CVE-2026-60219

creationtimestamp| type| source ---|---|--- 2026-07-21 22:18:08+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6tmuxvf424 2026-07-23 16:48:29+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-07-26 05:07:07+00:00| seen|...

CVE-2026-60617

Vulnerability in the PeopleSoft Enterprise CS Campus Community product of Oracle PeopleSoft component: Security. The supported version that is affected is 9.2.38. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise CS...

CVE-2026-60336

Vulnerability in the Oracle Project Manufacturing product of Oracle E-Business Suite component: PJM Command Center. The supported version that is affected is V16. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Project Manufacturing...

CVE-2026-60199

creationtimestamp| type| source ---|---|--- 2026-07-21 22:14:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6tfpu7o32v 2026-07-23 16:47:42+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-07-29 18:37:07+00:00| seen|...

CVE-2026-47056

creationtimestamp| type| source ---|---|--- 2026-07-21 22:10:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6t6ksyuu2s 2026-07-22 16:15:08+00:00| seen| https://www.ncsc.nl/alerts/update-oracle-fusion-middleware-direct-vanwege-kritieke-kwetsbaarheden 2026-07-23...

CVE-2026-47040

creationtimestamp| type| source ---|---|--- 2026-07-21 22:10:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6t6j27mf2v 2026-07-23 16:46:30+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...

CVE-2026-35290

creationtimestamp| type| source ---|---|--- 2026-07-21 22:02:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6sq7map423 2026-07-23 16:45:02+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-07-26 09:37:06+00:00| seen|...

CVE-2026-65056

creationtimestamp| type| source ---|---|--- 2026-07-21 22:00:29+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mr6sndhdj22o 2026-07-21 22:27:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr6u6ar5mx2g...

CVE-2026-8982

creationtimestamp| type| source ---|---|--- 2026-07-21 22:00:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6smnnedl2e 2026-07-21 22:42:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr6uxxgmvf23...

EUVD-2026-46370

Data::Deque::Shared versions before 0.06 for Perl create a world-readable mmap backing file and open it without OEXCL or ONOFOLLOW. The segment is created in deque.h with openpath, ORDWR|OCREAT, 0666. The mode is 0666, so under the default umask 022 the file is created mode 0644 world-readable...

CVE-2026-65315 Ollama Remote Denial of Service via Attacker-Controlled Allocation in GGUF Metadata Parser

Ollama HEAD f0078ae contains an uncontrolled memory allocation vulnerability in the GGUF metadata parser that allows remote attackers to crash the server by supplying a crafted GGUF file with attacker-controlled length and count fields in string lengths, tensor dimension counts, and metadata arra...

CVE-2026-47237

Kubeflow Community Distribution helps users to install Kubeflow Platform in popular Kubernetes clusters. Prior to version 26.03-rc.1, a Kubeflow setup based on the official manifests or most other packaged Kubeflow distributions is vulnerable to authorization token stealing from any user of the...

CVE-2026-16394

creationtimestamp| type| source ---|---|--- 2026-07-21 20:56:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6p2bgfsq2q 2026-07-22 04:47:20+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260722 2026-07-23 05:37:06+00:00| see...

CVE-2026-16359

creationtimestamp| type| source ---|---|--- 2026-07-21 20:56:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6p27frgc24 2026-07-22 04:45:58+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260722 2026-07-22 09:40:04+00:00| see...

CVE-2026-47237 Kubeflow Community Distribution: Overly Permissive Istio Permissions Allows Kubeflow Authorization Token Stealing

Kubeflow Community Distribution helps users to install Kubeflow Platform in popular Kubernetes clusters. Prior to version 26.03-rc.1, a Kubeflow setup based on the official manifests or most other packaged Kubeflow distributions is vulnerable to authorization token stealing from any user of the...

CVE-2026-47237 Kubeflow Community Distribution: Overly Permissive Istio Permissions Allows Kubeflow Authorization Token Stealing

Kubeflow Community Distribution helps users to install Kubeflow Platform in popular Kubernetes clusters. Prior to version 26.03-rc.1, a Kubeflow setup based on the official manifests or most other packaged Kubeflow distributions is vulnerable to authorization token stealing from any user of the...

Improper Authentication

Overview Affected versions of this package are vulnerable to Improper Authentication via the CreateAccessToken process. An attacker can gain elevated privileges by supplying a restricted token in the Authorization: Basic :x-oauth-basic format, which bypasses authentication checks and allows...

GHSA-683J-3FF6-HH2X Gitea: Privilege Escalation via Access Token Scope Escalation in API

Gitea's API endpoint for creating Personal Access Tokens POST /users/username/tokens is protected by a middleware reqBasicOrRevProxyAuth that is intended to require password-based authentication, preventing a compromised token from being used to mint new ones. However, when a token is passed in t...

Gitea: Privilege Escalation via Access Token Scope Escalation in API

Gitea's API endpoint for creating Personal Access Tokens POST /users/username/tokens is protected by a middleware reqBasicOrRevProxyAuth that is intended to require password-based authentication, preventing a compromised token from being used to mint new ones. However, when a token is passed in t...

CVE-2026-64613

Data::Buffer::Shared versions before 0.05 for Perl create a world-readable mmap backing file and open it without ONOFOLLOW. The segment is created in bufgeneric.h with openpath, ORDWR|OCREAT|OEXCL, 0666. OEXCL blocks a pre-seeded file on create, but the mode is 0666, so under the default umask 02...