718767 matches found
vulnerabilities present in Oracle E-Business Suite
Oracle has identified 194 vulnerabilities in the Oracle E-Business Suite and related components, specifically for versions 12.2.3 through 12.2.15. Depending on the specific vulnerability, these can be exploited by an attacker with network access to obtain unauthorized access to data, or to modify...
CVE-2026-84748 Apache bRPC: Builtin services reachable from the public port via protobuf protocols despite ServerOptions.internal_port configuration
Improper authorization in Apache bRPC versions 1.18.0 on all platforms allows remote attackers to access builtin services through the public port. Root Cause: ServerOptions.internalport is documented to make builtin services and Tabbed services reachable only from the internal port, and the HTTP/...
CVE-2026-84748
Apache bRPC (versions
CVE-2026-84748 Apache bRPC: Builtin services reachable from the public port via protobuf protocols despite ServerOptions.internal_port configuration
Improper authorization in Apache bRPC versions 1.18.0 on all platforms allows remote attackers to access builtin services through the public port. Root Cause: ServerOptions.internalport is documented to make builtin services and Tabbed services reachable only from the internal port, and the HTTP/...
EUVD-2026-107224
Improper authorization in Apache bRPC versions 1.18.0 on all platforms allows remote attackers to access builtin services through the public port. Root Cause: ServerOptions.internalport is documented to make builtin services and Tabbed services reachable only from the internal port, and the HTTP/...
CVE-2026-84747 Apache bRPC: Access Control Bypass via HTTP Request Paths Containing Empty Path Segments
Interpretation conflict in the HTTP protocol implementation in Apache bRPC version 1.18.0 on all platforms allows remote attackers to bypass access control rules enforced by a front proxy. Root Cause: The method dispatch function FindMethodPropertyByURI in bRPC's HTTP protocol splits the request...
CVE-2026-84747
Apache bRPC (versions
CVE-2026-84747 Apache bRPC: Access Control Bypass via HTTP Request Paths Containing Empty Path Segments
Interpretation conflict in the HTTP protocol implementation in Apache bRPC version 1.18.0 on all platforms allows remote attackers to bypass access control rules enforced by a front proxy. Root Cause: The method dispatch function FindMethodPropertyByURI in bRPC's HTTP protocol splits the request...
EUVD-2026-107223
Interpretation conflict in the HTTP protocol implementation in Apache bRPC version 1.18.0 on all platforms allows remote attackers to bypass access control rules enforced by a front proxy. Root Cause: The method dispatch function FindMethodPropertyByURI in bRPC's HTTP protocol splits the request...
Security Bulletin: SOAR App Host is vulnerable to using components with known vulnerabilities (CVE-2026-61308, CVE-2026-70907, CVE-2026-60589)
Summary The product includes vulnerable components e.g., framework libraries that may be identified and exploited with automated tools. SOAR APP host has addressed the applicable CVEs with an update. Vulnerability Details CVEID:CVE-2026-61308 DESCRIPTION: Difficult to exploit vulnerability allows...
CLSA-2026-1792238729 gstreamer1-plugins-good: Fix of 4 CVEs
CVE-2026-73433: avidemux: fix unsigned integer underflow and out-of-bounds access when parsing FUJIFILM metadata in strd chunks - CVE-2026-73434: avidemux: fix out-of-bounds read by using the correct divisor when counting vprp video field descriptors...
Security update for libheif
This update for libheif fixes the following issues: CVE-2026-84449: hOpRGB2432toYCbCr Memory Access Error / SEGV bsc1281829. Out-of-bounds read and write in derived-item and pixel-plane handling bsc1279444. Patch Instructions: To install this SUSE update use the SUSE recommended installation...
Exploit for CVE-2026-91858
CVE-2026-91858 — camel-fop: XML External Entity XXE via a th...
Vulnerabilities in Oracle PeopleSoft Enterprise
Oracle has identified new vulnerabilities in Oracle PeopleSoft Enterprise. These vulnerabilities relate to various security risks, including unauthorized access to data, unauthorized modification of data, and disruption of system availability denial-of-service attacks. Depending on the specific...
CVE-2026-96405 Aggregate DNS name chained pointer decompression work leads to degradation of service.
NLnet Labs Unbound up to and including version 1.26.1 limits compression-pointer traversal for each individual domain-name operation but has no aggregate inbound decompression-work budget. Many chained compression pointers in a message results in a lot of CPU usage following them. A malicious act...
BIT-MYSQL-CLIENT-2026-85985 MariaDB: Unauthorized file access via CONNECT engine UDFs
MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the CONNECT engine plugin file-access UDFs jsonfile, bsonfile, jfilemake, bfilemake, and jbinfile are affected because each does not enforce FILE privilege or th...
BIT-MARIADB-MIN-2026-85985 MariaDB: Unauthorized file access via CONNECT engine UDFs
MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the CONNECT engine plugin file-access UDFs jsonfile, bsonfile, jfilemake, bfilemake, and jbinfile are affected because each does not enforce FILE privilege or th...
BIT-MARIADB-2026-85985 MariaDB: Unauthorized file access via CONNECT engine UDFs
MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the CONNECT engine plugin file-access UDFs jsonfile, bsonfile, jfilemake, bfilemake, and jbinfile are affected because each does not enforce FILE privilege or th...
EUVD-2026-107141
The CMP – Coming Soon & Maintenance WordPress plugin before 4.1.21 does not correctly apply maintenance mode to pages added to its page whitelist by manually entered URL pattern, allowing unauthenticated visitors to view the content of those pages while maintenance mode is active...
CLSA-2026-1773872435 Fix of 137 CVEs
Miscellaneous Ubuntu changes - update-from-bionic-master repo has been updated Miscellaneous upstream changes - debian: add control and changeg files Ubuntu: 4.15.0-254.265 CVE-2023-53515 - virtio-mmio: don't break lifecycle of vmdev CVE-2023-53515 CVE-2025-39967 - fbcon: fix integer overflow in...