CVE-2026-61338

creationtimestamp| type| source ---|---|--- 2026-07-23 18:19:37+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-07-31 23:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mry4pcuyk525...

CVE-2026-60426

creationtimestamp| type| source ---|---|--- 2026-07-23 17:16:15+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-07-31 01:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrvswy4non2l...

DEBIAN-CVE-2026-65914

DOMPurify before 3.3.2 contains a mutation-XSS vulnerability when sanitized HTML is reinserted into special parsing contexts using innerHTML with wrappers like script, xmp, iframe, noembed, noframes, or noscript. Attackers can craft payloads with closing sequences that break out of the wrapper...

BELL-CVE-2026-64207

Bulletin has no description...

SUSE CVE-2026-47030

unknown...

DEBIAN-CVE-2026-41637

In NLnet Labs Unbound 1.22.0 up to and including 1.25.1, client terminated DNS-over-QUIC DoQ queries are not accounted properly by Unbound resulting in low-cost inflation of the waiting number of replies for already in-flight resolution queries. This results in degradation of resolution service f...

BELL-CVE-2026-63802

Bulletin has no description...

CVE-2026-61312

...

CVE-2026-61145

CVE-2026-61145 affects Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Content Acquisition System) in version 11.4.0. An unauthenticated attacker with network access via HTTP can compromise these components, potentially taking over the Guided Search/Experience Manag...

CVE-2026-60832

CVE-2026-60832 affects Oracle Interaction Blending (Oracle E-Business Suite, Internal Operations) in versions 12.2.3–12.2.15. The vulnerability can be exploited by a high-privilege attacker over a network via RMI, potentially allowing unauthorized update/insert/delete and read access to Oracle In...

CVE-2026-60784

CVE-2026-60784 affects Oracle E-Business Suite, Oracle Trading Community, Party Search UI. Affected versions are 12.2.3–12.2.15. The vulnerability enables a low-privilege attacker with network access via HTTP to compromise Oracle Trading Community, potentially causing unauthorized creation, delet...

CVE-2026-60683

CVE-2026-60683 affects Oracle E-Business Suite’s Oracle Process Manufacturing Regulatory Management (Internal Operations) with affected versions 12.2.3 through 12.2.15. The issue allows a low-privilege, unauthenticated or network-reachable attacker to compromise the Regulatory Management module v...

CVE-2026-60665

...

CVE-2026-60658

CVE-2026-60658 is an Oracle WebCenter Content (Content Server) vulnerability in Oracle Fusion Middleware. Affected versions are 12.2.1.4.0 and 14.1.2.0.0. The issue allows an unauthenticated attacker with network access over HTTP to compromise WebCenter Content, with user interaction required. Su...

CVE-2026-60489

CVE-2026-60489 affects Oracle JD Edwards EnterpriseOne CRM Foundation (component: CRM Foundation), with the affected product version stated as 9.2. The vulnerability is exploitable over a network via HTTP by a low-privileged attacker, and successful exploitation can lead to takeover of JD Edwards...

CVE-2026-60490

...

CVE-2026-47056

...

CVE-2026-47017

...

DEBIAN-CVE-2026-45383

libde265 is an open source implementation of the h.265 video codec. Versions prior to 1.0.19 have a heap buffer overflow out-of-bounds READ exists in decodercontext::decodesliceunitWPP in libde265/decctx.cc. When decoding a WPP Wavefront Parallel Processing HEVC slice, ctbAddrRS is computed as...

CLEANSTART-2026-UM67329 Security fixes for CVE-2025-61729, CVE-2026-27140, CVE-2026-27143, CVE-2026-27144, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32288, CVE-2026-32289, CVE-2026-33186, CVE-2026-33810, CVE-2026-33811, CVE-2026-33814, CVE-2026-39820, CVE-2026-39822, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501, CVE-2026-42505, CVE-2026-56852, ghsa-p77j-4mvh-x3m3 applied in versions: 0.9.2-r0, 1.0.1-r0, 1.1.0-r0

Multiple security vulnerabilities affect the kube-vip package. These issues are resolved in later releases. See references for individual vulnerability details...