EUVD-2026-46878

Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware component: Messaging Enabler. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Service...

EUVD-2026-46825

Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware component: OUD Core. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via LDAP to compromise Oracle Unified...

EUVD-2026-46752

Vulnerability in the Oracle Project Manufacturing product of Oracle E-Business Suite component: PJM Command Center. The supported version that is affected is V16. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Project Manufacturing...

EUVD-2026-46521

Vulnerability in Oracle Java SE component: JavaFX. The supported version that is affected is Oracle Java SE: 8u491. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attacks require human...

EUVD-2026-46486

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager component: Metadata Plugin. Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle...

EUVD-2026-46468

Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 19.3-19.31, 21.3-21.22 and 23.4.0-23.26.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via Oracle Net to compromise RDBMS. While the vulnerability is i...

Improper Validation of Integrity Check Value

Overview Affected versions of this package are vulnerable to Improper Validation of Integrity Check Value due to improper validation of the contenttype field in TLS 1.3 encrypted records. An attacker can cause undetectable data loss or request/response desynchronization by selectively dropping...

PT-2026-67357

Impact n8n's JavaScript task runner shared one module cache across all users' Code-node executions, so a user able to run a Code node could poison a cached module and alter other users' Code-node executions on the same runner, affecting their confidentiality, integrity, or availability. This is a...

PT-2026-63501

Administrator routes and replacement requests did not consistently require Super User permission and a valid token. An unauthorized backend user or CSRF attack could perform database replacements, potentially causing major data corruption or site compromise...

ROS-20260722-73-0008

The vulnerability of the Printing component in Google Chrome and Microsoft Edge relates to the possibility of using memory after it is freed. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

PT-2026-63427

A flaw was found in systemd-tmpfiles. When processing a tmpfiles.d configuration entry that writes to a file, systemd-tmpfiles can follow a symbolic link placed by an unprivileged local user, and an existing safety check does not detect this specific case because it always treats transitions away...

PT-2026-67355

JupyterLab's PyPI extension manager enforces blocked extensions uris by comparing the requested install name to blocklist entries with a custom string normalization that is weaker than PyPI package-name canonicalization. An authenticated user can request a PyPI-equivalent spelling such as...

Linux MMC/SD/SDIO Card Driver Heap Buffer Overflow DoS

The vulnerability of the sdioreleasefunc function in the drivers/mmc/core/sdiobus.c file of the MMC/SD/SDIO card driver for the Linux operating system is related to errors during the update of the link counters. Exploiting this vulnerability could allow an attacker to compromise the...

Linux kernel crypto_free_instance Heap Buffer Overflow DoS

The vulnerability of the cryptofreeinstance function in the crypto/algapi.c module of the Linux kernel’s cryptographic subsystem is related to situations where there is a competition for resources between different contexts. Exploiting this vulnerability could allow an attacker to compromise the...

Linux Memory Driver Module Use-After-Free

The vulnerability of the ubiresizevolume function in the drivers/mtd/ubi/vmt.c file of the Linux operating system’s memory driver module is related to the reutilization of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrit...

Marvell wireless driver Heap Buffer Overflow DoS

The vulnerability of the mwifiexhistogramread function in the drivers/net/wireless/marvell/mwifiex/debugfs.c file of the Marvell wireless adapter driver in the Linux operating system is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to...

Linux RAID5 Cache Buffer Overflow DoS

The vulnerability of the r5lexitlog function in the drivers/md/raid5-cache.c module of the Linux device driver for multiple devices RAID and LVM involves pointer manipulation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...

Linux kernel raid10_sync_request buffer overflow DoS

The vulnerability of the raid10syncrequest function in the drivers/md/raid10.c module of the Linux kernel driver for multiple device types RAID and LVM is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

Atheros Wireless Driver Heap Buffer Overflow DoS

The vulnerability of the ath11kdprxprocessmonstatus function in the drivers/net/wireless/ath/ath11k/dprx.c file of the Atheros/Qualcomm wireless adapter driver in the Linux operating system is related to incorrect initialization of resources. Exploiting this vulnerability could allow an attacker ...

Linux ipmi_msghandler Heap Buffer Overflow DoS

The vulnerability of the ipmidestroyuser function in the drivers/char/ipmi/ipmimsghandler.c driver for Linux alphabetically numbered devices in the operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the...