PT-2026-119234

Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite component: Flexfields. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Application...

PT-2026-118683

Name of the Vulnerable Software and Affected Versions Memphis Documents Library plugin for WordPress versions prior to 3.1.6 Description An issue allows unauthenticated attackers to read arbitrary files. This is achieved by sending GET requests containing traversal sequences to the mdocs img...

PT-2026-119440

Name of the Vulnerable Software and Affected Versions Oracle Application Object Library versions 12.2.3 through 12.2.15 Description An unauthenticated SQL injection exists in the Thin Client Framework TCF servlet of the Oracle Application Object Library. An attacker with network access via HTTP c...

Linux Distros Unpatched Vulnerability : CVE-2026-70162

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A denial of service vulnerability exists when Microsoft Common Object Runtime Library improperly handles web requests. An attacker who successfully exploited th...

Linux Distros Unpatched Vulnerability : CVE-2026-112894

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Pillow is a Python imaging library. From 5.1.0 until 13.0.0, Pillow takes quadratic time to reserve PDF object identifiers when saving many frames with saveall...

WordPress Memphis Documents Library path traversal vulnerability

WordPress Memphis Documents Library versions prior to 3.1.6 contain a path traversal vulnerability. This vulnerability stems from path traversal in the mdocs-img-preview parameter. Unauthenticated attackers can send GET requests containing a traversal sequence to mdocsimgpreview in...

PT-2026-119246

Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite component: DB Privileges. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Application...

Oracle E-Business Suite: CVE-2026-101566: Critical Patch Update

Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite component: DB Privileges. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Application...

AGCRE Regular Expression Library 20261019

AGCRE is a BSD-licensed regular expression library written in C that implements pattern compilation and matching using a Pike Virtual Machine architecture. It supports POSIX regular expressions, Perl-style escapes, lazy matching, non-capturing groups, backreferences, Unicode escapes, UTF-8, and...

Linux Distros Unpatched Vulnerability : CVE-2026-112390

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Pillow is a Python imaging library. From 7.2.0 until 13.0.0, Pillow can enter an infinite loop while determining the frame count of a MIC image. MicImageFile...

PT-2026-119370

Name of the Vulnerable Software and Affected Versions Oracle Application Object Library versions 12.2.3 through 12.2.15 Description An issue in the Core component of the Oracle Application Object Library allows an unauthenticated attacker with network access via HTTP to compromise the system...

PT-2026-119374

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Application Object Library versions 12.2.3 through 12.2.15 Description An issue exists in the Core component of the Oracle Application Object Library. An unauthenticated attacker with network access via HTTP can...

Oracle E-Business Suite: CVE-2026-101767: Critical Patch Update

Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite component: Core. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Application Object...

Oracle E-Business Suite: CVE-2026-101552: Critical Patch Update

Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite component: Flexfields. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Application...

ALSA-2026:85968 Important: openssl security update

OpenSSL is a toolkit that implements the Secure Sockets Layer SSL and Transport Layer Security TLS protocols, as well as a full-strength general-purpose cryptography library. Security Fixes: openssl: heap buffer overflow in CMS key unwrapping CVE-2026-63072 openssl: compat-openssl: DTLS Retransmi...

Linux Distros Unpatched Vulnerability : CVE-2026-112392

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Pillow is a Python imaging library. Prior to 13.0.0, Pillow's rank-based filters can dereference invalid image storage for a zero-size image. ImagingExpand...

CVE-2016-20100: Improper Limitation of a Pathname to a Restricted Directory

Memphis Documents Library plugin for WordPress before 3.1.6 contains a path traversal vulnerability that allows unauthenticated attackers to read arbitrary files via the mdocs-img-preview parameter. Attackers can send GET requests with traversal sequences to mdocsimgpreview in mdocs-downloads.php...

PT-2026-118444

Name of the Vulnerable Software and Affected Versions Raptor RDF Syntax Library versions 2.0.15 through 2.0.16 Description A heap-based buffer overflow occurs in the raptor new term from counted literal function due to the truncation of the language tag length to an unsigned char. An attacker can...

aegis-finance-mcp (0.1.1), agent-mcp-server (0.0.4.0) +132 more potentially affected by unknown CVE via uv (>=0.1.45, <=0.12.24)

uv PYPI version =0.1.45, =0.11.0, =0.4.7, =0.0.21, =1.2.0rc5, =0.71.2.dev141039313338033, =0.112.0, =0.1.0, =0.1.2, =1.0.3, =0.5.0.dev0, =0.8.0.dev0 - cdm-ecommerce-backend 0.1.0 and more Source cves: unknown CVE Source advisory: MEND:WS-2026-0173...

Oracle E-Business Suite: CVE-2026-101757: Critical Patch Update

Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite component: DB Privileges. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Application...