CVE-2026-3182 Sensitive Data Exposure

Zohocorp ManageEngine Endpoint Central versions before 11.4.2528.34 are affected by cleartext transmission of sensitive information vulnerability...

ROOT-OS-UBUNTU-2204-CVE-2026-43162 CVE-2026-43162 in rootio-linux - Patched by Root

Root has patched CVE-2026-43162 in the rootio-linux package for Root:Ubuntu:22.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2204-CVE-2025-68284 CVE-2025-68284 in rootio-linux - Patched by Root

Root has patched CVE-2025-68284 in the rootio-linux package for Root:Ubuntu:22.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2204-CVE-2024-14027 CVE-2024-14027 in rootio-linux - Patched by Root

Root has patched CVE-2024-14027 in the rootio-linux package for Root:Ubuntu:22.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2204-CVE-2023-53401 CVE-2023-53401 in rootio-linux - Patched by Root

Root has patched CVE-2023-53401 in the rootio-linux package for Root:Ubuntu:22.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2204-CVE-2023-53452 CVE-2023-53452 in rootio-linux - Patched by Root

Root has patched CVE-2023-53452 in the rootio-linux package for Root:Ubuntu:22.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2204-CVE-2026-31711 CVE-2026-31711 in rootio-linux - Patched by Root

Root has patched CVE-2026-31711 in the rootio-linux package for Root:Ubuntu:22.04. Multiple fixed versions available...

CVE-2026-15811 Kronosnet: kronosnet: encryption key exposure in memory after cryptographic configuration changes

A vulnerability was found in kronosnet's version =1.34 cryptographic configuration management. The framework does not correctly zero-out or wipe sensitive memory segments after executing changes to its cryptographic configuration. This omission leaves raw encryption keys resident in memory after...

CVE-2026-15811

Kronosnet (version

EUVD-2026-46150

A flaw was found in Red Hat Quay's repository-level mirror configuration feature. The POST and PUT handlers in endpoints/api/mirror.py accept an externalreference parameter without SSRF validation, unlike the organization-level mirror handlers which apply validateexternalregistryurl. A repository...

EUVD-2026-46148

Missing Cryptographic Step CWE-325 vulnerability exists in certain FeliCa IC chips shipped in or before 2017. If the vulnerability is exploited, information stored in the IC chip may be read or tampered with...

EUVD-2026-46118

FreeRDP before 3.28.0 treats lines beginning with forward slash in RDP files as raw command-line options, exposing the entire CLI parser surface to untrusted files. Attackers can craft malicious RDP files with /rdp2tcp, /cert:ignore, or /drive options to execute arbitrary commands, bypass...

CVE-2026-52474

The vulnerability CVE-2026-52474 affects the aiflowy package (versions

PT-2026-63313

Name of the Vulnerable Software and Affected Versions Gitea affected versions not specified Description The ToHook function in services/webhook/general.go decrypts the HeaderAuthorizationEncrypted field and returns the plaintext authorization header in the API response. This allows repository...

CVE-2026-50755

An issue in DayuanJiang next-ai-draw-io 0.4.13 allows a remote attacker to obtain sensitive information via the X-Forwarded-For header value...

PT-2026-63278

Name of the Vulnerable Software and Affected Versions Gitea affected versions not specified Description The internal API HTTP client in modules/private/internal.go hardcodes TLSClientConfig.InsecureSkipVerify = true, which disables TLS certificate verification for outbound internal requests. When...

CVE-2026-50755

CVE-2026-50755 affects DayuanJiang’s next-ai-draw-io 0.4.13. The issue enables an attacker to obtain sensitive information by manipulating the X-Forwarded-For header, leading to potential information disclosure. The publicly provided details describe the vulnerability as a remote-access risk with...

PT-2026-63005

Vulnerability in the Oracle HRMS UK product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.8-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle HRMS UK. While the...

PT-2026-62175

Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 8u491, 8u491-perf, 11.0.31, 17.0.19, 21.0.11, 25.0.3, and 26.0.1 Oracle GraalVM for JDK versions 17.0.19 and 21.0.11 Oracle GraalVM Enterprise Edition version 21.3.18 Description An issue exists in the ImageIO component...

PT-2026-63151

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle In-Memory Cost Management for Discrete Industries versions 12.2.3 through 12.2.15 Description An issue exists in the Internal Operations component of the Oracle In-Memory Cost Management for Discrete Industries...