CVE-2026-16924 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to an improper calculation of a memory offset during IPsec decapsulation...

EUVD-2026-63384

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to an improper calculation of a memory offset during IPsec decapsulation...

CVE-2026-16924

IBM AIX 7.2, 7.3, and PowerVM VIOS 4.1 contain a flaw in IPsec decapsulation where improper memory offset calculation allows a remote, unauthenticated attacker to trigger a denial of service (CVSS 7.5 HIGH). No exploitation or patch details are provided in the documents; a reference link to IBM s...

CVE-2026-20319

creationtimestamp| type| source ---|---|--- 2026-08-20 14:25:17+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mtjh6z3l4k26...

CVE-2026-58436

A flaw was found in Gitea. An unauthenticated remote attacker could exploit a quadratic-time algorithm in the ParseAcceptLanguage function, specifically within the Locale middleware. This vulnerability allows an attacker to send specially crafted requests, leading to excessive resource consumptio...

GHSA-P9R8-2Q67-FP86

creationtimestamp| type| source ---|---|--- 2026-08-20 14:00:04+00:00| published-proof-of-concept| Telegram/s3A4zS-xINsQCOFnw3lncQJfAtm8MI1VEo1sscCDdPigg 2026-08-20 16:00:50+00:00| seen| https://thehackernews.com/2026/08/nasa-ait-gui-flaws-could-let.html 2026-08-21 00:00:09+00:00|...

Microsoft Exchange Online Elevation of Privilege Vulnerability

Server-side request forgery ssrf in Microsoft Exchange Online allows an unauthorized attacker to elevate privileges over a network...

Azure Arc Elevation of Privilege Vulnerability

Use of incorrectly-resolved name or reference in Azure Arc allows an unauthorized attacker to elevate privileges over a network...

Microsoft Entra ID Elevation of Privilege Vulnerability

Server-side request forgery ssrf in Azure Active Directory allows an authorized attacker to elevate privileges over a network...

Azure Arc Elevation of Privilege Vulnerability

Incorrect authorization in Azure Arc allows an unauthorized attacker to elevate privileges over a network...

Azure Logic Apps Elevation of Privilege Vulnerability

Improper limitation of a pathname to a restricted directory 'path traversal' in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network...

Azure SQL Database Elevation of Privilege Vulnerability

Improper neutralization of special elements used in an sql command 'sql injection' in Azure SQL Database allows an authorized attacker to elevate privileges over a network...

Azure Data Factory Elevation of Privilege Vulnerability

Improper verification of cryptographic signature in Azure Data Factory allows an unauthorized attacker to elevate privileges over a network...

Azure SQL Database Elevation of Privilege Vulnerability

Server-side request forgery ssrf in Azure SQL Database allows an unauthorized attacker to elevate privileges over a network...

Azure Virtual Machines Elevation of Privilege Vulnerability

Server-side request forgery ssrf in Azure Virtual Machines allows an authorized attacker to elevate privileges over a network...

Microsoft Remote Help Denial of Service Vulnerability

Uncontrolled search path element in Windows Remote Help allows an authorized attacker to deny service locally...

MINI-294G-8MVQ-VJJR

Bulletin has no description...

MINI-78J4-2M23-XQ2F

Bulletin has no description...

CVE-2026-74267

A flaw was found in the Linux kernel's schcodel Controlled Delay component, which manages network packet queues. When schcodel processes packets, it can incorrectly reduce the queue's size before it is properly updated. This error can lead to the premature deactivation of a parent queue, such as...

CVE-2026-74266

A flaw was found in the Linux kernel's schdualpi2 network scheduler. When the scheduler processes network packets, it can incorrectly manage its internal queue length. This mismanagement can lead to a system crash, making the system unavailable Denial of Service...