136913 matches found
[SECURITY] Fedora 44 Update: erlang-cowlib-2.19.0-1.fc44
Support library for manipulating Web protocols...
gstreamer1-plugins-bad-free: gstreamer: rfbsrc/librfb Hextile heap out-of-bounds write with 16bpp framebuffer
A heap buffer overflow vulnerability was found in GStreamer's rfbsrc plugin. When a client connects to a malicious RFB/VNC server that advertises a 16bpp framebuffer and sends Hextile-encoded updates, the Hextile background fill path writes 32-bit pixel values into a buffer allocated for 16-bit...
AlmaLinux 10 : freerdp (ALSA-2026:54486)
The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:54486 advisory. FreeRDP: FreeRDP: Remote code execution or denial of service via heap-based buffer overflow CVE-2026-64620 FreeRDP: FreeRDP: Double-free vulnerability v...
SAP NetWeaver Memory Corruption (3714806)
The version of the SAP NetWeaver kernel detected on the remote host is affected by a memory corruption vulnerability as referenced in SAP Security Note 3714806: - SAP NetWeaver Application Server ABAP allows an unauthenticated attacker to exploit logical errors in DIAG protocol parsing, resulting...
Bill Issues Component Full Control
The vulnerability of the Bill Issues component in the Oracle Materials Management module, which handles material specifications, product composition, and technological processes, is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain full contr...
Metadata Plugin Oracle Enterprise Manager Data Compromise
The vulnerability of the Metadata Plugin component of the Oracle Enterprise Manager Base Platform is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...
Metadata Plugin Oracle Enterprise Manager Data Compromise
The vulnerability of the Metadata Plugin component of the Oracle Enterprise Manager Base Platform is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information by using t...
Oracle Retail Integration Bus RIB Kernal Full Control
The vulnerability of the RIB Kernal component in the XML-based asynchronous messaging integration platform of Oracle Retail Integration Bus is related to improper code generation management. Exploiting this vulnerability can allow an attacker to gain full control over the application using the HT...
ksmbd DoS
The vulnerability of the ksmbd component in the Linux operating system’s kernel is related to the lack of data security mechanisms. Exploiting this vulnerability can allow an attacker to cause service failures...
Oracle Retail Integration Bus RIB Kernal Full Control
The vulnerability of the RIB Kernal component in the XML-based asynchronous messaging integration platform of Oracle Retail Integration Bus is related to insecure privilege management. Exploiting this vulnerability could allow an attacker to gain full control over the application using the HTTP...
Oracle Application Testing Suite Full Control
The vulnerability of the installation service Install of the Oracle Application Testing Suite relates to insecure management of privileges. Exploiting this vulnerability could allow a malicious actor to gain full control over the application using the Oracle Net protocol...
Enterprise Config Management Full Control
The vulnerability of the Enterprise Config Management component of the Oracle Enterprise Manager Base Platform is related to improper authentication. Exploiting this vulnerability can allow a malicious actor to gain full control over the application using the HTTPS protocol...
Oracle Enterprise Manager Base Platform Full Control
The vulnerability of the Agent Next Gen component of the Oracle Enterprise Manager Base Platform software platform is related to insecure management of privileges. Exploiting this vulnerability could allow a malicious actor to gain full control over the application using the HTTPS protocol...
Oracle Application Testing Suite Load Testing Full Control
The vulnerability of the Load Testing module for web apps within the Oracle Application Testing Suite relates to insecure management of privileges. Exploiting this vulnerability could allow a malicious actor to gain full control over the application using the TCP protocol...
CVE-2026-58224: Missing Support for Integrity Check
A flaw was found in Samba's CTDB, the clustered database service used by Samba. Insufficient integrity validation of received CTDB protocol packets allows malformed packets containing invalid field lengths, improperly terminated strings, or inconsistent packet sizes to be processed without adequa...
Oracle Enterprise Manager Base Platform Unauthorized Access
The vulnerability of the UI Framework component of the Oracle Enterprise Manager Base Platform is related to insecure management of privileges. Exploiting this vulnerability could allow an attacker to gain unauthorized access to read, modify, or delete data, as well as cause service failures usin...
Siebel Approval Manager Data Compromise
The vulnerability of the Siebel Approval Manager component, a tool for configuring, customizing, and integrating CRM systems, is related to insecure privilege management. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...
OpenScript Package Full Control
The vulnerability of the OpenScript package in the Oracle Application Testing Suite software automation suite is related to insecure management of privileges. Exploiting this vulnerability could allow a malicious actor to gain full control over the application using the TCP protocol...
DEBIAN-CVE-2026-56862
Handshake messages, such as KeyUpdate, are always considered as state-advancing, regardless of whether a handshake has been completed or not. As a result, a malicious client can keep sending KeyUpdate messages to force the server to keep performing key derivation operations indefinitely...
