23359 matches found
BELL-CVE-2026-64040
Bulletin has no description...
BELL-CVE-2026-64176
Bulletin has no description...
CVE-2026-62497
creationtimestamp| type| source ---|---|--- 2026-07-22 01:37:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr76r25iy52x 2026-07-23 18:20:23+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-07-31 22:37:06+00:00| seen|...
CVE-2026-64024
A flaw was found in the Linux kernel's Transmission Control Protocol TCP networking stack. This vulnerability arises from a stale per-CPU variable that can retain a previously used Initial Sequence Number ISN when certain packets are dropped. A remote attacker could exploit this by sending...
EUVD-2026-47213
Vulnerability in the Oracle SDP Number Portability product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle SDP Numb...
EUVD-2026-46933
Vulnerability in the Oracle SDP Number Portability product of Oracle E-Business Suite component: Installation. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle SDP Number...
CVE-2026-60571
Vulnerability in the Oracle SDP Number Portability product of Oracle E-Business Suite component: Installation. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle SDP Number...
GHSA-R7WM-3CXJ-WFF9 jackson-core: Async parser maxNumberLength bypass via chunked digit accumulation (incomplete fix for GHSA-72hv-8253-57qq)
Summary The fix released in jackson-core 2.18.6 and 2.21.1 for GHSA-72hv-8253-57qq Number Length Constraint Bypass in Async Parser, published 2026-02-28 is incomplete. The fix commit b0c428e6 1555 wired validateIntegerLength into a new setIntLength helper and called it at every place where the...
Allocation of Resources Without Limits or Throttling
Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in the NonBlockingUtf8JsonParserBase file. An attacker can exhaust system memory by streaming JSON input in small chunks to the asynchronous parser, causing unbounded accumulation of...
jackson-core: Async parser maxNumberLength bypass via chunked digit accumulation (incomplete fix for GHSA-72hv-8253-57qq)
Summary The fix released in jackson-core 2.18.6 and 2.21.1 for GHSA-72hv-8253-57qq Number Length Constraint Bypass in Async Parser, published 2026-02-28 is incomplete. The fix commit b0c428e6 1555 wired validateIntegerLength into a new setIntLength helper and called it at every place where the...
CVE-2026-63925
A flaw was found in the Linux kernel's MACsec Media Access Control Security subsystem. When using Extended Packet Numbering XPN, a vulnerability exists where the replay protection mechanism can be bypassed. An attacker can exploit an integer overflow when the packet number reaches its maximum...
CVE-2026-62562
...
CVE-2026-62561
Oracle E-Business Suite HRMS (US) in versions 12.2.3–12.2.15 (Internal Operations) contains a vulnerability that allows a low-privileged attacker with logon to the infrastructure to compromise Oracle HRMS (US) and potentially take over. CVSSv3.1 base score 7.8 (C:H, I:H, A:H) with Local attack ve...
CVE-2026-62547
CVE-2026-62547 is a vulnerability in Oracle E-Business Suite’s Oracle Workflow product, specifically the Workflow Notification Mailer. Affected versions are 12.2.3–12.2.15. The issue is exploitable by an unauthenticated attacker with network access via SMTP and can lead to takeover of Oracle Work...
CVE-2026-62525
...
CVE-2026-62519
CVE-2026-62519 affects Oracle E-Business Suite’s Succession Planning (Succession plan) with affected versions 12.2.3–12.2.15. The vulnerability allows a low-privilege attacker with network access over HTTP to compromise the Succession planning component, potentially enabling unauthorized update/i...
CVE-2026-62515
...
CVE-2026-62508
...