10740 matches found
SUSE CVE-2026-46113
In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Fix shadow paging use-after-free due to unexpected GFN The shadow MMU computes GFNs for direct shadow pages using sp-gfn plus the SPTE index. This assumption breaks for shadow paging if the guest page tables are modifie...
PT-2026-44851
Name of the Vulnerable Software and Affected Versions Indian Motorcycle Scout Bobber + Tech 2025 model year Description An incorrect behavior order in the Infotainment / Digital Round display allows an attacker on an adjacent network to bypass the PIN entry screen. The system uses the presence of...
PT-2026-47548
Impact In versions of uv prior to 0.11.15, when installing a distribution containing an entry point specification under console scripts or gui scripts, uv would place the generated entry point according to the given name even if doing so resulted in a path outside of the environment's scripts...
PT-2026-44852
Name of the Vulnerable Software and Affected Versions Indian Motorcycle Scout Bobber + Tech 2025 model year Description An incorrect behavior order in the Infotainment / Digital Round display allows an attacker on an adjacent network to bypass the PIN entry screen. The system uses the presence of...
PT-2026-61202
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists between the drm gem change handle ioctl and drm gem handle delete functions. The drm gem change handle ioctl function leaves an old handle active in the IDR Integ...
CVE-2026-49317: Incorrect Behavior Order
Incorrect behavior order in the Infotainment / Digital Round display of the Indian Motorcycle Scout Bobber + Tech 2025 model year allows an adjacent-network attacker to bypass the PIN entry screen. The Infotainment uses presence of Wireless Control Module WCM traffic during its boot window as a...
CVE-2026-49318: Incorrect Behavior Order
Incorrect behavior order in the Infotainment / Digital Round display of the Indian Motorcycle Scout Bobber + Tech 2025 model year allows an adjacent-network attacker to bypass the PIN entry screen. The Infotainment uses presence of Wireless Control Module WCM traffic during its boot window as a...
Devolutions Server < 2025.3.22 / 2026.1.x < 2026.1.19 Multiple Vulnerabilities (DEVO-2026-0013)
The version of Devolutions Server installed on the remote host is prior to 2025.3.22 or 2026.1.x prior to 2026.1.19. It is, therefore, affected by multiple vulnerabilities, including: - Improper authorization in the Active Directory browsing feature allows a low-privileged authenticated user to...
ECHO-E28A-5DB6-BE58 Kernel vulnerabilities are irrelevant in container environments.
Bulletin has no description...
ECHO-F874-025D-50EF Kernel vulnerabilities are irrelevant in container environments.
Bulletin has no description...
ECHO-451B-C709-8943 Kernel vulnerabilities are irrelevant in container environments.
Bulletin has no description...
CVE-2026-46837
CVE-2026-46837 affects Oracle E-Business Suite — Flow Manufacturing (component: Security). Affected versions are 12.2.9–12.2.15. The vulnerability allows a low-privileged attacker with network access via SQL to compromise Oracle Flow Manufacturing, potentially taking over the product. Concretely,...
CVE-2026-46835
The CVE-2026-46835 entry concerns Oracle Database Server’s Net Service component. Affected are Oracle versions 23.4.0 through 23.26.2. An unauthenticated attacker who can access the Net Service over TLS can cause the Net Service to hang or crash, resulting in a complete denial of service. The doc...
CVE-2026-46829
...
CVE-2026-46822
CVE-2026-46822 affects Oracle iAssets within Oracle E-Business Suite (component: Internal Operations). Affected versions are 12.2.3–12.2.15. The issue is exploitable by a low-privilege attacker with network access via HTTP, potentially leading to takeover of Oracle iAssets and potentially affecti...
CVE-2026-46820
...
CVE-2026-46819
...
CVE-2026-46818
...
CVE-2026-46775
Oracle REST Data Services (Core) is affected in versions 24.2.0–26.1.0. The vulnerability allows a low-privileged, unauthenticated attacker with HTTPS network access to compromise the service, potentially taking over the Oracle REST Data Services and impacting related products. CVSS 3.1 base scor...
