EUVD-2026-62669

A flaw was found in volsync-addon-controller. This vulnerability allows an attacker to inject malicious YAML Yet Another Markup Language code into the OpenShift Lifecycle Manager OLM Subscription resource. This is due to improper escaping of annotation values when they are rendered into YAML...

CVE-2026-70901

creationtimestamp| type| source ---|---|--- 2026-08-19 17:52:31+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...

CVE-2026-70900

creationtimestamp| type| source ---|---|--- 2026-08-19 17:52:29+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...

CVE-2026-74481

A flaw was found in the Linux kernel's memory management, specifically within the page reporting mechanism. During system suspend or hibernation, the page reporting process could attempt to access memory that had already been freed by device drivers. This Use-After-Free vulnerability can lead to ...

CVE-2026-70965

creationtimestamp| type| source ---|---|--- 2026-08-19 17:50:09+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...

CVE-2026-74482

A flaw was found in the Linux kernel's huge memory management mm/hugememory. A race condition exists in the foliosplit function where the immaprwsem lock is released prematurely before all after-split folios are fully processed. This allows a concurrent operation to free the inode while subsequen...

CVE-2026-72363

A flaw was found in the netfs component of the Linux kernel. This vulnerability occurs when the system runs out of memory during a data write operation, leading to an incorrect state for the affected memory pages folios. An attacker could potentially trigger this condition, which may cause the...

CVE-2026-72412

A flaw was found in the Linux kernel's memory management for s390 systems. An internal flag, intended to mark guest memory pages for discard after unmapping by the Kernel-based Virtual Machine KVM, was not consistently cleared when those pages were subsequently reused. This improper handling coul...

CVE-2026-61118

creationtimestamp| type| source ---|---|--- 2026-08-19 17:19:04+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10 2026-08-23 01:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mtpno5zsu52u...

CVE-2026-61230

creationtimestamp| type| source ---|---|--- 2026-08-19 17:18:57+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...

CVE-2026-20177

A vulnerability in the handling of management plane packets by Cisco Industrial Ethernet IE 1000 Series Switches could allow an unauthenticated, remote attacker to cause the device manager, SSH, or API to become inaccessible.This vulnerability is due to insufficient protection against management...

CVE-2026-20232

A vulnerability in the web-based management interface of Cisco Industrial Ethernet IE 1000 Series Switches could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the interface. This vulnerability is due to insufficient validation of...

CVE-2026-61213

creationtimestamp| type| source ---|---|--- 2026-08-19 17:18:22+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...

CVE-2026-72357

A flaw was found in the Linux kernel's uprobes/x86 component. The inuprobetrampoline function incorrectly uses the current process's memory management current-mm for Virtual Memory Area VMA lookups during the unregistration process. This occurs because the lookup is performed in the tracer's...

CVE-2026-71030

creationtimestamp| type| source ---|---|--- 2026-08-19 16:47:31+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...

MINI-GVMC-PMPP-J9VQ

Bulletin has no description...

EUVD-2026-62562

A vulnerability in the web-based management interface of Cisco Industrial Ethernet IE 1000 Series Switches could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the interface. This vulnerability is due to insufficient validation of...

CVE-2026-20232

The web-based management interface of Cisco IE 1000 Series Switches fails to validate user-supplied input, enabling an authenticated attacker to inject malicious script into specific pages that executes in another user's session (stored XSS). CVSS 5.4 (MEDIUM) requires valid credentials and user ...

CVE-2026-20232 Cisco Industrial Ethernet 1000 Series Switches Stored Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Industrial Ethernet IE 1000 Series Switches could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the interface. This vulnerability is due to insufficient validation of...

EUVD-2026-62559

A vulnerability in the handling of management plane packets by Cisco Industrial Ethernet IE 1000 Series Switches could allow an unauthenticated, remote attacker to cause the device manager, SSH, or API to become inaccessible.This vulnerability is due to insufficient protection against management...