142569 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-101724
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: InnoDB. Supported versions that are affected are MySQL Server: 8.4.0-8.4.12,...
Linux Distros Unpatched Vulnerability : CVE-2026-101771
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Client programs. Supported versions that are affected are MySQL Server:...
Linux Distros Unpatched Vulnerability : CVE-2026-101788
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Components Services. Supported versions that are affected are MySQL...
Oracle WebCenter Portal (October 2026 CPU)
The 12.2.1.4.0 and 14.1.2.0.0 versions of WebCenter Portal installed on the remote host are affected by multiple vulnerabilities as referenced in the October 2026 CPU advisory. - Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware component: Runtime Tools. Supported...
Linux Distros Unpatched Vulnerability : CVE-2026-101622
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: InnoDB. Supported versions that are affected are MySQL Server: 8.4.0-8.4.12,...
Linux Distros Unpatched Vulnerability : CVE-2026-101754
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Client programs. Supported versions that are affected are MySQL Server:...
UBUNTU-CVE-2026-87303
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualiza...
Oracle Linux 9 : httpd (ELSA-2026-88229)
The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-88229 advisory. - Related: RHEL-275261 - httpd: Arbitrary code execution via oversized Host header in modvhostalias CVE-2026-63292 - Resolves: RHEL-280369 - httpd:...
UBUNTU-CVE-2026-101768
Vulnerability in the MySQL Connectors product of Oracle MySQL compone...
CVE-2026-91382
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr...
Oracle Linux 10 : golang-github-openprinting-ipp-usb (ELSA-2026-88280)
The remote Oracle Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-88280 advisory. 0.9.27-7.4 - rebuilt with golang-1.26.10-1.el102 Tenable has extracted the preceding description block directly from the Oracle Linux security...
Linux Distros Unpatched Vulnerability : CVE-2026-101611
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: InnoDB. Supported versions that are affected are MySQL Server: 8.4.0-8.4.12,...
UBUNTU-CVE-2026-87322
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualiza...
K000163846: OpenJDK vulnerabilities CVE-2026-61308, CVE-2026-60589, CVE-2026-70906, and CVE-2026-70907
Security Advisory Description CVE-2026-61308 Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Networking. Supported versions that are affected are Oracle Java SE: 8u501, 11.0.32, 17.0.20, 21.0.12, 25.0.4, 26.0.2;...
Several vulnerabilities exist in Oracle Java.
Oracle has identified several vulnerabilities in Oracle Java. In Oracle Java SE, JavaFX, and GraalVM Enterprise Edition, there are various vulnerabilities that can be exploited by unauthorized network attackers through exposed APIs or sandboxed Java applications. These vulnerabilities enable the...
CVE-2026-91403
The certificate authority CA store used in OpenJDK and Oracle Java included multiple root CA certificates of authorities, which signed intermediate CA certificates with weak private keys issued by the eMudhra certificate authority. A man-in-the-middle attacker could use this flaw to issue...
Vulnerabilities in Oracle Fusion Middleware
Oracle has identified several vulnerabilities in various products, including the Oracle SOA Suite, Oracle WebLogic Server, Oracle Data Integrator, Oracle Identity Manager, Oracle Access Manager, Oracle WebCenter Content, Oracle Fusion Middleware including Helidon, and Oracle HTTP Server. These...
Vulnerabilities in Oracle JD Edwards EnterpriseOne
Oracle has identified several vulnerabilities in Oracle JD Edwards EnterpriseOne Tools, specifically in versions 9.2.0.0 through 9.2.26.5. These vulnerabilities allow attackers to gain access to the system using various network protocols such as HTTP, HTTPS, and SMTP, either without authenticatio...
CVE-2026-114634
WWBN AVideo before 29.4.0 contains a blind server-side request forgery vulnerability in getHeaderContentTypeFromURL because getheaders follows redirects without re-validating targets with isSSRFSafeURL. Authenticated uploaders can store a videoLink pointing to a redirector, causing internal GET...
CVE-2026-114634 WWBN AVideo before 29.4.0 Blind SSRF via getHeaderContentTypeFromURL Redirect
WWBN AVideo before 29.4.0 contains a blind server-side request forgery vulnerability in getHeaderContentTypeFromURL because getheaders follows redirects without re-validating targets with isSSRFSafeURL. Authenticated uploaders can store a videoLink pointing to a redirector, causing internal GET...