MINI-VQGJ-5XP7-3PWC

Bulletin has no description...

ECHO-FCA2-5D51-7D6D

Bulletin has no description...

CVE-2026-71572

creationtimestamp| type| source ---|---|--- 2026-08-19 13:35:31+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mtgtx3ssvp26...

PYSEC-2026-3662 GeoLens: Cross-dataset authorization bypass discloses private dataset metadata, schema, sample values, table rows, and raster/vector tile data

Summary Multiple GeoLens read/link endpoints authorized only the resource named in the request URL a map, a VRT, a source dataset, an AI request and failed to re-authorize a second, caller-influenced dataset that the request reached through a relationship, layer reference, mosaic source, or reque...

PYSEC-2026-3663 GeoLens: Cross-dataset authorization bypass discloses private dataset metadata, schema, sample values, table rows, and raster/vector tile data

Summary Multiple GeoLens read/link endpoints authorized only the resource named in the request URL a map, a VRT, a source dataset, an AI request and failed to re-authorize a second, caller-influenced dataset that the request reached through a relationship, layer reference, mosaic source, or reque...

GeoLens: Cross-dataset authorization bypass discloses private dataset metadata, schema, sample values, table rows, and raster/vector tile data

SummaryMultiple GeoLens read/link endpoints authorized only the resource named in therequest URL a map, a VRT, a source dataset, an AI request and failed tore-authorize a second, caller-influenced dataset that the request reachedthrough a relationship, layer reference, mosaic source, or request...

PYSEC-2026-3704 vLLM: Completion prompt lists fan out into unbounded engine requests

Summary The /v1/completions request model accepts prompt as a list of text prompts or a list of token-id prompts without any outer prompt-count bound. The serving path turns each element into a separate engine input, creates one engine generator per element, merges all generators, and allocates a...

vulnerabilities present in Oracle Java SE

Oracle has identified vulnerabilities in Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition. These vulnerabilities affect several supported versions of Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition. An unauthorized attacker with network...

PT-2026-78661

Name of the Vulnerable Software and Affected Versions IBM AIX version 7.2 IBM AIX version 7.3 IBM PowerVM VIOS version 4.1 Description A stack buffer overflow allows a remote attacker to execute arbitrary code. A stack buffer overflow occurs when a program writes more data to a buffer located on...

Oracle Linux 8 : sg3_utils (ELSA-2026-56130)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-56130 advisory. 1.44-6.1 - sginq output conformance for SCSI name string and ATA fields RHEL-188162 Tenable has extracted the preceding description block directly from the...

Photon OS 5.0: Coreutils PHSA-2026-5.0-91-0960

An update of the coreutils package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-91-0960. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

The vulnerability of the Adobe Lightroom Classic graphic editor, related to writing beyond the buffer boundaries, allows a hacker to execute arbitrary code.

The vulnerability of the Adobe Lightroom Classic graphic editor is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

PT-2026-78846

Name of the Vulnerable Software and Affected Versions Wireshark versions 4.4.0 through 4.4.18 Wireshark versions 4.6.0 through 4.6.7 Description A crash occurs in the Tektronix K12xx file parser, which can lead to a denial of service. Recommendations Update Wireshark versions 4.4.0 through 4.4.18...

Photon OS 5.0: Alsa PHSA-2026-5.0-91-0960

An update of the alsa package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-91-0960. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Oracle MySQL Cluster 9.x < 9.7.3 (August 2026 CSPU)

The versions of MySQL Cluster installed on the remote host are affected by a vulnerability as referenced in the August 2026 CSPU advisory. - Vulnerability in the MySQL Cluster product of Oracle MySQL component: Cluster: General. Supported versions that are affected are 8.0.0-8.0.48, 8.4.0-8.4.11...

CVE-2026-60905

creationtimestamp| type| source ---|---|--- 2026-08-18 22:11:03+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtfabz6wwa2e 2026-08-19 00:30:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtfi2nhnj52f 2026-08-19 01:37:38+00:00| seen|...

CVE-2026-60702

creationtimestamp| type| source ---|---|--- 2026-08-18 22:09:12+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtfa6pevow25 2026-08-18 23:30:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtfepcqxnr2u 2026-08-19 02:41:57+00:00| seen|...

CVE-2026-73931

Vulnerability in the Helidon product of Oracle Fusion Middleware component: Imperative Web Server. Supported versions that are affected are 4.0.0-4.5.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. While the vulnerability is ...

CVE-2026-73928

Vulnerability in the Helidon product of Oracle Fusion Middleware component: Imperative Web Server. Supported versions that are affected are 4.0.0-4.5.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. While the vulnerability is ...

CVE-2026-73927

Vulnerability in the Helidon product of Oracle Fusion Middleware component: Imperative Web Server. Supported versions that are affected are 3.0.0-3.2.19. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this...