PT-2026-121946

In the Linux kernel, the following vulnerability has been resolved: net/sched: em text: reject unterminated algo before autoload This is a follow-up to commit 9c572a83037a "net/sched: fix potential stack infoleak in em text dump", which zero-initialised the dump-side struct. Sashiko pointed at a...

EUVD-2026-106754

Vulnerability in the Oracle Management Pack for Oracle GoldenGate product of Oracle GoldenGate component: EM Plugin. Supported versions that are affected are 13.4.1.0.1-13.5.2.0.6. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical communication segment...

CVE-2026-91517

Vulnerability in the Oracle Management Pack for Oracle GoldenGate product of Oracle GoldenGate component: EM Plugin. Supported versions that are affected are 13.4.1.0.1-13.5.2.0.6. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical communication segment...

CVE-2026-91517

A vulnerability exists in the Oracle Management Pack for Oracle GoldenGate product (specifically the EM Plugin component) affecting supported versions 13.4.1.0.1-13.5.2.0.6 . An unauthenticated attacker with access to the physical communication segment attached to the hardware where the software ...

Security vulnerabilities in Oracle Management Pack for Oracle GoldenGate

A security vulnerability exists in Oracle Management Pack for Oracle GoldenGate versions 13.4.1.0.1 through 13.5.2.0.6. This vulnerability stems from an issue within the EM Plugin component and may allow unauthenticated attackers to gain access via physical communication channels, thereby taking...

PT-2026-120031

Vulnerability in the Oracle Management Pack for Oracle GoldenGate product of Oracle GoldenGate component: EM Plugin. Supported versions that are affected are 13.4.1.0.1-13.5.2.0.6. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical communication segment...

PT-2026-116803

In the Linux kernel, the following vulnerability has been resolved: net/sched: fix potential stack infoleak in em text dump em text dump allocates struct tcf em text on the stack without zeroing it. strscpy writes the algorithm name and a NUL terminator into conf.algo, leaving the remaining bytes...

Astra Linux – Vulnerability in Qt4-X11, qtsvg-opensource-src

In Qt versions prior to 5.15.14, 6.0.x through 6.2.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.1, the initialization of munitsPerEm in QtSvg QSvgFont is handled incorrectly...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Atacade: Ahci: Matching EMMAXSLOTS with SATAPMPMAXPORTS UBSAN reports an array-index-out-of-bounds issue: 1.980703 Kernel: UBSAN: Array-index out of bounds in /build/linux-9H675w/linux-5.15.0/drivers/ata/libahci.c:968:41 1.980709...

bigfeta (>=1.1.3, <=1.1.4), bolinette (>=0.6.0, <=0.6.10) +4 more potentially affected by CVE-2026-96749 via pymongo (3.11.1)

pymongo PYPI version 3.11.1 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - bigfeta =1.1.3, =0.6.0, =0.3.1, =0.166.0, =0.167.0 Source cves: CVE-2026-96749 Source advisory: OSV:PYSEC-2026-4296...

bigfeta (>=1.1.3, <=1.1.4), bolinette (>=0.6.0, <=0.6.10) +4 more potentially affected by CVE-2026-88029 via pymongo (3.11.1)

pymongo PYPI version 3.11.1 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - bigfeta =1.1.3, =0.6.0, =0.3.1, =0.166.0, =0.167.0 Source cves: CVE-2026-88029 Source advisory: OSV:PYSEC-2026-4294...

bigfeta (>=1.1.3, <=1.1.4), bolinette (>=0.6.0, <=0.6.10) +4 more potentially affected by CVE-2026-96749 via pymongo (3.11.1)

pymongo PYPI version 3.11.1 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - bigfeta =1.1.3, =0.6.0, =0.3.1, =0.166.0, =0.167.0 Source cves: CVE-2026-96749 Source advisory: OSV:GHSA-V4X9-3549-CRWV...

bigfeta (>=1.1.3, <=1.1.4), bolinette (>=0.6.0, <=0.6.10) +4 more potentially affected by CVE-2026-88029 via pymongo (3.11.1)

pymongo PYPI version 3.11.1 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - bigfeta =1.1.3, =0.6.0, =0.3.1, =0.166.0, =0.167.0 Source cves: CVE-2026-88029 Source advisory: OSV:GHSA-8FVV-FGR5-F8CH...

discodo (>=3.0.0, <=3.0.3), pait (>=0.5.5, <=0.6.1.1) +3 more potentially affected by CVE-2026-85078 via sanic (21.3.4)

sanic PYPI version 21.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on sanic and may be impacted: - discodo =3.0.0, =0.5.5, =0.9.0, =0.0.1, =0.1.0, =0.1.1 Source cves: CVE-2026-85078 Source advisory: OSV:PYSEC-2026-4162...

discodo (>=3.0.0, <=3.0.3), pait (>=0.5.5, <=0.6.1.1) +3 more potentially affected by CVE-2026-85078 via sanic (21.3.4)

sanic PYPI version 21.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on sanic and may be impacted: - discodo =3.0.0, =0.5.5, =0.9.0, =0.0.1, =0.1.0, =0.1.1 Source cves: CVE-2026-85078 Source advisory: OSV:GHSA-WMJ6-G64G-J7Q5...

CVE-2026-62597

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager component: Event Management. Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows low privileged attacker with network access via SOAP to compromise Oracle...

PT-2026-81164

The Events Manager – Calendar, Bookings, Tickets, and more! plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 7.3.7.4 via the em options save function. This makes it possible for authenticated attackers, with administrator-level access and above, to...

Weaver E-cology getEmDsList Sensitive Information Disclosure Detection

Weaver E-cology10 contains a sensitive information disclosure vulnerability in the /papi/em/transform/getEmDsList endpoint. An unauthenticated attacker can access the endpoint to retrieve datasource-related information such as dsKey, dsValue, and deleteType. !/usr/bin/env python3 -- coding: utf-8...

bigfeta (>=1.1.3, <=1.1.4), bolinette (>=0.6.0, <=0.6.10) +4 more potentially affected by CVE-2024-5629 via pymongo (3.11.1)

pymongo PYPI version 3.11.1 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - bigfeta =1.1.3, =0.6.0, =0.3.1, =0.166.0, =0.167.0 Source cves: CVE-2024-5629 Source advisory: OSV:PYSEC-2026-1826...

CVE-2026-8608 Event Monster <= 2.1.0 - Unauthenticated Insufficient Verification of Data Authenticity to Payment Bypass via em_capture_payment AJAX Action

The Event Monster – Event Management, Events Calendar, Tickets plugin for WordPress is vulnerable to Insufficient Verification of Data Authenticity in versions up to, and including, 2.1.0. This is due to the capturepayment AJAX handler registered via wpajaxnoprivemcapturepayment trusting...