23359 matches found
CVE-2026-47052
...
CVE-2026-47035
The CVE-2026-47035 entry concerns Oracle Java SE (JavaFX) with an affected version of 8u491. The vulnerability affects JavaFX in Oracle Java SE and can be exploited by an unauthenticated attacker with network access, requiring user interaction. The impact is described as possible unauthorized upd...
CVE-2026-47007
...
CVE-2026-46999
CVE-2026-46999 affects Oracle Enterprise Manager Base Platform (Discovery Framework) on versions 13.5 and 24.1. The vulnerability is exploitable over a network via HTTPS by an unauthenticated attacker, with potential for unauthorized create/delete/modify access to data, unauthorized read access t...
CVE-2026-46986
...
CVE-2026-46968
This CVE concerns Oracle Java SE JSSE with affected versions listed (Oracle Java SE: 8u491, 8u491-perf, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK: 17.0.19 and 21.0.11; Oracle GraalVM Enterprise Edition: 21.3.18). The vulnerability is exploitable over a network via TLS and ...
CVE-2026-46943
...
CVE-2026-35290
...
CVE-2026-47410 praisonai-platform: JWT signing key defaults to hardcoded "dev-secret-change-me", allowing token forgery for any user when PLATFORM_ENV is unset
PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versions prior to 0.1.4 have an insecure default cryptographic key. The JWT signing secret defaults to the hardcoded literal "dev-secret-change-me" when PLATFORMJWTSECRET is unset. A safety check exists but only...
CVE-2026-16402
creationtimestamp| type| source ---|---|--- 2026-07-21 13:57:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr5xnw5tvw23 2026-07-22 04:47:38+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260722 2026-07-22 18:42:04+00:00| seen|...
UBUNTU-CVE-2026-16352
Sandbox escape due to use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13...
SUSE CVE-2026-63925
In the Linux kernel, the following vulnerability has been resolved: macsec: fix replay protection at XPN lower-PN wrap In macsecpostdecrypt, when pn is U32MAX, pn + 1 overflows u32 to 0 and the first branch never fires. If nextpnhalves.lower is also in the upper half, pnsamehalfpn, lower is true...
SUSE CVE-2026-63950
In the Linux kernel, the following vulnerability has been resolved: mm/rmap: initialize nrpages to 1 at loop start in trytounmapone Initialize nrpages to 1 at the start of each loop iteration, like folioreferencedone does. Without this, nrpages computed by a previous foliounmapptebatch call can b...
SUSE CVE-2026-64024
In the Linux kernel, the following vulnerability has been resolved: tcp: fix stale per-CPU tcptwisn leak enabling ISN prediction Blamed commit moved the TIMEWAIT-derived ISN from the skb control block to a per-CPU variable, assuming the value would always be consumed by tcpconnrequest for the sam...
CVE-2026-13693
creationtimestamp| type| source ---|---|--- 2026-07-21 10:17:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr5lebm3qu2x...
CVE-2026-15812
creationtimestamp| type| source ---|---|--- 2026-07-21 05:57:42+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116956427872567771 2026-07-21 10:48:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr5n4hn4dy2o...
CVE-2026-64095
A flaw was found in the Linux kernel's batman-adv module, which handles bridge loop avoidance. A race condition allows the bla.numrequests counter to be decremented multiple times due to non-atomic operations. This can lead to an inconsistent state within the kernel, potentially enabling a local...
CVE-2026-60960: Improper Access Control
Vulnerability in the Oracle SDP Number Portability product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle SDP Number...
CVE-2026-60959: Improper Access Control
Vulnerability in the Oracle SDP Number Portability product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle SDP Numb...
EulerOS Virtualization 2.12.1 (EulerOS-SA-2026-2759)
According to the versions of the package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Issue summary: When a delta CRL that contains a Delta CRL Indicator extension is processed a NULL pointer dereference might happen if the...