PT-2026-78052

Name of the Vulnerable Software and Affected Versions Oracle Database Server versions 19.3 through 19.32 Oracle Database Server versions 21.3 through 21.23 Oracle Database Server versions 23.4.0 through 23.26.3 Description A flaw exists in the Portable Clusterware component. An unauthenticated...

PT-2026-77400

Name of the Vulnerable Software and Affected Versions Oracle Unified Directory versions 12.2.1.4.0 Oracle Unified Directory versions 14.1.2.1.0 Description A flaw in the OUD Core component of Oracle Fusion Middleware allows a low privileged attacker with network access via LDAP to compromise the...

PT-2026-77468

Name of the Vulnerable Software and Affected Versions Oracle WebCenter Sites version 12.2.1.4.0 Oracle WebCenter Sites version 14.1.2.0.0 Description A flaw in the Oracle WebCenter Sites component of Oracle Fusion Middleware allows a low privileged attacker with network access via HTTP to...

Linux Distros Unpatched Vulnerability : CVE-2026-68230

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: amlogic-c3: Add validations for ae and awb config Avoid invalid memory access if the zonesnum is bigger than zoneweight. This patch fixes the following...

CVE-2026-68230

A flaw was found in the Linux kernel's media: amlogic-c3 driver. This vulnerability arises from improper validation of automatic white balance AWB and automatic exposure AE configuration parameters. Specifically, the driver does not correctly check the number of zones against the allocated memory...

CVE-2026-68230

In the Linux kernel, the following vulnerability has been resolved: media: amlogic-c3: Add validations for ae and awb config Avoid invalid memory access if the zonesnum is bigger than zoneweight. This patch fixes the following smatch errors: drivers/media/platform/amlogic/c3/isp/c3-isp-params.c:1...

CVE-2026-68230

CVE-2026-68230 affects the Linux kernel media: amlogic-c3 driver. The vulnerability stems from improper validation of AWB/AE configuration, failing to ensure zones_num does not exceed allocated memory for zone weights, leading to potential invalid memory access and buffer overflow. Multiple sourc...

CVE-2026-68230 media: amlogic-c3: Add validations for ae and awb config

In the Linux kernel, the following vulnerability has been resolved: media: amlogic-c3: Add validations for ae and awb config Avoid invalid memory access if the zonesnum is bigger than zoneweight. This patch fixes the following smatch errors: drivers/media/platform/amlogic/c3/isp/c3-isp-params.c:1...

EUVD-2026-55331

In the Linux kernel, the following vulnerability has been resolved: media: amlogic-c3: Add validations for ae and awb config Avoid invalid memory access if the zonesnum is bigger than zoneweight. This patch fixes the following smatch errors: drivers/media/platform/amlogic/c3/isp/c3-isp-params.c:1...

CVE-2026-68230 media: amlogic-c3: Add validations for ae and awb config

In the Linux kernel, the following vulnerability has been resolved: media: amlogic-c3: Add validations for ae and awb config Avoid invalid memory access if the zonesnum is bigger than zoneweight. This patch fixes the following smatch errors: drivers/media/platform/amlogic/c3/isp/c3-isp-params.c:1...

Astra Linux – Vulnerability in Botan

Botan is a C++ cryptography library. Starting from version 2.3.0 and before version 3.11.0, during SM2 decryption, the code responsible for checking the authentication code value C3 failed to verify that the encoded value had the expected length before comparison. An invalid ciphertext could lead...

The vulnerability of the functions __ioam6_fillTraceData() and ioam6_fillTraceData() in the net/ipv6/ioam6.c module of the Linux operating system’s kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the functions ioam6fillTraceData and ioam6fillTraceData in the net/ipv6/ioam6.c module of the Linux operating system is related to integer overflow. Exploitation of this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibilit...

PYSEC-2026-2244

OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems. From version 6.7.0 to before version 7.0.0-rc3, a SQL injection vulnerability exists in the Time-Series Database TSDB component of COSMOS. The tsdblookup function in the...

CVE-2026-42146

CImg Library is a C++ library for image processing. Prior to commit c3aacf5, the nbcolors field read from the BMP file header is used directly to compute an allocation size without validating it against the remaining file size. A crafted BMP file with a large nbcolors value triggers an...

UBUNTU-CVE-2026-42146

CImg Library is a C++ library for image processing. Prior to commit c3aacf5, the nbcolors field read from the BMP file header is used directly to compute an allocation size without validating it against the remaining file size. A crafted BMP file with a large nbcolors value triggers an...

CVE-2026-42087 OpenC3 COSMOS: SQL Injection in QuestDB Time-Series Data Base

OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems. From version 6.7.0 to before version 7.0.0-rc3, a SQL injection vulnerability exists in the Time-Series Database TSDB component of COSMOS. The tsdblookup function in the...

EUVD-2026-27057

OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems. Prior to versions 6.10.5 and 7.0.0-rc3, the OpenC3 password change functionality allows a user to change their password without providing the old password, by accepting a valid...

OpenC3 COSMOS: Hijacked session token can be used to reset password for persistence

Summary The OpenC3 password change functionality allows a user to change their password without providing the old password, by accepting a valid session token instead. In assumed breach scenarios, this behaviour can be exploited by an attacker who has already obtained a valid session token, to ga...

CVE-2026-42085

creationtimestamp| type| source ---|---|--- 2026-04-20 03:10:27+00:00| published-proof-of-concept| https://github.com/OpenC3/cosmos/security/advisories/GHSA-4jvx-93h3-f45h...

CVE-2026-32877

Botan is a C++ cryptography library. From version 2.3.0 to before version 3.11.0, during SM2 decryption, the code that checked the authentication code value C3 failed to check that the encoded value was of the expected length prior to comparison. An invalid ciphertext can cause a heap over-read o...