Azul Zulu: CVE-2026-91462: Vulnerability in Azul Zulu

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JGSS. Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 an...

Azul Zulu: CVE-2026-87293: Vulnerability in Azul Zulu

Vulnerability in Oracle Java SE component: RMI. Supported versions that are affected are Oracle Java SE: 8u503 and 8u503-perf; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromis...

Azul Zulu: CVE-2026-91333: Vulnerability in Azul Zulu

Vulnerability in Oracle Java SE component: Security. Supported versions that are affected are Oracle Java SE: 21.0.12.1, 25.0.4.1 and 27. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attacks ...

Azul Zulu: CVE-2026-91375: Vulnerability in Azul Zulu

Vulnerability in Oracle Java SE component: Libraries. Supported versions that are affected are Oracle Java SE: 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and 21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit...

PT-2026-119968

Vulnerability in the Siebel Apps - Customer Order Management product of Oracle Siebel CRM component: Order Management. Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel Apps -...

PT-2026-133364

TuxCare rebuilt form-data to address 1 CVE. Fixed in 4.0.2-tuxcare.1...

PT-2026-120084

Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 19.3-19.32, 21.3-21.23 and 23.4.0-23.26.3. Difficult to exploit vulnerability allows low privileged attacker having None privilege with network access via SOCKS5 to compromise Java VM. While...

PT-2026-119127

Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM component: Siebel Cloud Manager. Supported versions that are affected are 22.3-26.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via LDAP to compromise Siebel CRM Cloud...

Oracle Access Manager: CVE-2026-87337: Vulnerability in Oracle Access Manager

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware component: Authentication Engine. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

PT-2026-119772

Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware component: WebCenter Sites. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

PT-2026-119720

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Applications DBA versions 12.2.3 through 12.2.15 Description A flaw in the AD Utilities component allows a low-privileged attacker with access to the infrastructure where Applications DBA executes to compromise the...

Oracle WebCenter Portal security vulnerabilities

Oracle WebCenter Portal versions 12.2.1.4.0 and 14.1.2.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the Runtime Tools component. Unauthorized attackers may gain access through HTTP network interactions, allowing them to access critical data or all accessible data...

Oracle WebCenter Portal security vulnerabilities

Oracle WebCenter Portal versions 12.2.1.4.0 and 14.1.2.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the Runtime Tools component. Unauthorized attackers may access through the HTTP network, utilize user interactions, unauthorizedly update, insert, or delete certai...

Atlassian Jira Service Management Data Center and Server 5.9.x < 10.3.25 / 10.4.x < 11.3.11 (JSDSERVER-16804)

The version of Atlassian Jira Service Management Data Center and Server Jira Service Desk running on the remote host is affected by a vulnerability as referenced in the JSDSERVER-16804 advisory. - Netty is an asynchronous, event-driven network application framework. Prior to 4.1.137.Final and...

Atlassian Jira Service Management Data Center and Server < 10.3.26 / 10.4.x < 11.3.12 (JSDSERVER-16839)

The version of Atlassian Jira Service Management Data Center and Server Jira Service Desk running on the remote host is affected by a vulnerability as referenced in the JSDSERVER-16839 advisory. - js-yaml is a JavaScript YAML parser and dumper. From 3.0.0 until 3.15.2, 4.3.2, and 5.4.1,...

PT-2026-119265

Vulnerability in the Helidon product of Oracle Fusion Middleware component: helidon-cors. Supported versions that are affected are 3.0.0-3.2.21. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. While the vulnerability is in...

Linux kernel/bpf/cgroup.c Bypass Data Compromise

The vulnerability of the kernel/bpf/cgroup.c component of the Linux operating system is related to insufficient resource control during its existence. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Linux kernel Heap Buffer Overflow DoS

The vulnerability in the kfdcriuresumesvm function within the drivers/gpu/drm/amd/amdkfd/kfdsvm.c file of the Linux kernel operating system is related to insufficient resource control during its existence. Exploitation of this vulnerability may allow an attacker to compromise the confidentiality,...

Linux kernel create_midi2_endpoint() Data Compromise

The vulnerability of the createmidi2endpoint function in the sound/usb/midi2.c component of the Linux kernel is related to the improper implementation of thread management. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

PT-2026-134143

This update for ntfs-3g ntfsprogs fixes the following issues: - Denial-of-service in ntfs inode attach all extents bsc1281758. - Heap buffer overflow in ntfs acl owner bsc1281756. - Heap buffer overflow in ntfs check restart area bsc1281759. - Heap buffer overflow in ntfs ea check wsldev...