OpenMetaData - SpEL Injection in PUT /api/v1/policies

OpenMetadata is a unified platform for discovery, observability, and governance powered by a central metadata repository, in-depth lineage, and seamless team collaboration. CompiledRule::validateExpression is also called from PolicyRepository.prepare. prepare is called from...

CVE-2026-51256

DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

Linux Distros Unpatched Vulnerability : CVE-2026-17901

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient validation of untrusted input in Sharing in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to bypass navigation...

CVE-2015-0077

creationtimestamp| type| source ---|---|--- 2026-07-29 12:01:36+00:00| seen| Telegram/PjuRxPzvGjVabf4gPWbBh7F8WJi6OJk2WzpXql3KPPBgA 2026-07-30 00:01:58+00:00| seen| Telegram/PjuRxPzvGjVabf4gPWbBh7F8WJi6OJk2WzpXql3KPPBgA 2026-08-01 12:00:07+00:00| seen|...

BELL-CVE-2026-64264

Bulletin has no description...

BELL-CVE-2026-64430

Bulletin has no description...

PT-2026-65832

VMware vCenter contains an authentication bypass vulnerability in the VMware Directory Service. A malicious actor with network access to vCenter may exploit this issue to bypass authentication and gain unauthorized access to the system...

DEBIAN-CVE-2026-62436

This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. With the introduction of Grant Table v2 came the requirement to be able to switch between versions. Switching from v1 to v2 reduces the number of valid grant references, ...

MINI-C67V-V83R-VF2C

Bulletin has no description...

GHSA-J5G9-F88F-GFJ3 vulnerabilities

Vulnerabilities for packages: openstack-glance-2025.2, openstack-placement-2025.1, openstack-keystone-2025.2-fips, authentik-fips, openstack-placement-2025.2-fips, openstack-placement-2026.1-fips, openstack-horizon-2025.1, openstack-glance-2025.1, openstack-glance-2025.1-fips,...

EUVD-2026-48566

NULL Pointer Dereference vulnerability in Apache NimBLE in LE Long Term Key Request event. This requires disabled asserts otherwise assert would trigger before NULL dereference and bogus or misbehaving controller, thus severity is low. This issue affects Apache NimBLE: through 1.9.0. Users are...

RHSA-2026:43401 Red Hat Security Advisory: Red Hat JBoss Web Server 6.2.4 release and security update

Bulletin has no description...

MINI-5223-M8RJ-5H7H

Bulletin has no description...

CVE-2026-60373

The CVE-2026-60373 entry concerns Oracle Platform Security for Java (Oracle Fusion Middleware) with the affected component Centralized Thirdparty Jars. Affected versions are 12.2.1.4.0 and 14.1.2.0.0. The vulnerability allows a low-privileged attacker who can reach the system over HTTP to comprom...

CVE-2026-54478

creationtimestamp| type| source ---|---|--- 2026-07-22 14:25:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrajplbshj2s...

CVE-2026-58445

creationtimestamp| type| source ---|---|--- 2026-07-21 22:35:54+00:00| published-proof-of-concept| https://github.com/go-gitea/gitea/security/advisories/GHSA-pgqf-926r-548m...

CVE-2026-62530

Vulnerability in the Oracle HRMS France product of Oracle E-Business Suite component: French HR. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle HRMS France. Successful attac...

CVE-2026-62515

...

CVE-2026-62497

...

CVE-2026-61304

CVE-2026-61304 concerns Oracle Price Protection in Oracle E-Business Suite (Internal Operations) affected on 12.2.3–12.2.15. The vulnerability allows a low-privilege, network-accessible attacker (via HTTP) to achieve unauthorized update/insert/delete and read access to Oracle Price Protection dat...