PT-2026-119048

Vulnerability in Oracle REST Data Services component: Core. Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle REST Data Services. Successful attacks of this vulnerability can...

PT-2026-118732

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 156.0.8078.47 Description An out of bounds read exists in the API, which could allow a remote attacker to read memory inside the sandbox by using a specially crafted HTML page. An out of bounds read occurs when...

Linux Distros Unpatched Vulnerability : CVE-2026-98499

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HID: wacom: fix OOB read in wacomwacpenserialenforce The 'wacomwacpenserialenforce' function may calculate and pass an invalid offset to hidfieldextract,...

Azul Zulu: CVE-2026-91334: Vulnerability in Azul Zulu

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: ImageIO. Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1...

PT-2026-120105

Vulnerability in Oracle Essbase component: Security. The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Essbase. While the vulnerability is in Oracle Essbase, attacks may...

PT-2026-119177

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Portal. Supported versions that are affected are 8.61-8.63. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools...

AlmaLinux 8 : emacs (ALSA-2026:80506)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:80506 advisory. emacs: GNU Emacs: Heap over-read leading to information disclosure via crafted image CVE-2026-77219 emacs: local shell command injection through the user...

AlmaLinux 9 : emacs (ALSA-2026:80507)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:80507 advisory. emacs: GNU Emacs: Heap over-read leading to information disclosure via crafted image CVE-2026-77219 emacs: local shell command injection through the user...

PT-2026-118620

Name of the Vulnerable Software and Affected Versions Thunderbird versions prior to 153.5.1 Thunderbird versions prior to 158.0.1 Description When authenticating to a POP3 or SMTP server using NTLM, the application fails to verify if the server challenge is valid base64. A malicious server can se...

FreeRDP Smartcard Bypass ASLR

The vulnerability of the smartcardLocateCardsByATRACall function in the RDP client FreeRDP involves reading data beyond the allowed range of memory. Exploiting this vulnerability could allow a malicious actor to bypass the ASLR protection mechanism...

PT-2026-119905

Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, and 27 Oracle GraalVM for JDK versions 17.0.20.1 and 21.0.12.1 Oracle GraalVM Enterprise Edition version 21.3.19.1.1 Description An issue in the Serviceabili...

PT-2026-118742

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 156.0.8078.47 Description An out of bounds read occurs in the Offline component, which allows a remote attacker to potentially read memory inside the sandbox by using a crafted HTML page. An out of...

PT-2026-119264

Vulnerability in the Helidon product of Oracle Fusion Middleware component: helidon-webclient-websocket. Supported versions that are affected are 4.0.0-4.5.5 and 27.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful...

PT-2026-120112

Vulnerability in Oracle Essbase component: Java Based Agent. The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Essbase. Successful attacks of this vulnerability can result in...

PT-2026-119933

Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware component: Outside In PDF Export SDK. The supported version that is affected is 8.5.8. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Outside In...

James Charlesworth TinyMCE Thumbnail Gallery path traversal vulnerability

Versions of James Charlesworth TinyMCE Thumbnail Gallery prior to 1.1.0 contain a path traversal vulnerability. This vulnerability stems from improper handling of the href parameter, allowing unauthenticated attackers to read arbitrary files by sending GET requests containing traversal sequences...

PT-2026-120077

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics component: Analytics Server. Supported versions that are affected are 8.2.0.0.0 and 26.01.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

PT-2026-120121

Name of the Vulnerable Software and Affected Versions Oracle Essbase version 21.8.3.0.0 Description An issue in the Security component allows a low privileged attacker with network access via HTTP to compromise the system. This can result in unauthorized read access to a subset of accessible data...

Google Chrome Vulnerability: CVE-2026-113333

Memory corruption in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

Google Chrome Vulnerability: CVE-2026-113209

Memory corruption in Navigation in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. Chromium security severity: Medium...