CVE-2024-11040

CVE-2024-11040 vllm-project vllm version 0.5.2.2 is vulnerable to Denial of Service attacks...

CVE-2026-87277

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.16. Easily exploitable vulnerability allows unauthenticated attacker with network access via RDP to compromise Oracle VM VirtualBox. Successful attacks of this...

CVE-2026-87148

Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion component: Access and security. The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2026-83222

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM component: Server Infrastructure. Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Siebel CRM...

EUVD-2026-79934

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.16. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle ...

CVE-2026-87277

Oracle VM VirtualBox (component: Core , version 7.2.16 ) is affected by an easily exploitable denial-of-service vulnerability. An unauthenticated attacker with network access via RDP can cause a hang or frequently repeatable crash, resulting in a complete DoS. The CVSS 3.1 base score is 7.5 (HIGH...

EUVD-2026-79854

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion component: Security. The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Financial...

EUVD-2026-79686

Vulnerability in the Oracle Net Services component of Oracle Database Server. Supported versions that are affected are 23.4.0-23.26.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via Oracle Net to compromise Oracle Net Services. Successful attacks of this...

CVE-2026-83281

CVE-2026-83281 is a Denial-of-Service vulnerability in Oracle Fusion Middleware Helidon , specifically the helidon-webserver component, affecting versions 4.0.0 through 4.5.4 . An unauthenticated attacker with network access via TCP can cause a hang or frequently repeatable crash, resulting in a ...

CVE-2026-83280

CVE-2026-83280 is a Denial of Service vulnerability in Oracle Helidon (component: helidon-webserver-http2 ), part of Oracle Fusion Middleware. Affected versions are 4.0.0 through 4.5.4 . An unauthenticated attacker with network access can send crafted requests via HTTP/2 to cause a hang or freque...

CVE-2026-83276

CVE-2026-83276 affects the helidon-webclient-http2 component of Oracle Helidon (part of Oracle Fusion Middleware), versions 4.0.0 through 4.5.4 . An unauthenticated attacker with network access via HTTP/2 can trigger a hang or frequently repeatable crash, resulting in a complete denial of service...

EUVD-2026-79580

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM component: Server Infrastructure. Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Siebel CRM Deployment. Successfu...

EUVD-2026-79221

Buffer overflow vulnerabilities exist in the underlying operating system of HPE Networking EdgeConnect SD-WAN Gateways that could allow an unauthenticated remote attacker to send specially crafted packets to the affected service. Successful exploitation could allow an attacker to affect the...

CVE-2026-53954

Bugsink is a self-hosted error tracking tool. Prior to version 2.2.2, Bugsink stores every set of custom tags supplied with an incoming event, allowing a caller with a valid project DSN to submit an unusually large tag set and force excessive tag-row writes. Because Bugsink uses a single-writer...

Security update for kimi-code (moderate)

openSUSE security update: security update for kimi-code ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21849-1 Rating: moderate References: bsc1268927 bsc1269951 Cross-References: CVE-2026-45736 CVE-2026-48779 CVSS scores: CVE-2026-45736 SUSE : 4.4...

AlmaLinux 8 : perl (ALSA-2026:67162)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:67162 advisory. perl: Perl: Incorrect regular expression processing via large regular expressions CVE-2026-13221 Tenable has extracted the preceding description block directly fr...

MiracleLinux 8 : perl-5.26.3-423.el8_10.1 (AXSA:2026-1831:24)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1831:24 advisory. perl: Perl: Incorrect regular expression processing via large regular expressions CVE-2026-13221 Tenable has extracted the preceding description block direct...

Astra Linux – Vulnerability in TIF format

An integer overflow flaw was discovered in libtiff, which resides in the tifgetimage.c file. This flaw allows an attacker to inject and execute arbitrary code when a user opens a crafted TIFF file. The greatest threat posed by this vulnerability relates to confidentiality, integrity, and system...

Astra Linux – Vulnerability in imagemagick

A flaw was discovered in ImageMagick, specifically in the code file coders/hdr.c. An attacker who submits a crafted file processed by ImageMagick could trigger undefined behavior, resulting in values that are outside the range of the type unsigned char. This likely leads to a disruption in the...

Astra Linux – Vulnerability in openjpeg2

There is a flaw in OpenJPEG’s T2 encoder in versions prior to 2.4.0. An attacker who can provide crafted input for OpenJPEG to process may cause a null pointer dereferencing. The most significant impact of this flaw is the availability of the application...