51663 matches found
PT-2026-78082
Name of the Vulnerable Software and Affected Versions Oracle Business Intelligence Enterprise Edition version 12.2.1.4.0 Description An issue exists in the BI Platform Security component of Oracle Analytics. A low privileged attacker with network access via HTTP can compromise the system...
PT-2026-77944
Name of the Vulnerable Software and Affected Versions Oracle Commerce Platform version 11.4.0 Description A flaw in the Dynamo Application Framework component allows an unauthenticated attacker with network access via TCP to compromise the system. Successful exploitation can lead to a complete...
PT-2026-78044
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics component: Platform Security. The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...
PT-2026-78046
Name of the Vulnerable Software and Affected Versions Oracle BI Publisher version 8.2.0.0.0 Oracle BI Publisher version 12.2.1.4.0 Oracle BI Publisher version 26.1.0.0.0 Description A security flaw in the BI Platform Security component allows a low privileged attacker with network access via HTTP...
PT-2026-77409
Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware Service Delivery Platform Messaging Enabler version 14.1.2.0.0 Description An unauthenticated attacker with network access via HTTP can compromise the Service Delivery Platform. This issue allows unauthorized read acce...
PT-2026-78050
Name of the Vulnerable Software and Affected Versions Oracle Business Intelligence Enterprise Edition version 8.2.0.0.0 Oracle Business Intelligence Enterprise Edition version 26.01.0.0.0 Description An issue exists in the BI Platform Security component of Oracle Analytics. An unauthenticated...
PT-2026-77408
Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware Service Delivery Platform Messaging Enabler version 14.1.2.0.0 Oracle Fusion Middleware Service Delivery Platform Messaging Enabler version 12.2.1.4.0 Description A flaw in the Messaging Enabler component allows a high...
PT-2026-77519
Name of the Vulnerable Software and Affected Versions Oracle BI Publisher version 8.2.0.0.0 Oracle BI Publisher version 12.2.1.4.0 Oracle BI Publisher version 26.01.0.0.0 Description A security flaw in the BI Platform Security component allows a low privileged attacker with network access via HTT...
PT-2026-78084
Name of the Vulnerable Software and Affected Versions Oracle Business Intelligence Enterprise Edition version 26.01.0.0.0 Description A flaw in the Platform Security component allows a low privileged attacker with access to the infrastructure where the software executes to compromise the system...
PT-2026-78109
Name of the Vulnerable Software and Affected Versions Oracle Business Intelligence Enterprise Edition version 26.01.0.0.0 Description A flaw in the Platform Security component allows a high privileged attacker with network access via HTTP to compromise the system. Successful exploitation can lead...
Linux Distros Unpatched Vulnerability : CVE-2026-72143
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - platform/x86: ISST: Restore SST-PP control to all domains The SST-PP control offset is only restored to power domain 0 after resume. During suspend, control...
CVE-2026-72094
A flaw was found in the Linux kernel's dma-fence subsystem. This vulnerability arises from a timing issue on weakly ordered platforms, where memory operations related to fence signaling and pointer nullification can occur out of order. This can lead to a NULL pointer dereference, potentially...
CVE-2026-64657 Budibase: Database Connector SQL Injections in PostgreSQL, MS SQL, and MySQL
Budibase is an open-source low-code platform. Prior to 3.39.19, the PostgreSQL datasource connector in packages/server/src/integrations/postgres.ts interpolates the user-controlled schema configuration field into a SET searchpath statement without escaping embedded double quotes, allowing an...
Important: Red Hat Security Advisory: Red Hat Ansible Automation Platform Execution Environments Update
An update is now available for Red Hat Ansible Automation Platform Execution Environments Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing IT automation at scale. IT Managers can provide top-down guidelines on how automation is applied to...
Important: Red Hat Security Advisory: Red Hat Ansible Automation Platform Execution Environments Update
An update is now available for Red Hat Ansible Automation Platform Execution Environments Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing IT automation at scale. IT Managers can provide top-down guidelines on how automation is applied to...
EUVD-2026-60060
A SQL Injection vulnerability in a legacy dashboard widget API in Google Cloud Google SecOps Chronicle SOAR versions prior to 6.3.85 on Google Cloud Platform allows an authenticated attacker to execute blind SQL queries using a crafted request parameter. This vulnerability was patched in version...
Exploit for CVE-2026-73678
CVE-2026-73678 — MindsDB Minds Platform Unauthenticated RCE C...
Security Bulletin: This Power System update is being released to address CVE-2026-17097
Summary Power Systems Firmware is affected by a vulnerability in the PowerVM hypervisor call interface. An attacker with root access to a guest partition can issue a specially crafted hypervisor call causing a virtual processor to become permanently unresponsive, requiring a full platform re-IPL ...
CVE-2026-74462
In the Linux kernel, the following vulnerability has been resolved: i2c: imx: mark I2C adapter when hardware is powered down On some i.MX platforms, certain I2C client drivers keep a periodic workqueue which continues to trigger I2C transfers. During system suspend/resume, there exists a time...