151417 matches found
UBUNTU-CVE-2026-47064
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Easily exploitable vulnerability allows low privilege...
CVE-2026-56819 Netty: HTTP/2 decompression leaks ByteBuf reference count when the decompressor channel is already closed (Direct memory leak / OOM DoS)
Netty is a network application framework for development of protocol servers and clients. In versions 4.2.0.Final through 4.2.15.Final and 4.1.0.Final through 4.1.135.Final, a remote unauthenticated peer can leak one direct ByteBuf per HTTP/2 DATA frame in applications that enable HTTP/2 content...
CVE-2026-16414
Insufficient validation of untrusted input in Chromecast in Google Chrome prior to 150.0.7871.182 allowed a local attacker to potentially perform a sandbox escape via malicious network traffic. Chromium security severity: High...
GHSA-44QC-PGVP-WX7V Gitea: Notification API leaks private issue metadata after access revocation
Summary An information disclosure issue in the Gitea Notification API allows users who have lost access to a private repository to continue accessing private issue or pull request information through existing notification threads. Although repository information is hidden after access revocation,...
EUVD-2026-41603
Gitea: Notification API leaks private issue metadata after access revocation...
CVE-2026-62567
...
CVE-2026-62567
...
CVE-2026-62562
...
CVE-2026-62548
The CVE-2026-62548 vulnerability affects the Oracle HRMS (US) component of Oracle E-Business Suite (Internal Operations). Affected versions are 12.2.3–12.2.15. The issue allows a high-privilege attacker with network access via HTTP to compromise Oracle HRMS (US), with potential takeover (as state...
CVE-2026-62549
...
CVE-2026-62521
The CVE-2026-62521 entry concerns Oracle E-Business Suite, Oracle HRMS (US) Payroll General. Affected products/versions are Oracle E-Business Suite 12.2.7–12.2.15. The vulnerability permits an unauthenticated attacker with network access via HTTP to compromise Oracle HRMS (US), potentially leadin...
CVE-2026-62517
The CVE-2026-62517 entry concerns the Oracle E-Business Suite Oracle Production Scheduling product (Internal Operations component). Affected are versions 12.2.3 through 12.2.15. The flaw is described as unauthenticated-over-network via HTTP with user interaction required, potentially allowing acc...
CVE-2026-62507
...
CVE-2026-62507
CVE-2026-62507 affects Oracle Time and Labor (Internal Operations) in Oracle E-Business Suite, versions 12.2.3–12.2.15. The vulnerability can be exploited by a low-privileged attacker with network access via HTTP to compromise data integrity, enabling unauthorized creation, deletion or modificati...
CVE-2026-62487
CVE-2026-62487 affects Oracle Contracts Integration in Oracle E-Business Suite (12.2.3–12.2.15). An unauthenticated, network-accessible via HTTP attacker can exploit with required user interaction to cause unauthorized updates/deletes and reads of Oracle Contracts Integration data. CVSS 3.1 base ...
CVE-2026-62482
...
CVE-2026-62473
...
CVE-2026-61289
...