CVE-2025-59464

A resource consumption flaw has been discovered in NodeJS. A memory leak in Node.js’s OpenSSL integration occurs when converting X.509 certificate fields to UTF-8 without freeing the allocated buffer. When applications call socket.getPeerCertificatetrue, each certificate field leaks memory,...

CVE-2026-21949

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 9.0.0-9.5.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks o...

CVE-2026-21934

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Push Notifications. Supported versions that are affected are 8.60, 8.61 and 8.62. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft...

CVE-2026-21989

CVE-2026-21989 affects Oracle VM VirtualBox cores in versions 7.1.14 and 7.2.4. The issue allows a high-privilege attacker with local access to compromise VirtualBox, potentially leading to unauthorized data creation/deletion/modification, broader data access, and partial denial of service. The b...

CVE-2026-21982

...

CVE-2026-21978

CVE-2026-21978 affects Oracle FLEXCUBE Universal Banking (Relationship Pricing) with affected versions 14.0.0.0.0–14.8.0.0.0. The issue is exploitable by a low-privilege attacker over HTTP with network access, potentially leading to unauthorized access to sensitive data or full access to Oracle F...

CVE-2026-21975

...

CVE-2026-21973

...

CVE-2026-21971

...

CVE-2026-21967

...

CVE-2026-21964

CVE-2026-21964 affects Oracle MySQL Server, specifically the Thread Pooling component. Affected versions are 8.0.0–8.0.44, 8.4.0–8.4.7 and 9.0.0–9.5.0. The vulnerability allows a high-privileged attacker with network access via multiple protocols to cause a hang or a frequently repeatable crash (...

CVE-2026-21956

...

CVE-2026-21957

...

CVE-2026-21956

CVE-2026-21956 affects Oracle VM VirtualBox (Core) with affected versions 7.1.14 and 7.2.4. It is described as an easily exploitable vulnerability that allows a high-privilege attacker with logon to the infrastructure where VirtualBox runs to compromise the VirtualBox instance, with potential tak...

CVE-2026-21957

This CVE concerns Oracle VM VirtualBox (Core) with affected versions 7.1.14 and 7.2.4. The issue is described as a high-privilege vulnerability that allows an attacker with logon to the host where VirtualBox runs to compromise/completely takeover VirtualBox. The base CVSS score is 7.5 (HIGH) with...

CVE-2026-21950

CVE-2026-21950 affects Oracle MySQL Server (component: Server: Optimizer) for MySQL 9.0.0–9.5.0. The vulnerability can be exploited by a low-privilege, network-authenticated attacker across multiple protocols to cause a hang or a complete denial of service (DOS). The base score is 6.5 (Availabili...

CVE-2026-21937

...

CVE-2026-21938

CVE-2026-21938 covers a vulnerability in Oracle PeopleSoft Enterprise PeopleTools (Portal component). Affected are Oracle PeopleSoft PeopleTools versions 8.60, 8.61, and 8.62. The flaw allows an unauthenticated attacker with network access over HTTP to compromise the system, with user interaction...

CVE-2026-21925

CVE-2026-21925 is an Oracle Java SE/GraalVM vulnerability with multiple related CVEs (21925, 21932, 21933, 21945) affecting Java 8u471+, 11.0.29+, 17.0.17, 21.0.9, 25.0.1 across RMI, AWT/JavaFX, Networking and Security components. Connected advisories confirm it is present in OpenJDK/OpenJDK-base...

CVE-2026-21923

Oracle Life Sciences Central Designer (Platform) 7.0.1.0 is affected. An unauthenticated attacker over HTTP can compromise the system, enabling unauthorized update/insert/delete and read access to some Central Designer data. The issue is described as easily exploitable, with CVSS v3.1 base score ...