CVE-2026-46917

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JSSE. Supported versions that are affected are Oracle Java SE: 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK: 17.0.19 and 21.0.11; Oracle GraalVM...

CVE-2026-62497

creationtimestamp| type| source ---|---|--- 2026-07-22 01:37:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr76r25iy52x 2026-07-23 18:20:23+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-07-31 22:37:06+00:00| seen|...

CVE-2026-64024

A flaw was found in the Linux kernel's Transmission Control Protocol TCP networking stack. This vulnerability arises from a stale per-CPU variable that can retain a previously used Initial Sequence Number ISN when certain packets are dropped. A remote attacker could exploit this by sending...

EUVD-2026-47213

Vulnerability in the Oracle SDP Number Portability product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle SDP Numb...

EUVD-2026-46933

Vulnerability in the Oracle SDP Number Portability product of Oracle E-Business Suite component: Installation. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle SDP Number...

CVE-2026-60571

Vulnerability in the Oracle SDP Number Portability product of Oracle E-Business Suite component: Installation. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle SDP Number...

GHSA-R7WM-3CXJ-WFF9 jackson-core: Async parser maxNumberLength bypass via chunked digit accumulation (incomplete fix for GHSA-72hv-8253-57qq)

Summary The fix released in jackson-core 2.18.6 and 2.21.1 for GHSA-72hv-8253-57qq Number Length Constraint Bypass in Async Parser, published 2026-02-28 is incomplete. The fix commit b0c428e6 1555 wired validateIntegerLength into a new setIntLength helper and called it at every place where the...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in the NonBlockingUtf8JsonParserBase file. An attacker can exhaust system memory by streaming JSON input in small chunks to the asynchronous parser, causing unbounded accumulation of...

jackson-core: Async parser maxNumberLength bypass via chunked digit accumulation (incomplete fix for GHSA-72hv-8253-57qq)

Summary The fix released in jackson-core 2.18.6 and 2.21.1 for GHSA-72hv-8253-57qq Number Length Constraint Bypass in Async Parser, published 2026-02-28 is incomplete. The fix commit b0c428e6 1555 wired validateIntegerLength into a new setIntLength helper and called it at every place where the...

CVE-2026-63925

A flaw was found in the Linux kernel's MACsec Media Access Control Security subsystem. When using Extended Packet Numbering XPN, a vulnerability exists where the replay protection mechanism can be bypassed. An attacker can exploit an integer overflow when the packet number reaches its maximum...

CVE-2026-62562

...

CVE-2026-62561

Oracle E-Business Suite HRMS (US) in versions 12.2.3–12.2.15 (Internal Operations) contains a vulnerability that allows a low-privileged attacker with logon to the infrastructure to compromise Oracle HRMS (US) and potentially take over. CVSSv3.1 base score 7.8 (C:H, I:H, A:H) with Local attack ve...

CVE-2026-62547

CVE-2026-62547 is a vulnerability in Oracle E-Business Suite’s Oracle Workflow product, specifically the Workflow Notification Mailer. Affected versions are 12.2.3–12.2.15. The issue is exploitable by an unauthenticated attacker with network access via SMTP and can lead to takeover of Oracle Work...

CVE-2026-62519

CVE-2026-62519 affects Oracle E-Business Suite’s Succession Planning (Succession plan) with affected versions 12.2.3–12.2.15. The vulnerability allows a low-privilege attacker with network access over HTTP to compromise the Succession planning component, potentially enabling unauthorized update/i...

CVE-2026-62515

...

CVE-2026-62494

...

CVE-2026-62444

...

CVE-2026-61256

The CVE-2026-61256 entry concerns Oracle E-Business Suite’s Oracle Advanced Inbound Telephony (Servers component). Affected are 12.2.3–12.2.15. The vulnerability permits a low-privilege, unauthenticated attacker with network access via HTTP to perform unauthorized updates, inserts, or deletes on ...

CVE-2026-61203

...

CVE-2026-61161

The CVE-2026-61161 entry concerns Oracle Commerce Guided Search / Oracle Commerce Experience Manager (Endeca Application Controller), affected in version 11.4.0. The vulnerability is exploitable over HTTP with network access by an unauthenticated attacker, potentially leading to takeover of the a...