CVE-2026-46914

Vulnerability in the Oracle Solaris product of Oracle Systems component: Filesystem. The supported version that is affected is 11.4. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris...

RHSA-2026:26461 Red Hat Security Advisory: redhat-ds:11 security update

Bulletin has no description...

CVE-2025-69160 WordPress Gita theme <= 1.11 - Local File Inclusion vulnerability

Unauthenticated Local File Inclusion in Gita = 1.11 versions...

CVE-2025-69159 WordPress Printo theme <= 1.11 - Local File Inclusion vulnerability

Unauthenticated Local File Inclusion in Printo = 1.11 versions...

EUVD-2026-36246

A HTTP request smuggling and desynchronization vulnerability affects Kong Gateway Enterprise 3.4, 3.10, 3.11, 3.12, 3.13, and 3.14 series. The vulnerability is caused by a parsing flaw in Kong’s HTTP request processing pipeline when handling untrusted HTTP/1.1 traffic...

CVE-2026-8464 Path traversal in Neuron Soft Golem OEE MES

Golem OEE MES is vulnerable to an unauthenticated path traversal flaw. This vulnerability allows an attacker in the same local network to read arbitrary files from the server's operating system by manipulating HTTP request paths. This issue has been fixed in version 11.6.0...

CVE-2026-8464

CVE-2026-8464 : Golem OEE MES is affected by an unauthenticated path-traversal vulnerability that could allow an attacker in the same local network to read arbitrary files from the server by manipulating HTTP request paths. The issue is fixed in version 11.6.0. Affected product: Golem OEE MES; vu...

CVE-2026-45776

OpenXDMoD is an open framework for collecting and analyzing HPC metrics. Prior to version 11.0.3, a flaw in Open XDMoD's access control logic allows an attacker to submit a crafted HTTPS POST request that sets a session variable used for authorization decisions. If an installation of Open XDMoD...

CVE-2025-61308

A reflected cross-site scripted XSS vulnerability in the dfm-menumaintenance.php component of GmbH Mecury Managed Print Services docuForm v11.11c allows attackers to execute arbitrary Javascript in the context of a user's browser via injecting a crafted payload into an unfiltered variable value...

CVE-2025-61306

A reflected cross-site scripted XSS vulnerability in the dfm-menucoveragealerts.php component of GmbH Mecury Managed Print Services docuForm v11.11c allows attackers to execute arbitrary Javascript in the context of a user's browser via injecting a crafted payload into an unfiltered variable valu...

CVE-2026-1343

IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Container 10.0 through 10.0.9.1 and IBM Verify Identity Access 11.0 through 11.0.2 and IBM Security Verify Access 10.0 through 10.0.9.1 allows an attacker to contact internal authentication endpoints which are...

GHSA-Q4WQ-4WHJ-CXHX vulnerabilities

Vulnerabilities for packages: openjdk-8-openj9, openjdk-11-openj9, openjdk-21-openj9, openjdk-25-openj9, openjdk-17-openj9, openjdk-26-openj9...

GHSA-XVMR-9P7M-JMWV vulnerabilities

Vulnerabilities for packages: openjdk, openjdk-8-openj9, openjdk-11-openj9, openjdk-21-openj9, openjdk-25-openj9, openjdk-17-openj9, openjdk-26-openj9...

GHSA-75HH-423H-RVWG vulnerabilities

Vulnerabilities for packages: openjdk, openjdk-8-openj9, openjdk-11-openj9, openjdk-21-openj9, openjdk-25-openj9, openjdk-17-openj9, openjdk-26-openj9...

GHSA-5FXQ-F64V-57FQ vulnerabilities

Vulnerabilities for packages: openjdk-8-openj9, openjdk-11-openj9, openjdk-21-openj9, openjdk-25-openj9, openjdk-17-openj9, openjdk-26-openj9...

GHSA-99RJ-3595-5FRJ vulnerabilities

Vulnerabilities for packages: openjdk-8-openj9, openjdk-11-openj9, openjdk-21-openj9, openjdk-25-openj9, openjdk-17-openj9, openjdk-26-openj9...

CVE-2007-3716 vulnerabilities

Vulnerabilities for packages: openjdk-8-openj9, openjdk-11-openj9, openjdk-21-openj9, openjdk-25-openj9, openjdk-17-openj9, openjdk-26-openj9...

CVE-2025-10911 vulnerabilities

Vulnerabilities for packages: openjdk-8-openj9, openjdk-11-openj9, openjdk-21-openj9, openjdk-25-openj9, openjdk-17-openj9, openjdk-26-openj9...

CVE-2026-34268 vulnerabilities

Vulnerabilities for packages: openjdk, openjdk-8-openj9, openjdk-11-openj9, openjdk-21-openj9, openjdk-25-openj9, openjdk-17-openj9, openjdk-26-openj9...

CVE-2026-40108

GLPI is a free asset and IT management software package. In versions 11.0.0 through 11.0.6, a technician can store an XSS payload in a ITIL costs. This issue has been fixed in version 11.0.7...