9587 matches found
CVE-2026-30633
Directory traversal vulnerability in knowns-dev/knowns 0.11.4 via crafted path value to the getdoc and updatedoc tools...
CVE-2026-61289: Improper Access Control
Vulnerability in the Oracle Process Manufacturing Product Development product of Oracle E-Business Suite component: Quality Management Specs. The supported version that is affected is 12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromi...
PT-2026-62175
Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 8u491, 8u491-perf, 11.0.31, 17.0.19, 21.0.11, 25.0.3, and 26.0.1 Oracle GraalVM for JDK versions 17.0.19 and 21.0.11 Oracle GraalVM Enterprise Edition version 21.3.18 Description An issue exists in the ImageIO component...
PT-2026-63143
Vulnerability in the Oracle Process Manufacturing Product Development product of Oracle E-Business Suite component: Quality Management Specs. The supported version that is affected is 12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromi...
PT-2026-62197
Name of the Vulnerable Software and Affected Versions Oracle Siebel CRM versions 17.0 through 26.3 Description An issue exists in the Siebel Approval Manager component of the Siebel CRM Development product. An unauthenticated attacker with network access via HTTP can exploit this flaw to compromi...
.NET 8.0 security, bug fix, and enhancement update
8.0.129-1.0.1 - Add support for Oracle Linux 8.0.129-1 - Update to .NET SDK 8.0.129 and Runtime 8.0.29 - Resolves: RHEL-192464...
CVE-2026-61030: Improper Access Control
Vulnerability in the Oracle Process Manufacturing Product Development product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...
Siemens COMOS permission licensing and access control vulnerabilities
Siemens Comos is a factory engineering software solution developed by the German company Siemens. Siemens COMOS has vulnerabilities related to permission licensing and access control. These vulnerabilities stem from an insecure search path within the IAM Client SDK. Attackers can exploit these...
Linux Distros Unpatched Vulnerability : CVE-2026-10037
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A sandbox escape vulnerability exists in the OpenJDK packages provided in Ubuntu. The .jar MIME handlers installed by these packages execute files marked as...
EUVD-2026-41559
webpack-dev-server vulnerable to denial of service via a malformed Host or Origin header...
Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: libidn2: idn2-2.3.8-4.hum1 aarch64, x8664 libidn2-2.3.8-4.hum1 aarch64, x8664 libidn2-devel-2.3.8-4.hum1 aarch64, x8664 libidn2-2.3.8-4.hum1.src src...
Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: libyuv: libyuv-0-0.63.20260714gitafff0cf.1.hum1 aarch64, x8664 libyuv-devel-0-0.63.20260714gitafff0cf.1.hum1 aarch64, x8664 libyuv-0-0.63.20260714gitafff0cf.1.hum1.src src Security Fixes: libyuv:...
.NET 9.0 security, bug fix, and enhancement update
9.0.119-1.0.1 - Add support for Oracle Linux 9.0.119-1 - Update to .NET SDK 9.0.119 and Runtime 9.0.18 - Resolves: RHEL-192472 9.0.118-2 - Reduce time to detect hanging builds - Resolves: RHEL-191646...
Oracle Linux 10 : .NET / 9.0 (ELSA-2026-41895)
The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-41895 advisory. 9.0.119-1.0.1 - Add support for Oracle Linux 9.0.119-1 - Update to .NET SDK 9.0.119 and Runtime 9.0.18 - Resolves: RHEL-192473 9.0.118-2 - Reduce tim...
.NET 8.0 security, bug fix, and enhancement update
8.0.129-1.0.1 - Add support for Oracle Linux 8.0.129-1 - Update to .NET SDK 8.0.129 and Runtime 8.0.29 - Resolves: RHEL-192467 8.0.128-2 - Reduce time to detect hanging builds - Resolves: RHEL-191652...
PT-2026-61056
Name of the Vulnerable Software and Affected Versions 1Panel-dev CordysCRM versions prior to 1.4.2 Description An issue exists in the Third Party Edit Endpoint where the getSqlBotSrc function within the backend/crm/src/main/java/cn/cordys/crm/system/service/IntegrationConfigService.java file does...
EUVD-2026-45369
A vulnerability was detected in halo-dev halo up to 2.24.2. Affected by this vulnerability is the function Download of the file MigrationEndpoint.java of the component Files Backup Endpoint. Performing a manipulation results in path traversal. The attack is possible to be carried out remotely. Th...
CVE-2026-44891
Netty is a network application framework for development of protocol servers and clients. Prior to 4.1.136.Final and 4.2.16.Final, io.netty.handler.codec.stomp.StompSubframeDecoder fails to limit the total number of headers or their cumulative size per frame, and the maxLineLength parameter only...
EUVD-2026-45213
Helm through 4.2.3, fixed in commit ba6c9a2, contains a denial of service vulnerability in the Files.Lines template helper in pkg/engine/files.go that allows attackers to trigger an index out of range panic by including zero-length byte slices in chart files. Attackers can include empty files in...
.NET 10.0 security update
10.0.109-1.0.1 - Add support for Oracle Linux 10.0.109-1 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181559 10.0.108-1 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173909 10.0.106-3 - Adjust build limits - Resolves: RHEL-169518...