2626 matches found
CVE-2023-31273
creationtimestamp| type| source ---|---|--- 2026-07-26 02:02:18+00:00| seen| https://t.me/EchelonEyes/2194 2026-07-27 00:00:55+00:00| seen| https://t.me/EchelonEyes/2194 2026-07-28 00:00:31+00:00| seen| https://t.me/EchelonEyes/2194...
DEBIAN-CVE-2026-64509
In the Linux kernel, the following vulnerability has been resolved: rust: block: fix GenDisk cleanup paths GenDiskBuilder::build still has fallible work after blkmqallocdisk, but its error path only recovers the foreign queue data. That leaks the temporary gendisk and requestqueue until later...
DEBIAN-CVE-2026-64429
In the Linux kernel, the following vulnerability has been resolved: gpio: eic-sprd: use rawspinlockt in the irq startup path sprdeicirqunmask enables the GPIO IRQ and then updates controller state through sprdeicupdate, which takes sprdeic-lock with spinlockirqsave. The callback can be reached fr...
DEBIAN-CVE-2026-64326
In the Linux kernel, the following vulnerability has been resolved: block: skip syncblockdev on surprise removal in bdevmarkdead bdevmarkdead's @surprise == true means the device is already gone. The filesystem callback fsbdevmarkdead honours this and skips syncfilesystem, but the bare block devi...
CVE-2026-64321
In the Linux kernel, the following vulnerability has been resolved: nvme: target: rdma: fix ndev refcount leak on queue connect nvmetrdmaqueueconnect calls nvmetrdmafindgetdevice which acquires a reference on the returned ndev via krefget. On the path where the host queue backlog is exceeded and...
CVE-2026-61338
creationtimestamp| type| source ---|---|--- 2026-07-23 18:19:37+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...
CVE-2026-60426
creationtimestamp| type| source ---|---|--- 2026-07-23 17:16:15+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...
DEBIAN-CVE-2026-65914
DOMPurify before 3.3.2 contains a mutation-XSS vulnerability when sanitized HTML is reinserted into special parsing contexts using innerHTML with wrappers like script, xmp, iframe, noembed, noframes, or noscript. Attackers can craft payloads with closing sequences that break out of the wrapper...
SUSE CVE-2026-47030
unknown...
DEBIAN-CVE-2026-41637
In NLnet Labs Unbound 1.22.0 up to and including 1.25.1, client terminated DNS-over-QUIC DoQ queries are not accounted properly by Unbound resulting in low-cost inflation of the waiting number of replies for already in-flight resolution queries. This results in degradation of resolution service f...
CVE-2026-61312
...
CVE-2026-61145
CVE-2026-61145 affects Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Content Acquisition System) in version 11.4.0. An unauthenticated attacker with network access via HTTP can compromise these components, potentially taking over the Guided Search/Experience Manag...
CVE-2026-60832
CVE-2026-60832 affects Oracle Interaction Blending (Oracle E-Business Suite, Internal Operations) in versions 12.2.3–12.2.15. The vulnerability can be exploited by a high-privilege attacker over a network via RMI, potentially allowing unauthorized update/insert/delete and read access to Oracle In...
CVE-2026-60784
CVE-2026-60784 affects Oracle E-Business Suite, Oracle Trading Community, Party Search UI. Affected versions are 12.2.3–12.2.15. The vulnerability enables a low-privilege attacker with network access via HTTP to compromise Oracle Trading Community, potentially causing unauthorized creation, delet...
CVE-2026-60683
CVE-2026-60683 affects Oracle E-Business Suite’s Oracle Process Manufacturing Regulatory Management (Internal Operations) with affected versions 12.2.3 through 12.2.15. The issue allows a low-privilege, unauthenticated or network-reachable attacker to compromise the Regulatory Management module v...
CVE-2026-60665
...
CVE-2026-60658
CVE-2026-60658 is an Oracle WebCenter Content (Content Server) vulnerability in Oracle Fusion Middleware. Affected versions are 12.2.1.4.0 and 14.1.2.0.0. The issue allows an unauthenticated attacker with network access over HTTP to compromise WebCenter Content, with user interaction required. Su...
CVE-2026-60489
CVE-2026-60489 affects Oracle JD Edwards EnterpriseOne CRM Foundation (component: CRM Foundation), with the affected product version stated as 9.2. The vulnerability is exploitable over a network via HTTP by a low-privileged attacker, and successful exploitation can lead to takeover of JD Edwards...