PT-2026-118446

Name of the Vulnerable Software and Affected Versions Vitest versions 4.1.11 through 4.1.11 Vitest version 5.0.3 Description In the packages/mocker/src/node/interceptorPlugin.ts file, the isFileLoadingAllowed function and the filesystem read process interpret backslashes differently on Windows. A...

Apache jclouds 2.7.0 XML External Entity (XXE) Injection

Summary Apache jclouds is an open source multi-cloud toolkit for the Java platform that gives you the freedom to create applications that are portable across clouds while giving you full control to use cloud-specific features. The jclouds API gives you the freedom to use portable abstractions or...

Google Chrome Vulnerability: CVE-2026-113322

Memory corruption in Dawn in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. Chromium security severity: High...

PT-2026-119111

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Report Distribution. Supported versions that are affected are 8.61-8.63. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise...

PT-2026-119256

Vulnerability in the Helidon product of Oracle Fusion Middleware component: LRA. Supported versions that are affected are 4.0.0-4.5.5. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this vulnerability ca...

PT-2026-118707

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 156.0.8078.47 Description An out of bounds read exists in the Extensions component, which allows a remote attacker to read memory inside the sandbox by using a crafted HTML page. An out of bounds read occurs whe...

Linux Distros Unpatched Vulnerability : CVE-2026-98631

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xsk: Use a 32-bit compare in xskmapgenlookup xskmapgenlookup loads a u32 key and compares it with maxentries using BPFJMPIMM. BPF immediates are sign-extended t...

Linux Distros Unpatched Vulnerability : CVE-2026-98623

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/nouveau/clk: fix list cursor use after loop in nvkmclkustateupdate If listforeachentry exits without hitting a break then pstate is not a valid pstate...

MariaDB 10.6.0 < 10.6.28/ 10.11.0 < 10.11.19/ 11.4.0 < 11.4.13/ 11.8.0 < 11.8.9/ 12.3.0 < 12.3.3/ 13.0.0 < 13.0.2

The version of MariaDB installed on the remote host is prior to 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, 13.0.2. It is, therefore, affected by a vulnerability as referenced in the GHSA-c4gx-34mg-95q5 advisory. - MariaDB server is a community developed fork of MySQL server. From 10.6.1 until...

Linux Distros Unpatched Vulnerability : CVE-2026-96424

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect DBus policy for lomiri-upload-manager part of lomiri-download-manager allows arbitrary user to read arbitrary file as root over DBus CVE-2026-96424 No...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-52917)

In the Linux kernel, the following vulnerability has been resolved: sctp: diag: reject stale associations in dumpone path The SCTP exact sockdiag lookup can hold a transport reference, block on locksocksk, and then resume after sctpassociationfree has marked the association dead and freed its bin...

PT-2026-119395

Name of the Vulnerable Software and Affected Versions MySQL Server versions 9.7.0 through 9.7.3 MySQL Server versions 26.7.0 through 26.7.1 MySQL Cluster versions 9.7.0 through 9.7.3 MySQL Cluster versions 26.7.0 through 26.7.1 Description An issue exists in the Server: Connection Handling...

PT-2026-119814

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards component: Web Runtime SEC. Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD Edwards...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-46122)

In the Linux kernel, the following vulnerability has been resolved: wifi: b43: enforce bounds check on firmware key index in b43rx The firmware-controlled key index in b43rx can exceed the dev-key array size 58 entries. The existing B43WARNON is non-enforcing in production builds, allowing an...

PT-2026-118432

gx multi line text view display info get reads one byte past the end of the application's text buffer when the string it is given ends with a carriage return r. The over-read can also cause callers to advance their index past the end of the string, producing a second over-read in gx multi line te...

RockyLinux 9 : webkit2gtk3 (RLSA-2026:84583)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:84583 advisory. chromium-browser: angle: ANGLE in Google Chrome: Information disclosure via out-of-bounds read CVE-2026-87596 chromium-browser: angle: ANGLE in Google...

Google Chrome Vulnerability: CVE-2026-113295

Out of bounds read in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. Chromium security severity: High...

PT-2026-119824

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards component: Business Logic Infra SEC. Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows low privileged attacker with network access via JDENET to compromise JD Edwards...

PT-2026-119555

Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 19.3-19.32 and 21.3-21.23. Easily exploitable vulnerability allows high privileged attacker having Query Optimizer privilege with network access via Oracle Net to compromise RDBMS. Successful...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-31708)

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix OOB read in smb2ioctlqueryinfo QUERYINFO path smb2ioctlqueryinfo has two response-copy branches: PASSTHRUFSCTL and the default QUERYINFO path. The QUERYINFO branch clamps qi.inputbufferlength to the server-report...