146934 matches found
Unity Linux 20.1070a Security Update: kernel (UTSA-2026-013442)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013442 advisory. An issue was discovered in ksmbd in the Linux kernel 5.15 through 5.19 before 5.19.2. There is an out-of- bounds read and OOPS for SMB2WRITE, when there is a large...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-013702)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013702 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: refuse to create ea block when umounted The ea block expansion need to access sroot while i...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-013841)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013841 advisory. In the Linux kernel, the following vulnerability has been resolved: net: rds: don't hold sock lock when cancelling work from rdstcpresetcallbacks syzbot is reporting...
Amazon Corretto Java 8.x < 8.492.09.1 Multiple Vulnerabilities
The version of Amazon Corretto installed on the remote host is 8 prior to 8.492.09.1. It is, therefore, affected by multiple vulnerabilities as referenced in the corretto-8-2026-Apr-21 advisory. - An integer overflow in the ttvarloaditemvariationstore function of the Freetype library in versions...
CVE-2026-40944 Oxia: TLS CA certificate chain validation fails with multi-certificate PEM bundles
Oxia is a metadata store and coordination system. Prior to 0.16.2, the trustedCertPool function in the TLS configuration only parses the first PEM block from CA certificate files. When a CA bundle contains multiple certificates e.g., intermediate + root CA, only the first certificate is loaded...
EUVD-2026-24498
Oxia is a metadata store and coordination system. Prior to 0.16.2, a race condition between session heartbeat processing and session closure can cause the server to panic with send on closed channel. The heartbeat method uses a blocking channel send while holding a mutex, and under specific timin...
CVE-2026-40943 Oxia: Server crash via race condition in session heartbeat handling
Oxia is a metadata store and coordination system. Prior to 0.16.2, a race condition between session heartbeat processing and session closure can cause the server to panic with send on closed channel. The heartbeat method uses a blocking channel send while holding a mutex, and under specific timin...
MINI-PXFV-V4HX-VJQJ
Bulletin has no description...
GHSA-J687-52P2-XCFF Astro: XSS in define:vars via incomplete </script> tag sanitization
Summary The defineScriptVars function in Astro's server-side rendering pipeline uses a case-sensitive regex //g to sanitize values injected into inline tags via the define:vars directive. HTML parsers close elements case-insensitively and also accept whitespace or / before the closing , allowing ...
CVE-2026-35238
...
CVE-2026-35236
...
CVE-2026-35232
CVE-2026-35232 affects Oracle Fusion Middleware’s Dynamic Monitoring Service (DMS) in versions 12.2.1.4.0 and 14.1.2.0.0. The vulnerability allows a low-privileged, network-accessible attacker (via HTTP) with user interaction to compromise the framework, potentially enabling unauthorized update/i...
CVE-2026-35230
...
CVE-2026-34324
...
CVE-2026-34320
...
CVE-2026-34313
...
CVE-2026-34306
...
CVE-2026-34306
CVE-2026-34306 affects Oracle PeopleSoft Enterprise FIN Project Costing (component: Projects), version 9.2. A low-privileged user with network access via HTTP can compromise the system, potentially getting unauthorized access to critical data or all accessible data. CVSS 3.1 base score 6.5 (Confi...