CVE-2026-29007

A flaw was found in U-Boot. A remote attacker can exploit an out-of-bounds read vulnerability in the tcprxstatemachine function when the Transmission Control Protocol TCP is enabled. By crafting a malicious packet with a mismatched IP total length and TCP data offset, an attacker can read beyond...

openjdk: Enhance AWT ImagingLib (Oracle CPU 2026-07)

A flaw was found in OpenJDK. When the software processes certain images, a specific function fails to manage memory boundaries correctly. This can lead to the application attempting to access invalid memory or dereference a null pointer, which may cause the application to unexpectedly terminate...

The vulnerability of the Local Mail Transfer Protocol (LMTP) used by Dovecot and OX Dovecot Pro mail servers, which is related to uncontrolled resource consumption, allows attackers to cause service failures.

The vulnerability of the Local Mail Transfer Protocol LMTP used by Dovecot and OX Dovecot Pro mail servers involves an uncontrolled consumption of resources. Exploiting this vulnerability allows a malicious actor to cause service failures...

The vulnerability of Dovecot and OX Dovecot Pro mail servers, related to uncontrolled resource consumption, allows attackers to cause service failures.

The vulnerability of Dovecot and OX Dovecot Pro mail servers is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures...

The vulnerability of Dovecot and OX Dovecot Pro mail servers, related to uncontrolled resource consumption, allows attackers to cause service failures.

The vulnerability of Dovecot and OX Dovecot Pro mail servers is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures...

The vulnerability of the io_wq_create() function in the io_uring module of the io-wq.c interface, a synchronous input/output interface for the Linux operating system’s kernel, allows a hacker to cause a service failure.

The vulnerability of the iowqcreate function in the iouring module of the Linux kernel’s asynchronous input/output interface relates to improper memory release memory leak. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the kmalloc_reserve() function in the net/core/skbuff.c module, which supports network functions of the Linux kernel, allows a attacker to cause a service failure.

The vulnerability of the kmallocreserve function in the net/core/skbuff.c module, which supports network functions of the Linux kernel, is related to integer overflow or cyclic shift vulnerabilities. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the `vfio_ap_queue_devremove()` function in the `drivers/s390/crypto/vfio_ap_drv.c` driver file of the S390 Linux operating system’s cryptography driver, which allows a hacker to cause a service failure.

The vulnerability of the vfioapqueuedevremove function in the drivers/s390/crypto/vfioapdrv.c file of the Linux S390 platform’s cryptography driver lies in the pointer manipulation involved. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the opap_hsmmc_probe() function in the drivers/mmc/host/omap_hsmmc.c file of the MMC/SD/SDIO card driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the opaphsmmcprobe function in the driver/mmc/host/omaphsmmc.c file of the MMC/SD/SDIO card driver in the Linux operating system is related to the lack of checking for the return value. Exploiting this vulnerability could allow an attacker to cause a service failure...

n8n: Unauthenticated Endpoint Allows Cancellation of Any User's Active Test Webhook

Impact The DELETE /$restEndpoint/test-webhook/:id route is registered before the authentication middleware is applied, allowing any unauthenticated network caller who knows a workflow ID to cancel that workflow's active test webhook registration. The impact is limited to disrupting in-progress te...

UBUNTU-CVE-2026-13068

An authenticated user holding cursor termination privileges on one database may incorrectly be permitted to terminate active cursors on a separate database, disrupting ongoing query operations for other users. The behavior stems from an authorization check that does not correctly scope privileges...

CVE-2026-13068

An authenticated user holding cursor termination privileges on one database may incorrectly be permitted to terminate active cursors on a separate database, disrupting ongoing query operations for other users. The behavior stems from an authorization check that does not correctly scope privileges...

GHSA-H9FM-XCV2-QFW3 Duplicate Advisory: Unauthenticated Endpoint Allows Cancellation of Any User's Active Test Webhook

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-33q9-f52j-gc75. This link is maintained to preserve external references. Original Description n8n before 2.28.0 and before 2.27.4 on the 2.27.x branch registers the DELETE /$restEndpoint/test-webhook/:id endpoin...

EUVD-2026-47548

Vulnerability in the Oracle Advanced Benefits product of Oracle E-Business Suite component: Self Service Benefits. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Advanced...

EUVD-2026-47539

Vulnerability in the Oracle Production Scheduling product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Productio...

EUVD-2026-47452

Vulnerability in the Oracle Supply Chain Globalization product of Oracle E-Business Suite component: Copy Inventory Organization. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

EUVD-2026-47429

Vulnerability in the PeopleSoft Enterprise FIN Common Objects Argentina product of Oracle PeopleSoft component: Integration. The supported version that is affected is 9.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft...

EUVD-2026-47265

Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite component: BI Publisher Integration. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

EUVD-2026-47028

Vulnerability in the PeopleSoft Enterprise HCM Global Payroll Mexico product of Oracle PeopleSoft component: Global Payroll for Mexico. The supported version that is affected is 9.2. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise...

EUVD-2026-46933

Vulnerability in the Oracle SDP Number Portability product of Oracle E-Business Suite component: Installation. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle SDP Number...