950 matches found
PT-2026-81229
The extension fails to enforce enable-field restrictions on a repository query parameter. An unauthenticated remote user can pass a demand-override parameter to view hidden or time-restricted events, unless the disableOverrideDemand plugin setting is active. Exploitation of this issue requires on...
JLSEC-2026-1365 wasmtime has a panic when allocating a table exceeding the size of the host's address space
Impact Wasmtime's allocation logic for a WebAssembly table contained checked arithmetic which panicked on overflow. This overflow is possible to trigger, and thus panic, when a table with an extremely large size is allocated. This is possible with the WebAssembly memory64 proposal where tables ca...
CVE-2026-70852
Vulnerability in the Oracle Demand Planning product of Oracle Supply Chain component: Internal Operations. Supported versions that are affected are 12.1 and 12.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Demand Planning...
CVE-2026-70846
Vulnerability in the Oracle Demand Planning product of Oracle Supply Chain component: Internal Operations. Supported versions that are affected are 12.1 and 12.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Demand Planning. Whi...
EUVD-2026-61803
Vulnerability in the Oracle Demand Planning product of Oracle Supply Chain component: Internal Operations. Supported versions that are affected are 12.1 and 12.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Demand Planning...
EUVD-2026-61797
Vulnerability in the Oracle Demand Planning product of Oracle Supply Chain component: Internal Operations. Supported versions that are affected are 12.1 and 12.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Demand Planning. Whi...
PT-2026-77841
Name of the Vulnerable Software and Affected Versions Oracle Demand Planning versions 12.1 and 12.2 Description An issue exists in the Internal Operations component of the Oracle Demand Planning product of Oracle Supply Chain. A low privileged attacker with network access via HTTP can compromise...
PT-2026-77847
šØ CVE-2026-70852 Vulnerability in the Oracle Demand Planning product of Oracle Supply Chain component: Internal Operations. Supported versions that are affected are 12.1 and 12.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...
CVE-2026-70852: Improper Access Control
Vulnerability in the Oracle Demand Planning product of Oracle Supply Chain component: Internal Operations. Supported versions that are affected are 12.1 and 12.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Demand Planning...
CVE-2026-70846: Improper Access Control
Vulnerability in the Oracle Demand Planning product of Oracle Supply Chain component: Internal Operations. Supported versions that are affected are 12.1 and 12.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Demand Planning. Whi...
shodan
Shodan API client for Go A small Shodan API client and CLI bu...
CVE-2026-70445
Missing permission checks in Jenkins Sauce OnDemand Plugin 2.2.0 and earlier allow attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins...
SUSE CVE-2026-62434
A guest started with Populated on Demand enabled PoD can attempt to reclaim pages which aren't regular guest RAM. This can cause corruption of memory management state in Xen...
CVE-2026-62434
A flaw was found in Xen. When a guest operating system is started with Populated on Demand PoD enabled, it can attempt to reclaim memory pages that are not regular guest RAM. This action can lead to the corruption of Xen's memory management state, potentially causing system instability or denial ...
CVE-2026-62434
A guest started with Populated on Demand enabled PoD can attempt to reclaim pages which aren't regular guest RAM. This can cause corruption of memory management state in Xen...
CVE-2026-62434
A guest started with Populated on Demand enabled PoD can attempt to reclaim pages which aren't regular guest RAM. This can cause corruption of memory management state in Xen...
UBUNTU-CVE-2026-62434
A guest started with Populated on Demand enabled PoD can attempt to reclaim pages which aren't regular guest RAM. This can cause corruption of memory management state in Xen...
CVE-2026-62434
The Xen hypervisor is vulnerable to a memory management flaw when Populated on Demand (PoD) is enabled. A guest can attempt to reclaim pages that are not regular guest RAM, potentially leading to corruption of the memory management state . Remediation is available via specific distribution update...
CVE-2026-62434
A guest started with Populated on Demand enabled PoD can attempt to reclaim pages which aren't regular guest RAM. This can cause corruption of memory management state in Xen...
CVE-2026-62434 PoD: Don't try to reclaim special pages
A guest started with Populated on Demand enabled PoD can attempt to reclaim pages which aren't regular guest RAM. This can cause corruption of memory management state in Xen...