5701 matches found
GHSA-6P8H-3WGX-97GF vulnerabilities
Vulnerabilities for packages: mlflow...
Linux Distros Unpatched Vulnerability : CVE-2026-18016
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient policy enforcement in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted...
CVE-2026-33930
Apache Traffic Server copies the client Host header into a fixed-size stack buffer without a bound during redirect handling, so an over-long Host header overflows the stack when redirect following is enabled. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.9, from 9.0.0 through...
Important: Red Hat Security Advisory: libreswan security update
An update for libreswan is now available for Fast Datapath for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
CVE-2026-65623 Quadratic CPU blow-up reassembling fragmented WebSocket messages in Bandit
Inefficient Algorithmic Complexity vulnerability in mtrudel bandit allows unauthenticated remote denial of service via CPU exhaustion during WebSocket fragment reassembly. The size guard 'Elixir.Bandit.WebSocket.Connection':oversizemessage?/2 called from handleframe/3 in...
Security Bulletin: Apache Lucene PRISMA-2021-0081 X-Force 216835 security vulnerability
Summary Apache Lucene PRISMA-2021-0081 X-Force 216835 security vulnerability in FileNet Content Manager FNCM / IBM Content CortexCCx Content Search Services CSS/Enterprise Content Management Text Search ECMTS. CSS/ECMTS is affected and is potentially vulnerable. Vulnerability Details Refer to the...
CVE-2026-65591
n8n contains a sanitizer bypass vulnerability in the legacy expression evaluator's computed-member handler. An authenticated user with workflow create or modify permissions can craft a malicious expression to bypass the sanitizer and achieve host-level code execution as the n8n process. The legac...
CVE-2026-62487
CVE-2026-62487 affects Oracle Contracts Integration in Oracle E-Business Suite (12.2.3–12.2.15). An unauthenticated, network-accessible via HTTP attacker can exploit with required user interaction to cause unauthorized updates/deletes and reads of Oracle Contracts Integration data. CVSS 3.1 base ...
CVE-2026-61144
...
CVE-2026-61100
...
CVE-2026-61082
...
CVE-2026-61014
CVE-2026-61014 affects Oracle Inventory Management in Oracle E-Business Suite (component: Internal Operations). Affected versions are 12.2.3–12.2.15. The vulnerability is exploitable by a low-privileged attacker with network access via HTTP, targeting Oracle Inventory Management and potentially i...
CVE-2026-60871
CVE-2026-60871 affects Oracle E-Business Suite Risk Management (Internal Operations) for versions 12.2.3–12.2.15. A low-privilege, network-accessible attacker via HTTP can compromise Oracle Risk Management, potentially enabling unauthorized create/delete/modify access to data or complete access t...
CVE-2026-60687
...
CVE-2026-60403
CVE-2026-60403 affects Oracle TimesTen In-Memory Database (Kubernetes Operator component) with vulnerable version 26.1.1.1.0. An attacker with network access over HTTPS and low privileges can cause the database to hang or crash (DoS). CVSS 3.1 base score 6.5 (A:H; AV:N; AC:L; PR:L). No explicit e...
CVE-2026-60302
...
CVE-2026-60289
...
CVE-2026-60170
...