CVE-2026-60658

CVE-2026-60658 is an Oracle WebCenter Content (Content Server) vulnerability in Oracle Fusion Middleware. Affected versions are 12.2.1.4.0 and 14.1.2.0.0. The issue allows an unauthenticated attacker with network access over HTTP to compromise WebCenter Content, with user interaction required. Su...

CVE-2026-60489

CVE-2026-60489 affects Oracle JD Edwards EnterpriseOne CRM Foundation (component: CRM Foundation), with the affected product version stated as 9.2. The vulnerability is exploitable over a network via HTTP by a low-privileged attacker, and successful exploitation can lead to takeover of JD Edwards...

CVE-2026-60490

...

CVE-2026-60354

...

CVE-2026-60332

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Group Replication GCS. Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Difficult to exploit vulnerability allows...

CVE-2026-47056

...

CVE-2026-47039

CVE-2026-47039 affects the Java VM component of Oracle Database Server. Affects Oracle Database Server Java VM in versions 19.3–19.31, 21.3–21.22, and 23.4.0–23.26.2. The vulnerability allows a low-privilege attacker with Create Session and network access via Oracle Net to compromise the Java VM,...

CVE-2026-47017

...

CVE-2026-46985

CVE-2026-46985 concerns Oracle Enterprise Manager Base Platform, specifically the Agent Next Gen component, with affected versions 13.5 and 24.1. The vulnerability allows an unauthenticated attacker with network access over HTTPS to read a subset of data, per CVSS 3.1 base score 5.3 (Confidential...

DEBIAN-CVE-2026-45383

libde265 is an open source implementation of the h.265 video codec. Versions prior to 1.0.19 have a heap buffer overflow out-of-bounds READ exists in decodercontext::decodesliceunitWPP in libde265/decctx.cc. When decoding a WPP Wavefront Parallel Processing HEVC slice, ctbAddrRS is computed as...

DEBIAN-CVE-2026-16357

Incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13...

ROOT-APP-NPM-CVE-2023-37466 CVE-2023-37466 in @rootio/vm2 - Patched by Root

Root has patched CVE-2023-37466 in the @rootio/vm2 package for Root:npm. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2025-12863 CVE-2025-12863 in rootio-libxml2 - Patched by Root

Root has patched CVE-2025-12863 in the rootio-libxml2 package for Root:Debian:13. Multiple fixed versions available...

CVE-2026-63771

creationtimestamp| type| source ---|---|--- 2026-07-21 09:10:17+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mr5hm4swxy2o...

CLEANSTART-2026-UM67329 Security fixes for CVE-2025-61729, CVE-2026-27140, CVE-2026-27143, CVE-2026-27144, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32288, CVE-2026-32289, CVE-2026-33186, CVE-2026-33810, CVE-2026-33811, CVE-2026-33814, CVE-2026-39820, CVE-2026-39822, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501, CVE-2026-42505, CVE-2026-56852, ghsa-p77j-4mvh-x3m3 applied in versions: 0.9.2-r0, 1.0.1-r0, 1.1.0-r0

Multiple security vulnerabilities affect the kube-vip package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-59776

Missing Cryptographic Step CWE-325 vulnerability exists in certain FeliCa IC chips shipped in or before 2017. If the vulnerability is exploited, information stored in the IC chip may be read or tampered with...

PT-2026-62961

Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft PeopleSoft Enterprise FIN Common Objects Brazil version 9.1 Description A flaw in the Purchasing component allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful exploitation can...

PT-2026-63106

Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft PeopleSoft Enterprise FIN Common Objects Argentina version 9.1 Description An issue exists in the Integration component that allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful...

PT-2026-62962

Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft PeopleSoft Enterprise FIN Common Objects Brazil version 9.1 Description A flaw in the eProcurement component allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful exploitation ca...

PT-2026-63110

Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft PeopleSoft Enterprise FIN Common Objects Argentina version 9.1 Description A flaw in the Staffing component allows a low privileged attacker with network access via HTTP to compromise the system. Successful exploitation can...