CVE-2026-114634 WWBN AVideo before 29.4.0 Blind SSRF via getHeaderContentTypeFromURL Redirect

WWBN AVideo before 29.4.0 contains a blind server-side request forgery vulnerability in getHeaderContentTypeFromURL because getheaders follows redirects without re-validating targets with isSSRFSafeURL. Authenticated uploaders can store a videoLink pointing to a redirector, causing internal GET...

EUVD-2026-107889

WWBN AVideo before 29.4.0 contains a blind server-side request forgery vulnerability in getHeaderContentTypeFromURL because getheaders follows redirects without re-validating targets with isSSRFSafeURL. Authenticated uploaders can store a videoLink pointing to a redirector, causing internal GET...

DEBIAN-CVE-2026-91395

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Utility. Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1; Oracle GraalVM for JDK: 17.0.20.1 and 21.0.12.1; Oracle GraalVM...

DEBIAN-CVE-2026-91396

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Utility. Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1; Oracle GraalVM for JDK: 17.0.20.1 and 21.0.12.1; Oracle GraalVM...

EUVD-2026-107578

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JSSE. Supported versions that are affected are Oracle Java SE: 8u511, 8u511-perf, 11.0.33, 17.0.21, 21.0.13, 25.0.5, 27.0.1; Oracle GraalVM for JDK: 17.0.21 and...

Oracle Linux 8 : php:8.2 (ELSA-2026-87073)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-87073 advisory. libzip 1.7.3-1 - update to 1.7.3 1.6.1-1 - update to 1.6.1 - enable lzma support 1.5.2-1 - update to 1.5.2 - add all explicit cmake options to ensure...

Oracle MySQL Server 26.x.x < 26.10.0 (October 2026 CPU)

The versions of MySQL Server installed on the remote host are affected by multiple vulnerabilities as referenced in the October 2026 CPU advisory. - Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Compiling OpenSSL. Supported versions that are affected...

Oracle Database Server (October 2026 CPU)

The versions of Oracle Database Server installed on the remote host are affected by multiple vulnerabilities as referenced in the October 2026 CPU advisory. - Vulnerability in the RDBMS OpenSSL component of Oracle Database Server. Supported versions that are affected are 19.3-19.32 and...

Oracle Linux 8 : grafana-pcp (ELSA-2026-88189)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-88189 advisory. 5.1.1-19 - Rebuild against updated golang - Resolves RHEL-287631 - Resolves RHEL-279256 - Resolves RHEL-278603 Tenable has extracted the preceding...

Oracle Siebel Server <= 26.8 (October 2026 CPU)

The versions of Oracle Siebel CRM installed on the remote host are affected by multiple vulnerabilities as referenced in the October 2026 CPU advisory. - Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM component: Siebel Cloud Manager. Supported versions that are...

Oracle Linux 8 : grafana (ELSA-2026-88188)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-88188 advisory. - Fixes CVE-2024-1442 Add email verification when updating user email Orabug: 38550520 Tenable has extracted the preceding description block directly...

Oracle NoSQL Database (October 2026 CPU)

The versions of Oracle NoSQL Database installed on the remote host are affected by multiple vulnerabilities as referenced in the October 2026 CPU advisory. - Vulnerability in Oracle NoSQL Database component: Administration Netty. Supported versions that are affected are 23.3.41, 24.4.14 and...

Oracle Linux 9 : grafana-pcp (ELSA-2026-88354)

The remote Oracle Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-88354 advisory. 5.1.1-17.2 - Rebuild against updated golang - Resolves RHEL-287511 - Resolves RHEL-279381 - Resolves RHEL-278739 Tenable has extracted the preceding...

Oracle Linux 9 : php:8.2 (ELSA-2026-87072)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-87072 advisory. php 8.2.35-1 - rebase to 8.2.35 php-pecl-apcu 5.1.23-1 - update to 5.1.23 for PHP 8.2 RHEL-14699 php-pecl-rrd 2.0.3-4 - build for PHP 8.1 2070040...

Oracle MySQL Connectors NET (October 2026 CPU)

The versions of MySQL Connectors installed on the remote host are affected by multiple vulnerabilities as referenced in the October 2026 CPU advisory. - Vulnerability in the MySQL Connectors product of Oracle MySQL component: Connector/Net. The supported version that is affected is 26.7.0...

Linux Distros Unpatched Vulnerability : CVE-2026-101516

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Libraries. Supported version...

Oracle Business Process Management Suite (12.2.1.4.0 / 14.1.2.0.0) (October 2026 CPU)

The version of Oracle Business Process Management Suite installed on the remote host is affected by multiple vulnerabilities, as referenced in the October 2026 CPU advisory: - Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware component: Human Workfl...

Oracle MySQL Connectors ODBC (October 2026 CPU)

The versions of MySQL Connectors installed on the remote host are affected by multiple vulnerabilities as referenced in the October 2026 CPU advisory. - Vulnerability in the MySQL Connectors product of Oracle MySQL component: Connector/ODBC. The supported version that is affected is 26.7.1...

Oracle Identity Manager (October 2026 CPU)

The 12.2.1.4.0 and 14.1.2.1.0 versions of Identity Manager installed on the remote host are affected by multiple vulnerabilities as referenced in the October 2026 CPU advisory. - Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware component: End User Self Service...

Linux Distros Unpatched Vulnerability : CVE-2026-83387

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JDBC. Supported versions tha...