19283 matches found
Improper Certificate Validation
Overview org.graalvm.sdk:graal-sdk is a high-performance JDK distribution designed to accelerate the execution of applications written in Java and other JVM languages along with support for JavaScript, Ruby, Python, and a number of other popular languages. Affected versions of this package are...
UBUNTU-CVE-2026-47247
libheif is a HEIF and AVIF file format decoder and encoder. Prior to version 1.22.0, two bugs in libheif chain to leak process heap memory as visible pixel values in decoded grid images. An attacker who uploads a crafted AVIF/HEIC file to any server-side image processor WordPress, Sharp/libvips,...
CVE-2026-62497
CVE-2026-62497 affects Oracle Flow Manufacturing (Oracle E-Business Suite) in versions 12.2.13–12.2.15. The vulnerability enables a low-privileged, network-accessible attacker (via HTTP) to compromise Oracle Flow Manufacturing, potentially leading to unauthorized creation, deletion, or modificati...
CVE-2026-62451
...
CVE-2026-61119
...
CVE-2026-61060
...
CVE-2026-61062
CVE-2026-61062 affects Oracle PeopleSoft Enterprise FIN Cash Management (Cash Management component) for the 9.2 release. The vulnerability is exploitable locally by a user with logon to the infrastructure where PeopleSoft runs, with low privileges, and can compromise the Cash Management component...
CVE-2026-61012
...
CVE-2026-60917
...
CVE-2026-60901
...
CVE-2026-60845
...
CVE-2026-60691
...
CVE-2026-60651
CVE-2026-60651 affects Oracle WebCenter Content (Web Content Management) in Oracle Fusion Middleware. Affected versions are 12.2.1.4.0 and 14.1.2.0.0. The vulnerability allows an unauthenticated, network-accessible attacker (via HTTP) to compromise WebCenter Content; exploitation requires user in...
CVE-2026-60611
...
CVE-2026-60357
...
CVE-2026-60327
...
CVE-2026-60299
CVE-2026-60299 affects Oracle Coherence (Core) within Oracle Fusion Middleware. Affected versions: 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. The vulnerability can be exploited by an unauthenticated attacker with network access via TCP to compromise Oracle Coherence, with potential takeover (CVSS 3....
CVE-2026-60245
CVE-2026-60245 affects Oracle Coherence (Core) in Oracle Fusion Middleware. Supported affected versions: 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. The vulnerability allows a low-privileged, logged-in attacker to compromise Oracle Coherence after user interaction, with potential impact i...