CLEANSTART-2026-OL83036 Security fixes in prometheus-fips 2.40.4-r1

Package prometheus-fips version 2.40.4-r1 fixes 1 vulnerabilities: CVE-2022-46146...

CVE-2026-17514

A vulnerability was determined in ZJONSSON node-unzipper up to 0.12.3. Affected by this vulnerability is the function Extract of the file lib/extract.js. This manipulation causes path traversal. The attack requires local access. The exploit has been publicly disclosed and may be utilized. The...

CVE-2026-17514

Technical details are not publicly available in the provided documents. Monitor for updates.

PT-2026-64908

A vulnerability was determined in ZJONSSON node-unzipper up to 0.12.3. Affected by this vulnerability is the function Extract of the file lib/extract.js. This manipulation causes path traversal. The attack requires local access. The exploit has been publicly disclosed and may be utilized. The...

CVE-2026-16765

A vulnerability was determined in CodeAstro Online Classroom 1.0. Affected by this issue is some unknown functionality of the file /OnlineClassroom/loginlinkadmin.php. Executing a manipulation of the argument aid can lead to sql injection. The attack can be executed remotely. The exploit has been...

CVE-2026-16765

CodeAstro Online Classroom 1.0 contains a vulnerability in the file /OnlineClassroom/loginlinkadmin.php where manipulating the argument aid can trigger an SQL injection. The issue can be exploited remotely without authentication, and public exploit guidance exists. Affected component: loginlinkad...

CVE-2026-61217

...

CVE-2026-61185

...

CVE-2026-61121

Vulnerability CVE-2026-61121 affects Oracle HRMS (UK) within Oracle E-Business Suite (UK Payroll) for versions 12.2.8–12.2.15. The issue allows a low-privilege attacker with network access over HTTP to compromise Oracle HRMS (UK), with potential takeover (CVSS v3.1 base score 8.8; impacts to conf...

CVE-2026-61006

...

CVE-2026-60931

The CVE-2026-60931 vulnerability affects Oracle E-Business Suite’s Oracle Public Sector Financials (Internal Operations) on versions 12.2.3–12.2.15. The issue allows a low-privilege, network-authenticated attacker to compromise Oracle Public Sector Financials via HTTP, with potential takeover and...

CVE-2026-60842

...

CVE-2026-60652

...

CVE-2026-60634

CVE-2026-60634 affects Oracle WebCenter Content (Content Server) in Oracle Fusion Middleware. Affected versions are 12.2.1.4.0 and 14.1.2.0.0. The vulnerability allows an unauthenticated, network-accessible attacker to compromise WebCenter Content via HTTP and can lead to takeover; exploitation r...

CVE-2026-60613

...

CVE-2026-60578

...

CVE-2026-60577

...

CVE-2026-60306

...

CVE-2026-60305

...

CVE-2026-60230

CVE-2026-60230 affects Oracle Coherence (Core) within Oracle Fusion Middleware. Affects versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. The vulnerability allows an unauthenticated attacker with network access via TCP to compromise Oracle Coherence, potentially taking over the service....