9690 matches found
GHSA-XHMJ-RG95-44HV
creationtimestamp| type| source ---|---|--- 2026-04-23 21:26:31+00:00| seen| Telegram/BiTM4VWQdbYmMG43-mv447qo5-YjFbOvUme2BKAYDCNPPw...
MINI-XF8V-83J3-334J
Bulletin has no description...
Roblox clamps down on chats and age checks as legal pressure builds
Roblox has long faced criticism over child safety on its platform. Now it has started settling with state attorneys over the issue, and the total is climbing fast. On April 21, Alabama Attorney General Steve Marshall announced a $12.2 million settlement with the child-focused online gaming...
GHSA-Q94G-3GCF-66X7 Duplicate Advisory: uutils coreutils has an Incorrect Authorization issue
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-47c7-qrm7-mqw7. This link is maintained to preserve external references. Original Description The id utility in uutils coreutils miscalculates the groups= section of its output. The implementation uses a user's...
CVE-2026-34314
...
CVE-2026-34313
CVE-2026-34313 affects Oracle Financial Services Analytical Applications Infrastructure (OFSAAI), Platform component. Affected versions: 8.0.7.9, 8.0.8.7, 8.1.2.5. An attacker with network access via HTTP and low privileges can compromise OFSAAI and gain unauthorized access to critical data or co...
CVE-2026-34303
CVE-2026-34303 affects Oracle MySQL Server (component: Server: Optimizer). Affected versions are MySQL 8.0.0–8.0.45, 8.4.0–8.4.8, and 9.0.0–9.6.0. The vulnerability allows a low-privileged attacker with network access via multiple protocols to cause a hang or a frequently repeatable crash (comple...
CVE-2026-22011
The CVE-2026-22011 entry describes a vulnerability in Oracle Applications DBA (ADPatch) within Oracle E-Business Suite, affecting 12.2.3 through 12.2.15. The vulnerability can be exploited by a network-accessible attacker over HTTP and requires user interaction; it enables takeover of Oracle Appl...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-010727)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-010727 advisory. The Linux kernel before 5.17.9 allows TCP servers to identify clients by observing what source ports are used. This occurs because of use of Algorithm 4 Double-Hash...
CVE-2026-3219
pip handles concatenated tar and ZIP files as ZIP files regardless of filename or whether a file is both a tar and ZIP file. This behavior could result in confusing installation behavior, such as installing "incorrect" files according to the filename of the archive. New behavior only proceeds wit...
CVE-2026-3219 pip doesn't reject concatenated ZIP and tar archives
pip handles concatenated tar and ZIP files as ZIP files regardless of filename or whether a file is both a tar and ZIP file. This behavior could result in confusing installation behavior, such as installing "incorrect" files according to the filename of the archive. New behavior only proceeds wit...
CVE-2026-3219
pip handles concatenated tar and ZIP files as ZIP files regardless of filename or whether a file is both a tar and ZIP file. This behavior could result in confusing installation behavior, such as installing "incorrect" files according to the filename of the archive. New behavior only proceeds wit...
CVE-2026-3219
CVE-2026-3219 : The issue affects the Python package installer, pip, which treats concatenated tar and ZIP archives as ZIP files regardless of the filename or whether a file is both a tar and a ZIP. The root cause is ambiguous archive identification that can lead to confusing installation behavio...
CGA-72XH-MQ7M-F2G4
Bulletin has no description...
MINI-MQHX-7PG4-JPVF
Bulletin has no description...
MINI-9FCM-3P85-P296
Bulletin has no description...
MINI-JX9P-P8W2-42FF
Bulletin has no description...
MINI-HC4P-F6FM-XFVM
Bulletin has no description...