167770 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-74985
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Privilege escalation in the Enterprise Policies component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153....
Linux Distros Unpatched Vulnerability : CVE-2026-76014
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability has been found in BusyBox up to 1.30.1. This vulnerability affects unknown code of the file networking/wget.c of the component FEATUREWGETTIMEOU...
MINI-MPRX-XG7H-2RGP
Bulletin has no description...
CVE-2026-53958
4gaBoards is a boards system for realtime project management. Prior to 3.3.9, 4gaBoards allows an authenticated user to modify ssoGoogleId, ssoGoogleEmail, ssoGithubId, ssoGithubUsername, ssoGithubEmail, ssoMicrosoftId, ssoMicrosoftEmail, ssoOidcId, and ssoOidcEmail through PATCH /api/users/:id...
CVE-2026-61317
creationtimestamp| type| source ---|---|--- 2026-08-18 22:14:25+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtfai2f53p2p 2026-08-19 02:40:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtfpd3fsh22p 2026-08-19 17:51:48+00:00| seen|...
CVE-2026-53958 4gaBoards: SSO Pre-Account Takeover / Hijacking via Mass Assignment
4gaBoards is a boards system for realtime project management. Prior to 3.3.9, 4gaBoards allows an authenticated user to modify ssoGoogleId, ssoGoogleEmail, ssoGithubId, ssoGithubUsername, ssoGithubEmail, ssoMicrosoftId, ssoMicrosoftEmail, ssoOidcId, and ssoOidcEmail through PATCH /api/users/:id...
EUVD-2026-62203
4gaBoards is a boards system for realtime project management. Prior to 3.3.9, 4gaBoards allows an authenticated user to modify ssoGoogleId, ssoGoogleEmail, ssoGithubId, ssoGithubUsername, ssoGithubEmail, ssoMicrosoftId, ssoMicrosoftEmail, ssoOidcId, and ssoOidcEmail through PATCH /api/users/:id...
CVE-2026-71062
...
CVE-2026-70828
Oracle Hyperion Financial Management 11.2.25.0.000 Security component is vulnerable to a HIGH-severity (CVSS 7.7) flaw exploitable over HTTP by a low-privileged attacker, allowing unauthorized access to critical data with scope change affecting other products. No in-the-wild exploitation details ...
CVE-2026-70819
...
CVE-2026-70720
CVE-2026-70720 affects Oracle E-Business Suite Production Scheduling (Internal Operations component), versions 12.2.3–12.2.15. A low-privileged, network-accessible attacker can exploit it to read all accessible data (CVSS 6.5, confidentiality-only). Oracle released August 2026 CPU patches; apply ...
CVE-2026-70695
CVE-2026-70695 affects the File Transmission component of Oracle Payments within Oracle E-Business Suite , versions 12.2.3 through 12.2.15 . A high-privileged attacker with network access via HTTP can exploit this vulnerability to perform unauthorized creation, deletion, or modification of critic...
CVE-2026-62633
Oracle Fusion Middleware's Oracle Reports Developer 14.1.2.0.0 (Security and Authentication component) has an easily exploitable unauthenticated HTTP vulnerability rated CVSS 9.8 (C/I/A High), enabling full product takeover. Oracle's August 2026 security advisory (cspuaug2026.html) addresses this...
CVE-2026-61313
The Security component of Oracle Hyperion Calculation Manager version 11.2.25.0.000 is affected by a local, easily exploitable vulnerability requiring high privileges, rated CVSS 3.1 6.7 (MEDIUM). Successful exploitation can grant unauthorized access to critical data and cause scope change impact...
CVE-2026-61227
...
CVE-2026-61038
Oracle WebCenter Sites 12.2.1.4.0 and 14.1.2.0.0 are vulnerable to an unauthenticated, network-accessible HTTP exploit (CVSS 8.2 HIGH) enabling unauthorized data access and partial data modification. Oracle's August 2026 CPU advisory (linked in references) is the primary source for patch details....
Incomplete Fix in MONAI: algo_from_pickle() pickle.loads() RCE still present in v1.5.2 despite GHSA-89gg-p5r5-q6r4 claiming patch
Summary GHSA-89gg-p5r5-q6r4 claims the pickle deserialization vulnerability in algofrompickle was fixed in v1.5.2. However, monai/auto3dseg/utils.py has not been modified since 2024-07-12 — 18 months before v1.5.2 was released 2026-01-29. All three pickle.loads calls remain unchanged. The fix was...
CLSA-2026-1787070801 TuxCare security update for org.springframework (7 CVEs)
TuxCare rebuilt 22 org.springframework packages to address 7 CVEs. Fixed in 5.1.20.RELEASE-tuxcare.4...
Important: Red Hat Security Advisory: kpatch-patch-5_14_0-427_100_1, kpatch-patch-5_14_0-427_113_1, kpatch-patch-5_14_0-427_126_1, kpatch-patch-5_14_0-427_68_2, and kpatch-patch-5_14_0-427_84_1 security update
An update for multiple packages is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...
