CVE-2026-61327

CVE-2026-61327 affects Oracle E-Business Suite's Oracle Bills of Materials (component: Internal Operations) on supported 12.2.13–12.2.15. The vulnerability allows a low-privileged, unauthenticated (network access via HTTP) attacker to unauthorizedly create, delete, or modify critical data within ...

CVE-2026-60741

CVE-2026-60741 affects Oracle E-Business Suite Oracle Cost Management (Internal Operations) with vulnerable versions 12.2.3–12.2.15. An attacker with network access via HTTP and low privileges can compromise Cost Management, potentially creating, deleting, or modifying data across all accessible ...

CVE-2026-60557

CVE-2026-60557 affects Oracle WebCenter Sites (Oracle Fusion Middleware) in versions 12.2.1.4.0 and 14.1.2.0.0. The issue allows an unauthenticated attacker with network access over HTTP to compromise WebCenter Sites, with human interaction required for exploitation. Impact per sources: potential...

CVE-2026-60457

...

CVE-2026-60162

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.12. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracl...

CVE-2026-60159

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.12. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracl...

CVE-2026-47062

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.12. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle V...

CVE-2026-47057

The CVE-2026-47057 entry concerns Oracle Java SE (Scripting) with affected versions listed as 8u491, 8u491-perf, and 11.0.31. The vulnerability is exploitable over the network via multiple protocols and can allow an unauthenticated attacker to cause a hang or crash (complete DOS). The flaw can be...

CVE-2026-47055

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.12. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle ...

CVE-2026-47053

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.12. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle V...

CVE-2026-47048

CVE-2026-47048 affects Oracle PeopleSoft Enterprise PeopleTools (component: Security) with affected versions 8.61 and 8.62. The issue is exploitable with network access via HTTP by a low-privilege attacker and requires user interaction. Successful attacks can lead to unauthorized read/update/inse...

CVE-2026-47044

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.12. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle V...

CVE-2026-47041

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.12. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle ...

CVE-2026-47038

...

CVE-2026-65058 Trezor Safe improper security check in on-device display

Trezor Safe 3, Safe 5, and Safe 7 firmware contains a confirmation-binding flaw in the Ethereum signtx / signtxeip1559 flow. For contract interactions, the device confirms only the initial calldata chunk while the signature commits to the full streamed calldata. An attacker could present calldata...

CVE-2026-16317 Silent Drop of TLS 1.3 Encrypted Records in s2n-tls

Missing validation of the outer contenttype byte on TLS 1.3 encrypted records in s2n-tls allows an active man-in-the-middle to silently discard individual application data records without either endpoint detecting the modification. RFC 8446 Section 5.2 requires that the outer contenttype of all...

EUVD-2026-43960

Credential confusion in @sigstore/oci can leak registry credentials to an attacker-controlled registry...

GHSA-XVCM-6775-5M9R Immutabl: Hash-collision algorithmic complexity denial of service in Immutable.Map/Set

Summary Immutable.Map and Immutable.Set keep keys that share the same 32-bit hash in a collision bucket that is scanned linearly. The string hash is public and deterministic, so an attacker who controls the keys inserted into a Map can craft many keys that all collide, degrading insertion and...

CVE-2026-55082 DHIS2 SQL injection in SQL View filter values

DHIS2 is a flexible information system for data capture, management, validation, analytics and visualization. DHIS2 SQL View data endpoints allowed authenticated users with SQL View access to provide crafted filter values that were interpolated into generated SQL. An authenticated user with acces...

CVE-2026-21577

This CVE affects Confluence Data Center, introduced in versions 9.0.1–10.2.0. It is a High severity DoS (CVSS 7.1) that an authenticated attacker can use to make a resource unavailable by disrupting network-connected services. Upgrades are recommended: move to Confluence Data Center 9.2.17 or new...