171487 matches found
CVE-2026-62633
Oracle Fusion Middleware's Oracle Reports Developer 14.1.2.0.0 (Security and Authentication component) has an easily exploitable unauthenticated HTTP vulnerability rated CVSS 9.8 (C/I/A High), enabling full product takeover. Oracle's August 2026 security advisory (cspuaug2026.html) addresses this...
CVE-2026-61313
The Security component of Oracle Hyperion Calculation Manager version 11.2.25.0.000 is affected by a local, easily exploitable vulnerability requiring high privileges, rated CVSS 3.1 6.7 (MEDIUM). Successful exploitation can grant unauthorized access to critical data and cause scope change impact...
CVE-2026-61286
...
CVE-2026-61227
...
CVE-2026-61038
Oracle WebCenter Sites 12.2.1.4.0 and 14.1.2.0.0 are vulnerable to an unauthenticated, network-accessible HTTP exploit (CVSS 8.2 HIGH) enabling unauthorized data access and partial data modification. Oracle's August 2026 CPU advisory (linked in references) is the primary source for patch details....
CVE-2026-61016
...
CVE-2026-60861
...
CVE-2026-60753
...
Incomplete Fix in MONAI: algo_from_pickle() pickle.loads() RCE still present in v1.5.2 despite GHSA-89gg-p5r5-q6r4 claiming patch
Summary GHSA-89gg-p5r5-q6r4 claims the pickle deserialization vulnerability in algofrompickle was fixed in v1.5.2. However, monai/auto3dseg/utils.py has not been modified since 2024-07-12 — 18 months before v1.5.2 was released 2026-01-29. All three pickle.loads calls remain unchanged. The fix was...
MINI-WG7P-W5MQ-8G6H
Bulletin has no description...
CLSA-2026-1787070801 TuxCare security update for org.springframework (6 CVEs)
TuxCare rebuilt 22 org.springframework packages to address 6 CVEs. Fixed in 5.1.20.RELEASE-tuxcare.4...
Important: Red Hat Security Advisory: kpatch-patch-5_14_0-427_100_1, kpatch-patch-5_14_0-427_113_1, kpatch-patch-5_14_0-427_126_1, kpatch-patch-5_14_0-427_68_2, and kpatch-patch-5_14_0-427_84_1 security update
An update for multiple packages is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...
CVE-2026-50138 goshs: WebDAV listener ignores --read-only, --upload-only, and --no-delete mode flags
goshs is a SimpleHTTPServer written in Go. Prior to version 2.1.0, when goshs is launched with WebDAV enabled -w, the mode-restriction flags --read-only, --upload-only, and --no-delete are enforced only on the primary HTTP port. The WebDAV port is wired straight to golang.org/x/net/webdav.Handler...
diaphora v3.4.2
δiaphora Installation Install with the Hex-Rays plugin manager: root@kitploit: hcli plugin install https://github.com/joxeankoret/diaphora/archive/refs/tags/3.4.2.zip Manual install instructions are below. Diaphora διαφορά, Greek for 'difference' version 3.4 is the most advanced program diffing...
CVE-2026-71556 affecting package packer for versions less than 1.9.5-19
CVE-2026-71556 affecting package packer for versions less than 1.9.5-19. A patched version of the package is available...
MINI-8W8R-3P4V-2RFR
Bulletin has no description...
MINI-V835-2RJG-RJ7M
Bulletin has no description...
CLSA-2026-1787058472 TuxCare security update for 40 packages (1 CVE)
TuxCare rebuilt 40 packages to address 1 CVE. Fixed in 10.1.42-tuxcare.8...
New Report: AI threats are here. Why Q2 2026 signals the end of traditional patch cycles
You can’t patch everything. So what do you fix first? Findings in Q2 2026 have changed traditional answers. The latest Quarterly Threat Landscape Report from Rapid7 Labs shows vulnerability disclosures still surging while attackers use automation and AI-assisted tooling to compress the time betwe...
