CVE-2026-44883

creationtimestamp| type| source ---|---|--- 2026-07-22 20:53:03+00:00| seen| https://bsky.app/profile/smit-artem.bsky.social/post/3mrb7dnrzgs2m...

gnutls: GnuTLS: Policy bypass due to case-sensitive nameConstraints comparison

A flaw was found in gnutls. This vulnerability occurs because gnutls performs case-sensitive comparisons of nameConstraints labels, specifically for dNSName DNS or rfc822Name email constraints within excludedSubtrees or permittedSubtrees. A remote attacker can exploit this by crafting a leaf...

tomcat-catalina: Apache Tomcat: Improper Handling of Case Sensitivity in LockOutRealm

In Apache Tomcat, LockOutRealm mishandled case sensitivity in usernames, resulting in less effective blocking of brute force attacks...

tomcat-catalina: Apache Tomcat: Improper Handling of Case Sensitivity in LockOutRealm

In Apache Tomcat, LockOutRealm mishandled case sensitivity in usernames, resulting in less effective blocking of brute force attacks...

OPENSUSE-SU-2026:21410-1 Security update for glib2

This update for glib2 fixes the following issues: - CVE-2026-58010: error during gvstupleisnormal alignment validation could cause a 1-byte out-of-bounds read bsc1270009. - CVE-2026-58011: invalid GDateTime in gdatetimegetymd could trigger a 2-byte out-of-bounds read bsc1270010. - CVE-2026-58012:...

CVE-2026-16362

creationtimestamp| type| source ---|---|--- 2026-07-22 04:46:05+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260722 2026-07-24 00:01:17+00:00| seen| https://bsky.app/profile/slackers.it/post/3mre2d7gb272o...

CVE-2026-62497

creationtimestamp| type| source ---|---|--- 2026-07-22 01:37:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr76r25iy52x 2026-07-23 18:20:23+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-07-31 22:37:06+00:00| seen|...

CVE-2026-62574

CVE-2026-62574 affects Oracle Java SE and GraalVM variants. Affected: Oracle Java SE 8u491, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK 17.0.19 and 21.0.11; Oracle GraalVM Enterprise Edition 21.3.18. Vulnerability described as easily exploitable with a low-privileged, local ...

CVE-2026-62504

The CVE-2026-62504 entry concerns Oracle Time and Labor within Oracle E-Business Suite. Affected versions are 12.2.3–12.2.15, and the vulnerability affects the Internal Operations component. An attacker with low privileges who can reach the system over HTTP can potentially compromise Oracle Time ...

CVE-2026-61170

CVE-2026-61170 affects Oracle Agile PLM 9.3.6 (Oracle Supply Chain, component: Security). The description states an unauthenticated attacker with network access via HTTP can compromise Oracle Agile PLM, potentially taking over the system. CVSS 3.1 base score 8.1 (HIGH) with network attack vector,...

CVE-2026-61162

...

CVE-2026-61157

The CVE-2026-61157 entry concerns Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Experience Manager) for version 11.4.0. The vulnerability is exploitable over HTTP by an unauthenticated attacker with network access, potentially leading to unauthorized access to con...

CVE-2026-61143

CVE-2026-61143 affects Oracle Communications Convergent Charging Controller, Prov IF, in versions 15.0.0.0.0 and 15.2.0.0.0. The vulnerability is exploitable with network access over HTTP by a high-privilege attacker and requires user interaction; successful exploitation could lead to takeover of...

CVE-2026-61145

...

CVE-2026-61132

...

CVE-2026-61120

...

CVE-2026-61077

CVE-2026-61077 affects Oracle PeopleSoft SCM Mobile Inventory Management (component: Security) in version 9.2. The published description indicates a vulnerability accessible to a low-privileged attacker with logon to the infrastructure hosting PeopleSoft SCM Mobile Inventory Management, potential...

CVE-2026-61068

...

CVE-2026-60520

...

CVE-2026-60443

CVE-2026-60443 affects Oracle WebCenter Content (Content Server) in Oracle Fusion Middleware. Affected versions: 12.2.1.4.0 and 14.1.2.0.0. It is exploitable with network access via HTTP by a low-privilege user and requires user interaction. Successful attacks can lead to unauthorized creation/de...