Vuldb Updates

A vulnerability was found in MISP 2.4.111. It has been declared as problematic. This affects an unknown function of the file app/webroot/js/event-graph.js of the component event-graph View. Such manipulation leads to cross site scripting (Stored). This vulnerability is uniquely identified as CVE-2019-14286. The attack can be launched remotely. No exploit exists.

A vulnerability, which was classified as critical, was found in MISP. Impacted is the function __checkLoggedActions. Such manipulation leads to improper privilege management. This vulnerability is uniquely identified as CVE-2019-16202. The attack can be launched remotely. No exploit exists. You should upgrade the affected component.

A vulnerability identified as critical has been detected in MISP 2.4.118. Impacted is an unknown function of the file app/Controller/TagsController.php. Performing a manipulation results in incorrect permission assignment. This vulnerability is reported as CVE-2019-19379. The attack is possible to be carried out remotely. No exploit exists.

A vulnerability classified as critical was found in MISP up to 2.4.120. This impacts an unknown function of the component Time Skew Handler. Such manipulation leads to time-of-check time-of-use. This vulnerability is listed as CVE-2020-8890. The attack may be performed from remote. There is no available exploit. Upgrading the affected component is advised.

A vulnerability, which was classified as critical, has been found in MISP up to 2.4.120. Affected is an unknown function of the component Username Handler. Performing a manipulation results in an unknown weakness. This vulnerability is cataloged as CVE-2020-8891. It is possible to initiate the attack remotely. There is no exploit available. It is advisable to upgrade the affected component.

A vulnerability, which was classified as critical, was found in MISP up to 2.4.120. Affected by this vulnerability is an unknown functionality of the component HTTP PUT Handler. Executing a manipulation as part of Request can lead to Remote Code Execution. This vulnerability is registered as CVE-2020-8892. It is possible to launch the attack remotely. No exploit is available. You should upgrade the affected component.

A vulnerability has been found in MISP up to 2.4.120 and classified as critical. Affected by this issue is some unknown functionality of the file app/View/Galaxies/view.ctp of the component Galaxy View. The manipulation as part of String leads to an unknown weakness. This vulnerability is documented as CVE-2020-8893. The attack can be initiated remotely. There is not any exploit available. The affected component should be upgraded.

A vulnerability was found in MISP up to 2.4.120 and classified as critical. This affects an unknown part of the file app/Controller/ThreadsController.php of the component ACL Handler. The manipulation results in an unknown weakness. This vulnerability is reported as CVE-2020-8894. The attack can be launched remotely. No exploit exists. It is suggested to upgrade the affected component.

A vulnerability marked as problematic has been reported in MISP 2.4.122. The impacted element is an unknown function of the file app/View/Users/statistics_orgs.ctp. This manipulation as part of Parameter causes cross site scripting (Reflected). This vulnerability is registered as CVE-2020-10246. Remote exploitation of the attack is possible. No exploit is available.

A vulnerability labeled as problematic has been found in urllib3 up to 2.6.x on Python. Impacted is the function HTTPResponse.drain_conn. Such manipulation leads to highly compressed data. This vulnerability is uniquely identified as CVE-2026-44432. The attack can be launched remotely. No exploit exists. The affected component should be upgraded.

A vulnerability marked as problematic has been reported in urllib3 up to 2.6.x on Python. The affected element is the function ProxyManager.connection_from_url.urlopen. Performing a manipulation results in information disclosure. This vulnerability was named CVE-2026-44431. The attack may be initiated remotely. There is no available exploit. It is suggested to upgrade the affected component.

A vulnerability labeled as problematic has been found in Red Hat Enterprise Linux 6/7/8/9/10. This affects an unknown part. Such manipulation leads to buffer access with incorrect length value. This vulnerability is traded as CVE-2026-12549. The attack may be launched remotely. There is no exploit available. Applying a patch is advised to resolve this issue.

A vulnerability, which was classified as critical, was found in Linux Kernel up to 6.18.13/6.19.3. This affects the function mtk_clk_register_gate of the component clk. Executing a manipulation can lead to improper initialization. This vulnerability appears as CVE-2026-45909. The attacker needs to be present on the local network. There is no available exploit. You should upgrade the affected component.

A vulnerability has been found in Linux Kernel up to 6.6.127/6.12.74/6.18.13/6.19.3 and classified as critical. This impacts the function retransmit_timer of the component rxe. The manipulation leads to use after free. This vulnerability is traded as CVE-2026-45910. Access to the local network is required for this attack to succeed. There is no exploit available. The affected component should be upgraded.

A vulnerability classified as critical was found in Linux Kernel up to 6.18.13/6.19.3. The affected element is the function netdev_trylock. Such manipulation leads to deadlock. This vulnerability is documented as CVE-2026-45907. The attack requires being on the local network. There is not any exploit available. Upgrading the affected component is advised.

A vulnerability, which was classified as critical, has been found in Linux Kernel up to 6.18.13/6.19.3. The impacted element is the function amdxdna_ubuf_map of the component amdxdna. Performing a manipulation results in memory leak. This vulnerability is reported as CVE-2026-45908. The attacker must have access to the local network to execute the attack. No exploit exists. It is advisable to upgrade the affected component.

A vulnerability has been found in Linux Kernel up to 6.19.3 and classified as critical. Affected is the function power_supply_changed of the component IRQ Handler. This manipulation causes use after free. This vulnerability is registered as CVE-2026-45906. The attack requires access to the local network. No exploit is available. The affected component should be upgraded.

A vulnerability has been found in Linux Kernel up to 6.19.3 and classified as critical. This vulnerability affects the function pci_lock_rescan_remove of the component EEH Driver. This manipulation of the argument do_lock causes deadlock. This vulnerability is handled as CVE-2026-45904. The attack can only be done within the local network. There is not any exploit available. The affected component should be upgraded.

A vulnerability, which was classified as critical, was found in Linux Kernel up to 6.1.164/6.6.127/6.12.74/6.18.13/6.19.3. Affected by this issue is the function icmp_route_lookup of the file net/ipv4/route.c. Such manipulation leads to information exposure through error message. This vulnerability is listed as CVE-2026-45905. The attack must be carried out locally. There is no available exploit. You should upgrade the affected component.

A vulnerability, which was classified as critical, was found in BerriAI litellm up to 1.59.8. Affected is the function UserAPIKeyAuth of the file litellm/proxy/_experimental/mcp_server/auth/user_api_key_auth_mcp.py of the component MCP Proxy. Executing a manipulation can lead to improper authentication. The identification of this vulnerability is CVE-2026-12773. The attack may be launched remotely. Furthermore, there is an exploit available. The vendor was contacted early about this disclosure.