24833 matches found
CVE-2026-64799
The Joomla Extension by regularlabs.com is vulnerable to Server-Side Request Forgery (SSRF) within the Articles Anywhere and Users Anywhere extensions. The root cause is that content-controlled image URLs can request private or reserved network services, follow unsafe redirects, and save response...
openjdk: Enhance Jar handling (Oracle CPU 2026-07)
A flaw was found in OpenJDK. There exists a potential existential forgery vulnerability in CMS and protocols which use CMS. In Java, CMS is used to sign JAR files...
openjdk: Improve certification checking (Oracle CPU 2026-07)
A flaw was found in OpenJDK. OpenJDK can apply two different security meanings to the same wildcard dNSName SAN across certificate policy enforcement and hostname verification. During path validation, DNSName.constrains compares .foo.com and secret.foo.com literally and returns NAMESAMETYPE, so...
EUVD-2024-55695
Information disclosure in Bosch Configuration Manager in Version 7.72.0106 allows an attacker to access sensitive information...
openjdk: Improve certification checking (Oracle CPU 2026-07)
A flaw was found in OpenJDK. OpenJDK can apply two different security meanings to the same wildcard dNSName SAN across certificate policy enforcement and hostname verification. During path validation, DNSName.constrains compares .foo.com and secret.foo.com literally and returns NAMESAMETYPE, so...
PT-2026-63600
Content-controlled image URLs could request private or reserved network services, follow unsafe redirects and save responses without validating that they were images. This could result in SSRF, internal-data access or writing attacker-controlled files into a web-accessible folder...
PT-2026-64031
Joomla Extension - joomshaper.com - cross-customer order and personal information disclosure in Easy Store extension 1.0.0-2.0.1 - Improper access checks allow logged in users to retreive order and customer information of any order in the system...
CVE-2026-64799: Server-Side Request Forgery (SSRF)
Joomla Extension - regularlabs.com - SSRF via remote image downloads in Articles Anywhere and Users Anywhere extensions - Content-controlled image URLs could request private or reserved network services, follow unsafe redirects and save responses without validating that they were images. This cou...
Linux X86 device driver module intel_punit_ipc_probe() Heap Buffer Overflow
The vulnerability of the intelpunitipcprobe function in the driver/platform/x86/intel/punitipc.c file of the Linux X86 device driver module is related to the occurrence of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to compromise the...
Oracle HTTP Server (July 2026 CPU)
The versions of HTTP Server installed on the remote host are affected by multiple vulnerabilities as referenced in the July 2026 CPU advisory. - Vulnerability in the Oracle WebLogic Server Proxy Plug-in product of Oracle Fusion Middleware component: WebLogic Server Proxy Plug-In for Third-Party W...
Oracle VM VirtualBox (July 2026 CPU)
The 7.2.8 version of VM VirtualBox installed on the remote host is affected by multiple vulnerabilities as referenced in the July 2026 CPU advisory. - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.8. Easil...
MiracleLinux 9 : webkit2gtk3-2.52.4-1.el9_8 (AXSA:2026-1338:05)
The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1338:05 advisory. webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash CVE-2026-28946 webkitgtk: Processing maliciously crafte...
JupyterLab: Cross-site scripting (XSS) via crafted settings file (`overrides.json`)
JupyterLab 4.5+ allows notebook settings to be shared and applied through an overrides.json file using the Import button in the Settings Editor. Certain notebook display settings were not properly validated before being applied. As a result, a crafted settings file could contain hidden instructio...
CVE-2026-65013
Onlook through 0.2.32, fixed in commit 423e2e9, contains a broken object level authorization vulnerability that allows authenticated attackers to access and manipulate other users' resources by supplying arbitrary UUID values to tRPC API procedures including project.get, member.remove, and...
Vulnerabilities found in Oracle MySQL Server and MySQL Cluster
Oracle has identified several vulnerabilities in Oracle MySQL Server and MySQL Cluster. These vulnerabilities apply to various versions of Oracle MySQL Server and MySQL Cluster. Some of these vulnerabilities enable attackers with high privileges and network access to cause Denial-of-Service attac...
vulnerabilities present in Oracle Java SE
Oracle has identified several vulnerabilities in Java SE including Oracle GraalVM and JavaFX components. Oracle Java SE and related products Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition contain various vulnerabilities that enable unauthorized attackers to perform denial-of-service...
Vulnerabilities found in Oracle Financial Services
Oracle has identified vulnerabilities in various Financial Services modules. Oracle has also processed updates for various third-party products. The vulnerabilities include code injection through malicious schemes in Apache Avro, unauthorized access to sensitive data in various Oracle products, a...
Vulnerabilities are managed in Oracle Enterprise Manager
Oracle has identified several vulnerabilities in Oracle Enterprise Manager Base Platform versions 13.5 and 24.1. These vulnerabilities enable attackers to perform unauthorized read, write, create, delete, and modify actions on sensitive data via network access via HTTPS or HTTP, either without...
CVE-2026-13034
A flaw was found in Google Chrome's Passwords feature. A remote attacker could exploit this vulnerability by compromising the browser's rendering engine and then using a specially designed web page. This could allow the attacker to bypass security measures designed to isolate websites, potentiall...
