CVE-2026-46994

CVE-2026-46994 affects Oracle Enterprise Manager Base Platform (Oracle Enterprise Manager) - Agent Next Gen component. Affected supported versions are 13.5 and 24.1. The vulnerability allows an unauthenticated attacker with network access over HTTPS to compromise the Base Platform, potentially le...

CVE-2026-47709 libheif has a NULL pointer dereference in heif_image_handle_get_image_tiling for malformed unci image missing ispe

libheif is a HEIF and AVIF file format decoder and encoder. Versions prior to 1.22.0 crashes in the public C API heifimagehandlegetimagetiling when a malformed uncompressed HEIF image item has an associated uncC property but no associated ispe property. In debug builds this trips the ispe && uncC...

GHSA-F283-GHQC-FG79 vulnerabilities

Vulnerabilities for packages: privatebin, nextcloud-server...

GHSA-J3F2-48V5-CCWW vulnerabilities

Vulnerabilities for packages: kibana, langfuse-fips, homepage...

GHSA-CVVH-RHRC-WG4Q vulnerabilities

Vulnerabilities for packages: dotnet, powershell, dotnet-bootstrap, dotnet-sdk...

GHSA-G8R8-53C2-PM3F vulnerabilities

Vulnerabilities for packages: dotnet, powershell, dotnet-bootstrap, dotnet-sdk...

GHSA-V422-HMWV-36X6 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, json-server...

GHSA-23RF-6693-G89P vulnerabilities

Vulnerabilities for packages: powershell, dotnet, dotnet-sdk...

GHSA-CVVH-RHRC-WG4Q vulnerabilities

Vulnerabilities for packages: powershell, dotnet, dotnet-sdk...

GHSA-G8R8-53C2-PM3F vulnerabilities

Vulnerabilities for packages: powershell, dotnet, dotnet-sdk...

CVE-2026-55082

DHIS2 is a flexible information system for data capture, management, validation, analytics and visualization. DHIS2 SQL View data endpoints allowed authenticated users with SQL View access to provide crafted filter values that were interpolated into generated SQL. An authenticated user with acces...

DEBIAN-CVE-2026-8933

A local privilege escalation vulnerability exists in snap-confine, a set-capabilities core component used internally by Canonical snapd to construct the secure execution environment for snap applications. This vulnerability uniquely affects versions of snap-confine configured with set-capabilitie...

GHSA-HVRP-RF83-W775 vulnerabilities

Vulnerabilities for packages: litellm...

GHSA-JPW9-PFVF-9F58 vulnerabilities

Vulnerabilities for packages: litellm...

GHSA-XCPC-8H2W-3J85 vulnerabilities

Vulnerabilities for packages: kibana...

DEBIAN-CVE-2026-59843

A flaw was found in libssh. A remote authenticated peer can advertise a zero maximum packet size in SSHMSGCHANNELOPEN, causing later channel writes to loop indefinitely and consume CPU, leading to denial of service...

ROOT-APP-NPM-GHSA-2CM2-M3W5-GP2F GHSA-2cm2-m3w5-gp2f in @rootio/vm2 - Patched by Root

Root has patched GHSA-2cm2-m3w5-gp2f in the @rootio/vm2 package for Root:npm. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-6276 CVE-2026-6276 in rootio-curl - Patched by Root

Root has patched CVE-2026-6276 in the rootio-curl package for Root:Debian:11. Multiple fixed versions available...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.22.6 bug fix and security update

Red Hat OpenShift Container Platform release 4.22.6 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.22. Red Hat Product Security has rated this update as having a...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.20.30 bug fix and security update

Red Hat OpenShift Container Platform release 4.20.30 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.20. Red Hat Product Security has rated this update as having a...