Security Bulletin: IBM Cognos Command Center has addressed vulnerabilities

Summary There are vulnerabilities in IBM Cognos Command Center. IBM Cognos Command Center 10.2.5 FP1 IF4 has addressed the applicable CVEs. Please refer to the table in the Related Information section for vulnerability impact. Vulnerability Details CVEID:CVE-2026-34197 DESCRIPTION: Improper Input...

[SECURITY] [DSA 6394-1] firefox-esr security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6394-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso July 22, 2026 https://www.debian.org/security/faq -...

WordPress Bulk Page Generator – LPagery plugin <= 2.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Wordfence PRISM - Wordfence in WordPress Plugin Bulk Landing Page Creator for WordPress LPagery versions = 2.5.7...

GHSA-MHM7-754M-9P8W vulnerabilities

Vulnerabilities for packages: confluent-kafka-jre-bcfips, knative-kafka-broker, hono, jenkins-plugin-manager, apache-tika, druid, elasticsearch-fips, nacos-docker, zookeeper-fips, logstash, spark, zookeeper, apache-activemq, pinot, tez, apache-nifi, infinispan, sonarqube, pinot-fips,...

GHSA-C97M-VXHJ-P7J6 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-cloudcontrol-fips, crossplane-provider-aws-memorydb-fips, crossplane-provider-aws-configservice-fips, crossplane-aws-monolith, crossplane-provider-aws-kafkaconnect, crossplane-provider-aws-glue, chainctl-fips, crossplane-provider-aws-wafv2,...

CVE-2026-5160 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-cloudcontrol-fips, crossplane-provider-aws-memorydb-fips, crossplane-provider-aws-configservice-fips, crossplane-aws-monolith, crossplane-provider-aws-kafkaconnect, crossplane-provider-aws-glue, chainctl-fips, crossplane-provider-aws-wafv2,...

GHSA-G446-98W2-8P5W vulnerabilities

Vulnerabilities for packages: nextcloud-server...

GHSA-F283-GHQC-FG79 vulnerabilities

Vulnerabilities for packages: nextcloud-server...

GHSA-94PJ-82F3-465W vulnerabilities

Vulnerabilities for packages: nextcloud-server...

GHSA-WM3W-8RRP-J577 vulnerabilities

Vulnerabilities for packages: nextcloud-server...

CVE-2026-59889 vulnerabilities

Vulnerabilities for packages: tez, scala, ruby3.2-jrjackson, keycloak-config-cli, ruby3.3-jrjackson, strimzi-kafka-operator, apicurio-registry, apache-nifi-registry, apache-tika, cassandra, druid, jenkins-plugin-manager, zookeeper, opensearch, apache-nifi, confluent-kafka, logstash, sonarqube,...

GHSA-MHM7-754M-9P8W vulnerabilities

Vulnerabilities for packages: tez, ruby3.2-jrjackson, keycloak-config-cli, ruby3.3-jrjackson, apache-tika, cassandra, druid, jenkins-plugin-manager, zookeeper, opensearch, confluent-kafka, logstash, sonarqube, spark, akhq, gradle, infinispan, flyway, thingsboard, wavefront-proxy...

CVE-2026-5160 vulnerabilities

Vulnerabilities for packages: vale, src, mattermost, crossplane-provider-aws-lambda, crossplane-provider-aws-firehose, crossplane-provider-aws-route53, crossplane-provider-azure-sql, crossplane-provider-aws-memorydb, mods, crossplane-provider-azure-storage, crossplane-provider-aws-ec2,...

GHSA-JPJM-C3R5-Q96R vulnerabilities

Vulnerabilities for packages: trufflehog, k8sgateway, sonobuoy, envconsul, amazon-cloudwatch-agent, cue, kubernetes-csi-external-health-monitor, kafkaexporter, ko, witness, argo-workflows, crossplane-provider-aws-route53, spire-server, sqlexporter, neuvector-sigstore-interface, docker-compose,...

USN-8590-1: Exim vulnerabilities

It was discovered that Exim incorrectly handled certain command line options. A local attacker could possibly use this issue to access files outside of the spool area. It was discovered that Exim incorrectly handled string expansion in .local files. A local attacker could possibly use this issue ...

USN-8588-1 gawk vulnerabilities

It was discovered that Gawk incorrectly handled memory when processing input using the getline redirection. An attacker could possibly use this issue to cause a denial of service. CVE-2026-40467 It was discovered that Gawk incorrectly handled certain integer calculations when allocating memory. A...

SUSE CVE-2026-47030

unknown...

Vulnerabilities in Oracle PeopleSoft Enterprise

Oracle has identified 84 vulnerabilities in various modules of Oracle PeopleSoft Enterprise, including HCM Talent Acquisition Manager, In-Memory Project Discovery, FIN Expenses, SCM eProcurement, CC Common Application Objects, SCM Order Management, CRM Common Objects, and FIN Program Management,...

Vulnerabilities are managed in Oracle Enterprise Manager

Oracle has identified several vulnerabilities in Oracle Enterprise Manager Base Platform versions 13.5 and 24.1. These vulnerabilities enable attackers to perform unauthorized read, write, create, delete, and modify actions on sensitive data via network access via HTTPS or HTTP, either without...

DEBIAN-CVE-2026-41637

In NLnet Labs Unbound 1.22.0 up to and including 1.25.1, client terminated DNS-over-QUIC DoQ queries are not accounted properly by Unbound resulting in low-cost inflation of the waiting number of replies for already in-flight resolution queries. This results in degradation of resolution service f...