Oracle Retail Integration Bus RIB Kernal Full Control

The vulnerability of the RIB Kernal component in the XML-based asynchronous messaging integration platform of Oracle Retail Integration Bus is related to insecure privilege management. Exploiting this vulnerability could allow an attacker to gain full control over the application using the HTTP...

Oracle Application Testing Suite Full Control

The vulnerability of the installation service Install of the Oracle Application Testing Suite relates to insecure management of privileges. Exploiting this vulnerability could allow a malicious actor to gain full control over the application using the Oracle Net protocol...

Oracle Enterprise Manager Base Platform Unauthorized Access

The vulnerability of the UI Framework component of the Oracle Enterprise Manager Base Platform is related to insecure management of privileges. Exploiting this vulnerability could allow an attacker to gain unauthorized access to read, modify, or delete data, as well as cause service failures usin...

ksmbd DoS

The vulnerability of the ksmbd component in the Linux operating system’s kernel is related to the lack of data security mechanisms. Exploiting this vulnerability can allow an attacker to cause service failures...

Siebel Approval Manager Data Compromise

The vulnerability of the Siebel Approval Manager component, a tool for configuring, customizing, and integrating CRM systems, is related to insecure privilege management. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...

Enterprise Config Management Full Control

The vulnerability of the Enterprise Config Management component of the Oracle Enterprise Manager Base Platform is related to improper authentication. Exploiting this vulnerability can allow a malicious actor to gain full control over the application using the HTTPS protocol...

Metadata Plugin Oracle Enterprise Manager Data Compromise

The vulnerability of the Metadata Plugin component of the Oracle Enterprise Manager Base Platform is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information by using t...

OpenScript Package Full Control

The vulnerability of the OpenScript package in the Oracle Application Testing Suite software automation suite is related to insecure management of privileges. Exploiting this vulnerability could allow a malicious actor to gain full control over the application using the TCP protocol...

Metadata Plugin Oracle Enterprise Manager Data Compromise

The vulnerability of the Metadata Plugin component of the Oracle Enterprise Manager Base Platform is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

Oracle Enterprise Manager Base Platform Full Control

The vulnerability of the Agent Next Gen component of the Oracle Enterprise Manager Base Platform software platform is related to insecure management of privileges. Exploiting this vulnerability could allow a malicious actor to gain full control over the application using the HTTPS protocol...

Bill Issues Component Full Control

The vulnerability of the Bill Issues component in the Oracle Materials Management module, which handles material specifications, product composition, and technological processes, is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain full contr...

AlmaLinux 10 : freerdp (ALSA-2026:54486)

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:54486 advisory. FreeRDP: FreeRDP: Remote code execution or denial of service via heap-based buffer overflow CVE-2026-64620 FreeRDP: FreeRDP: Double-free vulnerability v...

SAP NetWeaver Memory Corruption (3714806)

The version of the SAP NetWeaver kernel detected on the remote host is affected by a memory corruption vulnerability as referenced in SAP Security Note 3714806: - SAP NetWeaver Application Server ABAP allows an unauthenticated attacker to exploit logical errors in DIAG protocol parsing, resulting...

DEBIAN-CVE-2026-56862

Handshake messages, such as KeyUpdate, are always considered as state-advancing, regardless of whether a handshake has been completed or not. As a result, a malicious client can keep sending KeyUpdate messages to force the server to keep performing key derivation operations indefinitely...

CVE-2026-17076

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to improper processing of DRDA and DDM resynchronization requests...

EUVD-2026-58394

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to improper processing of DRDA and DDM resynchronization requests...

CRLF Injection

Overview Affected versions of this package are vulnerable to CRLF Injection via the name-converter process for uid/gid mapping. An attacker can manipulate protocol messages by injecting newline characters into user or group names, causing the daemon to interpret attacker-controlled data as valid...

User Impersonation

Overview Affected versions of this package are vulnerable to User Impersonation via the PROXY protocol header. An attacker can gain unauthorized access by sending a crafted header with a forged source IP address, thereby bypassing IP-based access controls. Remediation A fix was pushed into the...

gstreamer1-plugins-bad-free: gstreamer: rfbsrc/librfb Hextile heap out-of-bounds write with 16bpp framebuffer

A heap buffer overflow vulnerability was found in GStreamer's rfbsrc plugin. When a client connects to a malicious RFB/VNC server that advertises a 16bpp framebuffer and sends Hextile-encoded updates, the Hextile background fill path writes 32-bit pixel values into a buffer allocated for 16-bit...

USN-8630-2 linux-lowlatency, linux-lowlatency-hwe-6.8, linux-nvidia-tegra, linux-oracle vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - x86 architecture; - InfiniBand drivers; - Network drivers; - Mellanox network drivers; - File systems infrastructur...