CVE-2026-97360

HFS2 version 2.4.0 and earlier contains an unauthenticated arbitrary file access vulnerability that allows unauthenticated attackers to read, write, append, and delete files anywhere the HFS service account has filesystem access outside the shared folder. Attackers can exploit the macro...

CVE-2021-44228

CVE-2021-44228 On December 9, 2021, the world became aware of a new security vulnerability concerning Log4J. The CVSSv3 Common Vulnerability Scoring System score of the vulnerability was assessed as 10, making it critical https://nvd.nist.gov/vuln/detail/CVE-2021-44228. CVSSv3 Its CVSSv3 vector i...

ROS-20260923-73-0018

The vulnerability of the compatmtwfromuser function in the net/bridge/netfilter/ebtables.c module, which is part of the Linux kernel’s networking functions, is related to incorrect input of configuration data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality...

ROS-20260923-73-0059

The vulnerability of the unregisternvdimmpmu function in the drivers/nvdimm/ndperf.c module of the Linux operating system’s memory device drivers related to the distribution of resources without restrictions and regulation. Exploiting this vulnerability could allow an attacker to compromise the...

ROS-20260922-73-0096

The vulnerability of the tbxdppropertiesrequest function in the drivers/thunderbolt/xdomain.c file of the general support driver for USB4 and Thunderbolt in the Linux operating system is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could...

ROS-20260918-73-0023

The vulnerability in the drivers/net/wireless/broadcom/brcm80211/brcmfmac/fweh.c module of Broadcom’s wireless adapter driver for the Linux operating system is related to an improper check of a specified index, position, or offset in the input data. Exploiting this vulnerability could allow an...

CVE-2026-87152

Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite component: Create Item Instance. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Installed Base...

CVE-2026-87146

Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion component: Access and security. The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

CVE-2026-83264

Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain component: Installation Issues. The supported version that is affected is 3.6.1. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Product Lifecycle...

EUVD-2026-79830

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion component: Security. The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Hyperion Financial...

EUVD-2026-79825

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion component: Security. The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Financial...

EUVD-2026-79786

Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion component: Access and security. The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

PT-2026-92597

Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM component: Siebel Cloud Manager. Supported versions that are affected are 22.3-26.7. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the...

PT-2026-93057

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion component: Security. The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial...

Astra Linux – Vulnerability in edk2

EDK2 is vulnerable to a vulnerability in the Tcg2MeasurePeImage function, which allows a user to trigger a heap buffer overflow via a local network. Successful exploitation of this vulnerability may result in compromises of confidentiality, integrity, and/or availability...

Astra Linux – Vulnerability in Ceph

A flaw was discovered in OpenStack Manilla that manages Ceph File systems’ shares. This flaw allows the owner to read/write any share or entire file system. The vulnerability stems from a bug in the “volumes” plugin of the Ceph Manager. This allows attackers to compromise the confidentiality and...

Astra Linux – Vulnerability in sssd

A flaw was discovered in SSSD, where the sssctl command was vulnerable to shell command injection through the logs-fetch and cache-expire subcommands. This flaw allows an attacker to trick the root user into executing a specially crafted sssctl command, such as using sudo, in order to gain root...

Astra Linux – Vulnerability in Linux

A flaw was discovered in the Nosy driver within the Linux kernel. This issue allows a device to be inserted twice into a doubly-linked list, resulting in a “use-after-free” condition when one of these devices is removed. The most significant threat posed by this vulnerability relates to...

The vulnerability of the `ieee80211_parse_tx_radiotap()` function in the `net/mac80211/tx.c` module of the `mac80211` stack implementation in the Linux operating system allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ieee80211parsetxradiotap function in the net/mac80211/tx.c module of the mac80211 stack implementation in the Linux operating system is related to an incorrect bitwise shift of a integer value. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the vcn_v2_5_dec_ring_set_wptr() function in the drivers/gpu/drm/amd/amdgpu/vcn_v2_5.c driver for AMD GPU cores in Linux operating systems allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the vcnv25decringsetwptr function in the drivers/gpu/drm/amd/amdgpu/vcnv25.c driver for AMD GPU cores in Linux operating systems is related to improper checking of the specified data type. Exploiting this vulnerability could allow an attacker to compromise the confidentiality...