CVE-2026-60740

Vulnerability in the Oracle Cash Management product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Cash Management...

CVE-2026-60219

creationtimestamp| type| source ---|---|--- 2026-07-21 22:18:08+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6tmuxvf424 2026-07-23 16:48:29+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-07-26 05:07:07+00:00| seen|...

CVE-2026-60617

Vulnerability in the PeopleSoft Enterprise CS Campus Community product of Oracle PeopleSoft component: Security. The supported version that is affected is 9.2.38. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise CS...

CVE-2026-60336

Vulnerability in the Oracle Project Manufacturing product of Oracle E-Business Suite component: PJM Command Center. The supported version that is affected is V16. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Project Manufacturing...

CVE-2026-60199

creationtimestamp| type| source ---|---|--- 2026-07-21 22:14:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6tfpu7o32v 2026-07-23 16:47:42+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-07-29 18:37:07+00:00| seen|...

CVE-2026-47056

creationtimestamp| type| source ---|---|--- 2026-07-21 22:10:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6t6ksyuu2s 2026-07-22 16:15:08+00:00| seen| https://www.ncsc.nl/alerts/update-oracle-fusion-middleware-direct-vanwege-kritieke-kwetsbaarheden 2026-07-23...

CVE-2026-47040

creationtimestamp| type| source ---|---|--- 2026-07-21 22:10:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6t6j27mf2v 2026-07-23 16:46:30+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...

CVE-2026-35290

creationtimestamp| type| source ---|---|--- 2026-07-21 22:02:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6sq7map423 2026-07-23 16:45:02+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-07-26 09:37:06+00:00| seen|...

CVE-2026-65056

creationtimestamp| type| source ---|---|--- 2026-07-21 22:00:29+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mr6sndhdj22o 2026-07-21 22:27:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr6u6ar5mx2g...

CVE-2026-8982

creationtimestamp| type| source ---|---|--- 2026-07-21 22:00:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6smnnedl2e 2026-07-21 22:42:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr6uxxgmvf23...

EUVD-2026-46370

Data::Deque::Shared versions before 0.06 for Perl create a world-readable mmap backing file and open it without OEXCL or ONOFOLLOW. The segment is created in deque.h with openpath, ORDWR|OCREAT, 0666. The mode is 0666, so under the default umask 022 the file is created mode 0644 world-readable...

CVE-2026-65315 Ollama Remote Denial of Service via Attacker-Controlled Allocation in GGUF Metadata Parser

Ollama HEAD f0078ae contains an uncontrolled memory allocation vulnerability in the GGUF metadata parser that allows remote attackers to crash the server by supplying a crafted GGUF file with attacker-controlled length and count fields in string lengths, tensor dimension counts, and metadata arra...

CVE-2026-47237

Kubeflow Community Distribution helps users to install Kubeflow Platform in popular Kubernetes clusters. Prior to version 26.03-rc.1, a Kubeflow setup based on the official manifests or most other packaged Kubeflow distributions is vulnerable to authorization token stealing from any user of the...

CVE-2026-16394

creationtimestamp| type| source ---|---|--- 2026-07-21 20:56:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6p2bgfsq2q 2026-07-22 04:47:20+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260722 2026-07-23 05:37:06+00:00| see...

CVE-2026-16359

creationtimestamp| type| source ---|---|--- 2026-07-21 20:56:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6p27frgc24 2026-07-22 04:45:58+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260722 2026-07-22 09:40:04+00:00| see...

CVE-2026-47237 Kubeflow Community Distribution: Overly Permissive Istio Permissions Allows Kubeflow Authorization Token Stealing

Kubeflow Community Distribution helps users to install Kubeflow Platform in popular Kubernetes clusters. Prior to version 26.03-rc.1, a Kubeflow setup based on the official manifests or most other packaged Kubeflow distributions is vulnerable to authorization token stealing from any user of the...

CVE-2026-47237 Kubeflow Community Distribution: Overly Permissive Istio Permissions Allows Kubeflow Authorization Token Stealing

Kubeflow Community Distribution helps users to install Kubeflow Platform in popular Kubernetes clusters. Prior to version 26.03-rc.1, a Kubeflow setup based on the official manifests or most other packaged Kubeflow distributions is vulnerable to authorization token stealing from any user of the...

Gitea: Privilege Escalation via Access Token Scope Escalation in API

Gitea's API endpoint for creating Personal Access Tokens POST /users/username/tokens is protected by a middleware reqBasicOrRevProxyAuth that is intended to require password-based authentication, preventing a compromised token from being used to mint new ones. However, when a token is passed in t...

GHSA-683J-3FF6-HH2X Gitea: Privilege Escalation via Access Token Scope Escalation in API

Gitea's API endpoint for creating Personal Access Tokens POST /users/username/tokens is protected by a middleware reqBasicOrRevProxyAuth that is intended to require password-based authentication, preventing a compromised token from being used to mint new ones. However, when a token is passed in t...

Improper Authentication

Overview Affected versions of this package are vulnerable to Improper Authentication via the CreateAccessToken process. An attacker can gain elevated privileges by supplying a restricted token in the Authorization: Basic :x-oauth-basic format, which bypasses authentication checks and allows...