245 ruby/net-imap: ruby: Net::IMAP: IMAP Command Injection via...

The vulnerability in Microsoft Word, Microsoft Office suites, and Microsoft 365 Apps for Enterprise allows a perpetrator to disclose protected information.

The vulnerability of Microsoft Word, the Microsoft Office suite, and Microsoft 365 Apps for Enterprise involves reading data beyond the allowed range in memory. Exploiting this vulnerability can allow an attacker to disclose protected information...

Security Updates for Microsoft Dynamics 365 Business Central (August 2026)

The Microsoft Dynamics 365 Business Central install is missing a security update. It is, therefore, affected by an information disclosure vulnerability due to missing authorization. An authenticated, remote attacker can exploit this, to disclose potentially sensitive information. Note that Nessus...

PT-2026-72048

A weakness has been identified in Webkul Bagisto up to 2.4.4. This affects an unknown part of the file /admin/customers/search of the component Customer Search. Executing a manipulation of the argument Query can lead to information disclosure. The attack may be launched remotely. The exploit has...

PT-2026-72065

Name of the Vulnerable Software and Affected Versions CKAN MCP Server versions prior to 0.4.112 Description Error paths reflect raw upstream response bodies and internal exception messages to the caller instead of using sanitized, generic messages. This occurs when the server is directed to a hos...

The vulnerability in the wireless/wext-core.c component of the Linux operating system allows a hacker to gain access to confidential data.

The vulnerability of the wireless/wext-core.c component in the Linux operating system is related to the lack of initialization for that resource. Exploiting this vulnerability can allow an attacker to gain access to confidential data...

PT-2026-72131

Name of the Vulnerable Software and Affected Versions Red Hat Quay affected versions not specified Description A flaw in the exported logs feature allows an unauthenticated attacker to download exported action logs without proper authorization if they possess a valid file ID. Although these IDs a...

Debian dla-4740 : libecpg-compat3 - security update

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4740 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4740-1 [email protected]...

The vulnerability in the `pci/ctxfi/ctamixer.c` component of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability in the pci/ctxfi/ctamixer.c component of the Linux operating system is related to reading data from the buffer beyond its allowable limits. Exploiting this vulnerability can allow an attacker to cause a service failure...

RockyLinux 10 : .NET 8.0 (RLSA-2026:54541)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:54541 advisory. .NET: .NET Core: .NET Security Feature Bypass Vulnerability CVE-2026-62899 .NET: .NET Information Disclosure Vulnerability CVE-2026-62900 .NET: .NET...