BELL-CVE-2026-63881

Bulletin has no description...

BELL-CVE-2026-53387

Bulletin has no description...

UBUNTU-CVE-2026-60163

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Group Replication Plugin. Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Easily exploitable vulnerability allow...

CVE-2026-61274

CVE-2026-61274 affects Oracle E-Business Suite’s Oracle Product Hub, specifically the Item Catalog component, with affected versions 12.2.3–12.2.15. The vuln is exploitable by a low-privilege attacker over HTTP with network access, leading to unauthorized read, and potential unauthorized update/i...

CVE-2026-61094

CVE-2026-61094 affects Oracle MySQL Server (Server: Replication) and MySQL Cluster. Affected versions include MySQL Server 8.4.0–8.4.10 and 9.7.0–9.7.1; MySQL Cluster 8.0.0–8.0.47, 8.4.0–8.4.10, and 9.7.0–9.7.1. The vulnerability is exploitable with network access via multiple protocols and can l...

CVE-2026-60907

The CVE-2026-60907 entry concerns Oracle E-Business Suite, Oracle Installed Base, component: Create Item Instance. Affected versions are 12.2.4–12.2.15. The issue is exploitable with network access via HTTP by a low-privilege attacker, leading to unauthorized update/insert/delete of Oracle Instal...

CVE-2026-60354

...

CVE-2026-60332

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Group Replication GCS. Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Difficult to exploit vulnerability allows...

CVE-2026-47039

CVE-2026-47039 affects the Java VM component of Oracle Database Server. Affects Oracle Database Server Java VM in versions 19.3–19.31, 21.3–21.22, and 23.4.0–23.26.2. The vulnerability allows a low-privilege attacker with Create Session and network access via Oracle Net to compromise the Java VM,...

CVE-2026-46985

CVE-2026-46985 concerns Oracle Enterprise Manager Base Platform, specifically the Agent Next Gen component, with affected versions 13.5 and 24.1. The vulnerability allows an unauthenticated attacker with network access over HTTPS to read a subset of data, per CVSS 3.1 base score 5.3 (Confidential...

DEBIAN-CVE-2026-16357

Incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13...

ROOT-APP-NPM-CVE-2023-37466 CVE-2023-37466 in @rootio/vm2 - Patched by Root

Root has patched CVE-2023-37466 in the @rootio/vm2 package for Root:npm. Multiple fixed versions available...

CVE-2026-63771

creationtimestamp| type| source ---|---|--- 2026-07-21 09:10:17+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mr5hm4swxy2o...

DEBIAN-CVE-2026-64115

In the Linux kernel, the following vulnerability has been resolved: vsock/vmci: fix UAF when peer resets connection during handshake vmcitransportrecvconnectingserver returned err = 0 for a peer RST in its default switch arm: err = pkt-type == VMCITRANSPORTPACKETTYPERST ? 0 : -EINVAL; That made...

DEBIAN-CVE-2026-63848

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/jpeg: set nouserfence for JPEG v2.0 ring JPEG rings do not support 64-bit user fence writes, reject CS submissions with user fences. cherry picked from commit 96179da0c6b059eb31706a0abe8dd6381c533143...

RLSA-2026:40894 Important: hplip security update

The hplip packages contain the Hewlett-Packard Linux Imaging and Printing Project HPLIP, which provides drivers for Hewlett-Packard printers and multi-function peripherals. Security Fixes: HPLIP: Incomplete Fix for CVE-2026-8631 CVE-2026-14544 For more details about the security issues, including...

CVE-2026-44435

creationtimestamp| type| source ---|---|--- 2026-07-17 00:19:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqsi3ly4ji2o...

CVE-2026-53535

creationtimestamp| type| source ---|---|--- 2026-07-16 20:05:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqrzv24erz22...

CVE-2020-15906

creationtimestamp| type| source ---|---|--- 2026-07-16 14:00:04+00:00| published-proof-of-concept| https://t.me/UnidentifiedTM/893 2026-07-17 00:00:52+00:00| published-proof-of-concept| https://t.me/UnidentifiedTM/893...

UBUNTU-CVE-2026-45074

Symfony is a PHP framework for web and console applications and a set of reusable PHP components. From 7.1.0 until 7.4.12 and 8.0.12, Cas2Handler builds the CAS service parameter from Request::getSchemeAndHttpHost, which reflects an attacker-controlled Host header when framework.trustedhosts is n...