PT-2026-54961

Name of the Vulnerable Software and Affected Versions Unicamp versions prior to 2.2.3 Description A SQL Injection issue exists where users with subscriber-level access can extract sensitive data. This occurs due to improper handling of input in the subscriber module, allowing an attacker to execu...

TencentOS Server 2: 389-ds-base (TSSA-2026:0585)

The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0585 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities:...

OPENSUSE-SU-2026:11175-1 kernel-devel-7.1.2-1.1 on GA media

These are all security issues fixed in the kernel-devel-7.1.2-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-55031

Unauthenticated Cross Site Request Forgery CSRF in Werkstatt = 4.7.2 versions...

SUSE SLED15: docker / docker-bash-completion / docker-buildx / etc (SUSE-SU-2026:2692-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2692-1 advisory. This update for docker fixes the following issues - CVE-2026-33814: golang.org/x/net/http2: infinite loop in...

MINI-784X-9PWM-6MF2

Bulletin has no description...

MINI-QXGW-5VF2-RXMM

Bulletin has no description...

CVE-2026-14022

creationtimestamp| type| source ---|---|--- 2026-07-01 23:42:42+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmozppbnx2u 2026-07-01 23:42:43+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mpmozpxqcr2v 2026-07-02 04:24:16+00:00| seen|...

CVE-2026-14086

creationtimestamp| type| source ---|---|--- 2026-07-01 23:42:18+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmoyxxmt22y 2026-07-01 23:42:21+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mpmoz3vl3a2l 2026-07-02 07:51:58+00:00| seen|...

CVE-2026-54704

OpenTelemetry Java Instrumentation provides OpenTelemetry auto-instrumentation and instrumentation libraries for Java. In versions prior to 2.28.0, the JDBC auto-instrumentation may fail to sanitize passwords in SQL CONNECT statements when the password is double-quoted. As a result, clear-text...

PYSEC-2026-616

Wagtail is an open source content management system built on Django. In versions prior to 7.0.8, 7.3.3 and 7.4.2, reflected cross-site scripting XSS vulnerability exists on the dynamic image URL generator view within the Wagtail admin interface. A user with a limited-permission editor account for...

CVE-2026-14118

creationtimestamp| type| source ---|---|--- 2026-07-01 21:52:19+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mpmiudiqbs2u 2026-07-01 21:52:19+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmiudkavx24 2026-07-02 01:46:42+00:00| seen|...

CVE-2026-14102

creationtimestamp| type| source ---|---|--- 2026-07-01 21:48:34+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpminn4tbe2q 2026-07-01 21:48:39+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mpminqz6hj2g 2026-07-02 08:15:24+00:00| seen|...

CVE-2026-14109

creationtimestamp| type| source ---|---|--- 2026-07-01 21:47:03+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmikvy2q622 2026-07-01 21:47:11+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mpmil5kn6p23 2026-07-02 01:46:01+00:00| seen|...

CVE-2026-14107

creationtimestamp| type| source ---|---|--- 2026-07-01 21:46:22+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmijof2uk2o 2026-07-01 21:46:23+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mpmijogcta2l 2026-07-02 08:16:54+00:00| seen|...

CVE-2026-14039

creationtimestamp| type| source ---|---|--- 2026-07-01 21:27:35+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mpmhi4g3vu2v 2026-07-01 21:27:38+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmhi6wlup2o 2026-07-02 07:50:15+00:00| seen|...

CVE-2026-14054

creationtimestamp| type| source ---|---|--- 2026-07-01 21:26:11+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmhfmb6zh2b 2026-07-01 21:26:12+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mpmhfnhf4z2g 2026-07-02 07:50:48+00:00| seen|...

CVE-2026-14058

creationtimestamp| type| source ---|---|--- 2026-07-01 21:24:39+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmhcuusnh2b 2026-07-01 21:24:41+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mpmhcweafi2y 2026-07-02 07:50:56+00:00| seen|...

CVE-2026-14041

creationtimestamp| type| source ---|---|--- 2026-07-01 21:23:06+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mpmha35g752k 2026-07-01 21:23:08+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmha5thxd2l 2026-07-01 23:53:16+00:00| seen|...

Heap-based Buffer Overflow

Overview Magick.NET-Q16-x86 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...