DEBIAN-CVE-2026-22008

Vulnerability in Oracle Java SE component: Libraries. The supported version that is affected is Oracle Java SE: 25.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attacks of this...

The vulnerability of the command-line interface of Cisco ThousandEyes Enterprise Agent allows a attacker to compromise data integrity.

The vulnerability of the command-line interface of Cisco ThousandEyes Enterprise Agent software relates to the improper definition of symbolic links during access to the file. Exploiting this vulnerability can allow an attacker to compromise data integrity...

CVE-2026-35554

A flaw was found in the Apache Kafka Java producer client. A race condition in the client's buffer pool management can cause messages to be silently delivered to incorrect topics. This occurs when a message batch expires while its network request is still active, leading to premature buffer...

The vulnerability of the strlen() function in thejq programming language allows attackers to influence the integrity and accessibility of the protected information.

The vulnerability of the strlen function in thejq programming language is related to errors that occur when a string or array is terminated with a NULL character. Exploiting this vulnerability can allow an attacker to influence the integrity and accessibility of the protected information...

The vulnerability of the graphical user interface of the network access control device FortiNAC-F allows a perpetrator to compromise the integrity of the protected information.

The vulnerability of the graphical user interface of the FortiNAC-F network access control device lies in the redirection of URLs to an unreliable website using a specially created CSV file. Exploiting this vulnerability allows a remote attacker to compromise the integrity of the protected...

The vulnerability of the Mattermost instant messaging application, related to synchronization errors when using a shared resource (“Race Situation”), allows a violator to compromise the confidentiality and integrity of the protected information.

The vulnerability of the Mattermost instant messaging application is related to synchronization errors when using a shared resource “Race Situation”. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality and integrity of the protected information...

The vulnerability of the CUPS printing server stems from incorrect restrictions on the path to the directory, allowing attackers to compromise the integrity and accessibility of the protected information.

The vulnerability of the CUPS printing server is related to an incorrect restriction on the path to the directory during the processing of the notify-recipient-uri parameter. Exploiting this vulnerability allows a malicious actor to compromise the integrity and accessibility of the protected...

ROS-20260420-73-0010

A vulnerability in the crypto/modes/ocb128.c component of the OpenSSL TLS and SSL protocols toolkit is related to the lack of a required encryption step. Exploitation of the vulnerability could allow an attacker to gain access to confidential data and compromise its integrity...

ruby: XML round-trip vulnerability in REXML

A flaw was found in the way the Ruby REXML library parsed XML documents. Parsing a specially crafted XML document using REXML and writing parsed data back to a new XML document results in creating a document with a different structure. This issue could affect the integrity of processed data in...

SUSE SLES15: terraform-provider-local / terraform-provider-null / etc (SUSE-SU-2026:1411-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:1411-1 advisory. This update for terraform-provider-local, terraform-provider-random, terraform-provider-tls fixes the following issue...

ROS-20260417-73-0026

A vulnerability in the crparserparseanycore function of the cr-parser.c component of the css2 Libcroco cascading tables library is related to uncontrolled recursion. Exploitation of the vulnerability could allow an attacker acting remotely to compromise data integrity as well as cause a denial of...

The vulnerability of the Google Chrome browser’s FileSystem API allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Google Chrome browser’s FileSystem API relates to the use of memory after it is released. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Security update for terraform-provider-local, terraform-provider-random, terraform-provider-tls

This update for terraform-provider-local, terraform-provider-random, terraform-provider-tls fixes the following issue: CVE-2026-25934: github.com/go-git/go-git/v5: improper verification of data integrity values for .pack and .idx files can lead to the consumption of corrupted files bsc1258097...

CVE-2023-3634 Festo: MSE6-C2M/D2M/E2M Incomplete User Documentation of Remote Accessible Functions

In products of the MSE6 product-family by Festo a remote authenticated, low privileged attacker could use functions of undocumented test mode which could lead to a complete loss of confidentiality, integrity and availability...

The vulnerabilities of SAP S/4HANA and SAP ERP software platforms, related to deficiencies in authentication procedures, allow attackers to influence the integrity and accessibility of protected information.

The vulnerabilities of SAP S/4HANA and SAP ERP software platforms are related to deficiencies in authentication procedures. Exploiting these vulnerabilities can allow attackers operating remotely to compromise the integrity and accessibility of protected information...

The vulnerability of the server for automating work processes in n8n-MCP, related to insufficient validation of requests on the server side, allows attackers to influence the integrity and accessibility of protected information.

The vulnerability of the n8n-MCP server for automating processes is related to insufficient validation of requests on the server side. Exploiting this vulnerability allows a remote attacker to compromise the integrity and accessibility of protected information...

CVE-2026-33806

A flaw was found in Fastify. A remote attacker could exploit this vulnerability by prepending a space to the Content-Type header in a request. This action bypasses the application's schema validation, allowing the attacker to submit data that would otherwise be rejected. This could lead to...

The vulnerability of the Log4j1XmlLayout component in the Apache Log4j Core logging library allows attackers to influence the integrity of the protected information.

The vulnerability of the Log4j1XmlLayout component in the Apache Log4j Core logging library is related to improper encoding or escaping of output data. Exploiting this vulnerability allows an attacker to influence the integrity of the protected information...

EUVD-2026-22154

Due to insufficient authorization checks in SAP Business Planning and Consolidation and SAP Business Warehouse, an authenticated user can execute crafted SQL statements to read, modify, and delete database data. This leads to a high impact on the confidentiality, integrity, and availability of th...

CVE-2026-27679

Due to missing authorization checks in the SAP S/4HANA frontend OData Service Manage Reference Structures, an attacker could update and delete child entities via exposed OData services without proper authorization. This vulnerability has a high impact on integrity, while confidentiality and...