953 matches found
CVE-2026-62434
The Xen hypervisor is vulnerable to a memory management flaw when Populated on Demand (PoD) is enabled. A guest can attempt to reclaim pages that are not regular guest RAM, potentially leading to corruption of the memory management state . Remediation is available via specific distribution update...
EUVD-2026-49787
A guest started with Populated on Demand enabled PoD can attempt to reclaim pages which aren't regular guest RAM. This can cause corruption of memory management state in Xen...
CVE-2026-62434 PoD: Don't try to reclaim special pages
A guest started with Populated on Demand enabled PoD can attempt to reclaim pages which aren't regular guest RAM. This can cause corruption of memory management state in Xen...
PoD: Don't try to reclaim special pages
ISSUE DESCRIPTION A guest started with Populated on Demand enabled PoD can attempt to reclaim pages which aren't regular guest RAM. This can cause corruption of memory management state in Xen. IMPACT A buggy or malicious guest can cause corruption of Xen's state, leading to crashes or other...
PT-2026-65476
Name of the Vulnerable Software and Affected Versions Xen affected versions not specified Description A guest started with Populated on Demand PoD enabled can attempt to reclaim pages that are not regular guest RAM. This action can lead to the corruption of the memory management state within Xen...
CVE-2026-62434: Out-of-bounds Write
A guest started with Populated on Demand enabled PoD can attempt to reclaim pages which aren't regular guest RAM. This can cause corruption of memory management state in Xen...
CVE-2026-56444
In NLnet Labs Unbound 1.20.0 up to and including 1.25.1, when Unbound is configured with 'serve-expired: yes' and 'serve-expired-client-timeout discard-timeout 0' contrary to the suggested values, the discard-timeout branch during the serve expired logic drops an aged client reply without...
EUVD-2026-47257
Vulnerability in the Oracle Demantra Demand Management product of Oracle Supply Chain component: Product Security. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Demantra...
EUVD-2026-47140
Vulnerability in the Oracle Demand Signal Repository product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via SQL to compromise Oracle Demand...
CVE-2026-62516
Vulnerability in the Oracle Demantra Demand Management product of Oracle Supply Chain component: Product Security. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via SQL to compromise Oracle Demantra...
CVE-2026-61041
Vulnerability in the Oracle Demantra Demand Management product of Oracle Supply Chain component: Product Security. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Demantra...
CVE-2026-60840
Vulnerability in the Oracle Demand Signal Repository product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via SQL to compromise Oracle Demand...
CVE-2026-62516
Vulnerability in the Oracle Demantra Demand Management product of Oracle Supply Chain component: Product Security. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via SQL to compromise Oracle Demantra...
PT-2026-62817
Name of the Vulnerable Software and Affected Versions Oracle Demand Signal Repository versions 12.2.3 through 12.2.15 Description A flaw in the Internal Operations component allows a low privileged attacker with network access via SQL to compromise the system. Successful exploitation can lead to...
PT-2026-63214
Name of the Vulnerable Software and Affected Versions Oracle Demantra Demand Management versions 12.2.3 through 12.2.15 Description A security flaw in the Product Security component allows a low privileged attacker with network access via SQL to compromise the system. Successful exploitation can...
CVE-2026-60840: Improper Access Control
Vulnerability in the Oracle Demand Signal Repository product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via SQL to compromise Oracle Demand...
PT-2026-62934
Name of the Vulnerable Software and Affected Versions Oracle Demantra Demand Management versions 12.2.3 through 12.2.15 Description A security flaw in the Product Security component allows a low privileged attacker with network access via HTTP to compromise the system. Successful exploitation can...
CVE-2026-62516: Improper Neutralization of Special Elements used in an SQL Command
Vulnerability in the Oracle Demantra Demand Management product of Oracle Supply Chain component: Product Security. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via SQL to compromise Oracle Demantra...
CVE-2026-61041: Improper Access Control
Vulnerability in the Oracle Demantra Demand Management product of Oracle Supply Chain component: Product Security. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Demantra...
