PT-2026-72930

In the Linux kernel, the following vulnerability has been resolved: um: vector: fix use-after-free in vector mmsg rx When vector mmsg rx discards a packet whose overlay header fails verify header, it frees the skb and continues the loop: if header check estats.rx encaps errors++; continue; The...

MINI-6R55-P3V5-4PXQ

Bulletin has no description...

CVE-2026-16905

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensitive information due to improper authentication...

MINI-J2GX-MMRG-Q5JV

Bulletin has no description...

MINI-5WPJ-9C28-26WJ

Bulletin has no description...

CVE-2026-72970

creationtimestamp| type| source ---|---|--- 2026-08-14 18:31:42+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117095288105744818 2026-08-17 04:45:04+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260817 2026-08-17 14:50:13+00:00| seen|...

CVE-2026-72970

Heap-based buffer overflow in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...

MINI-7948-7G9H-6H7G

Bulletin has no description...

MINI-6V73-H6XG-MHP7

Bulletin has no description...

MINI-WM32-X5JR-7JJX

Bulletin has no description...

MINI-6XWV-4X2F-FX7M

Bulletin has no description...

MINI-45RW-V55Q-XM2C

Bulletin has no description...

CVE-2026-19811

creationtimestamp| type| source ---|---|--- 2026-08-14 09:01:21+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mszscanxsn27 2026-08-14 18:03:22+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mt2qlh2amg2t 2026-08-14 18:03:24+00:00| seen|...

Arbitrary Query Execution

Spring AI Vector Stores are vulnerable to Arbitrary Query Execution. The vulnerability is due to insufficient sanitization of special characters in vector store queries, allowing attackers to inject and execute arbitrary queries in Elasticsearch, OpenSearch, and GemFire VectorDB...

CVE-2026-19770

A vulnerability was identified in feedmob fm-mcp-servers 0.0.3. Affected by this vulnerability is the function downloadReport of the file src/smadex-reporting/src/index.ts of the component Download Endpoint. The manipulation of the argument downloadUrl leads to server-side request forgery. The...

ECHO-F2C3-3DD7-067B

Bulletin has no description...

GLSA-202608-11 : haveged: Privilege escalation

The remote host is affected by the vulnerability described in GLSA-202608-11 haveged: Privilege escalation A vulnerability has been discovered in haveged. Please review the CVE identifier referenced below for details. Tenable has extracted the preceding description block directly from the Gentoo...

python3-ansible-compat-26.8.0-1.1 on GA media (moderate)

python3-ansible-compat-26.8.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11509-1 Rating: moderate Cross-References: CVE-2026-11332 CVSS scores: CVE-2026-11332 SUSE : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Tumbleweed An update that solves one...

CVE-2026-56858

Previously, pathological inputs could close an unescaped '/' early, allowing for attack-controlled data to inject arbitrary content, potentially leading to XSS...

CVE-2026-73572

In Zimbra Collaboration ZCS before 10.1.17, a stored cross-site scripting XSS vulnerability exists in the Zimbra Classic Web Client due to insufficient sanitization of specific attachment content during inline preview. An attacker can send a crafted email containing a malicious attachment that,...