CVE-2026-18765

Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in Teracity Software Technologies Inc. E-OSB allows SQL Injection. This issue affects E-OSB: before V02.26.07.08.01...

CVE-2026-18765 SQL Injection in Teracity Sotware's Teracity E-OSB Platform

Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in Teracity Software Technologies Inc. E-OSB allows SQL Injection. This issue affects E-OSB: before V02.26.07.08.01...

EUVD-2026-69058

Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in Teracity Software Technologies Inc. E-OSB allows SQL Injection. This issue affects E-OSB: before V02.26.07.08.01...

CVE-2026-18765

Teracity Software Technologies E-OSB is vulnerable to SQL injection due to improper neutralization of special elements used in an SQL command. The flaw is exploitable over the network with no authentication or user interaction required, yielding a CVSS 3.1 score of 9.8 (CRITICAL) with high impact...

The vulnerability of the ocfs2_delete_osb() function in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the ocfs2deleteosb function in the Linux operating system is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

DEBIAN-CVE-2025-39842

In the Linux kernel, the following vulnerability has been resolved: ocfs2: prevent release journal inode after journal shutdown Before calling ocfs2deleteosb, ocfs2journalshutdown has already been executed in ocfs2dismountvolume, so osb-journal must be NULL. Therefore, the following calltrace wil...

UBUNTU-CVE-2025-39842

In the Linux kernel, the following vulnerability has been resolved: ocfs2: prevent release journal inode after journal shutdown Before calling ocfs2deleteosb, ocfs2journalshutdown has already been executed in ocfs2dismountvolume, so osb-journal must be NULL. Therefore, the following calltrace wil...

CVE-2025-39842

CVE-2025-39842 : In the Linux kernel, the ocfs2 path could dereference a NULL journal pointer when releasing an inode during journal shutdown. The root cause was calling jbd2_journal_release_jbd_inode() with osb->journal potentially NULL after ocfs2_journal_shutdown(). The fix is to add explic...

Malicious code in @zalastax/nolb-osb (npm)

The package @zalastax/nolb-osb was found to contain malicious code...

MAL-2025-12843 Malicious code in @zalastax/nolb-osb (npm)

The package @zalastax/nolb-osb was found to contain malicious code...

CVE-2024-21205

Vulnerability in the Oracle Service Bus product of Oracle Fusion Middleware component: OSB Core Functionality. The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Service Bus...

CVE-2017-10119

Vulnerability in the Oracle Service Bus component of Oracle Fusion Middleware subcomponent: OSB Web Console Design, Admin. The supported version that is affected is 11.1.1.9.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Servic...

CVE-2017-10119

CVE-2017-10119 affects Oracle Fusion Middleware Oracle Service Bus (OSB) Web Console Design, Admin subcomponent, specifically version 11.1.1.9.0. The vulnerability allows a low-privilege, network-accessing attacker (via HTTP) to compromise OSB; successful exploitation requires user interaction. I...