EUVD-2026-47579

Netty XML: Injection / Risky Sink — unconfigured XML factory with active DTD and entity handling...

CGA-98RG-M8C3-2RM5

Bulletin has no description...

MINI-24FR-2CJW-RFV9

Bulletin has no description...

MINI-VVJ8-5V85-VFR9

Bulletin has no description...

MINI-GRRJ-7RFC-MQ2M

Bulletin has no description...

MINI-265P-6QJG-CP85

Bulletin has no description...

MINI-WMHQ-XH82-C3C9

Bulletin has no description...

MINI-5W27-87GG-VJR2

Bulletin has no description...

MINI-6664-V4V4-RJ2M

Bulletin has no description...

MINI-494Q-MHX8-QRXJ

Bulletin has no description...

EUVD-2026-47697

In Progress® Telerik® UI for AJAX prior to v2026.2.708, insufficient validation of content submitted to the RadEditor PDF export feature may allow an authenticated attacker to trigger server-side requests to arbitrary hosts, resulting in outbound network connections and potential exposure of...

MINI-3HHG-CCMQ-W3VH

Bulletin has no description...

EUVD-2026-47455

Vulnerability in the Oracle Document Management and Collaboration product of Oracle E-Business Suite component: Attachments. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

EUVD-2026-47398

Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain component: Document Management. The supported version that is affected is 6.2.1. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Agile...

EUVD-2026-46515

Vulnerability in the Oracle Document Management and Collaboration product of Oracle E-Business Suite component: Attachments. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

SUSE CVE-2026-16351

Sandbox escape due to use-after-free in the DOM: Navigation component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13...

SUSE CVE-2026-16371

Privilege escalation in the DOM: Navigation component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13...

SUSE CVE-2026-16378

Other issue in the DOM: Copy & Paste and Drag & Drop component. This vulnerability was fixed in Firefox 153 and Thunderbird 153...

SUSE CVE-2026-16382

Mitigation bypass in the DOM: Service Workers component. This vulnerability was fixed in Firefox 153 and Thunderbird 153...

SUSE CVE-2026-16388

Sandbox escape in the DOM: Networking component. This vulnerability was fixed in Firefox 153 and Thunderbird 153...