CVE-2026-60407

...

CVE-2026-60403

CVE-2026-60403 affects Oracle TimesTen In-Memory Database (Kubernetes Operator component) with vulnerable version 26.1.1.1.0. An attacker with network access over HTTPS and low privileges can cause the database to hang or crash (DoS). CVSS 3.1 base score 6.5 (A:H; AV:N; AC:L; PR:L). No explicit e...

CVE-2026-60403

...

CVE-2026-60399

The CVE-2026-60399 entry describes a vulnerability in Oracle GoldenGate (Receiver Service Executable). Affected versions are 19.1.0.0.0–19.30.0.0, 21.3–21.21, and 23.4–23.26.1. An attacker with network access over HTTP and low privileges can cause a hang or crash (DoS) of GoldenGate. CVSS v3.1 ba...

CVE-2026-60328

...

CVE-2026-60283

...

CVE-2026-60241

...

CVE-2026-60237

CVE-2026-60237 affects Oracle Coherence (Core) within Oracle Fusion Middleware. Affected versions are 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. The vulnerability allows an unauthenticated attacker with network access via TCP to read a subset of Oracle Coherence data. CVSS 3.1 base score is 5.3 (Con...

CVE-2026-60231

CVE-2026-60231 describes a vulnerability in Oracle Coherence (Core) within Oracle Fusion Middleware. Affected supported versions are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. The flaw allows a low-privilege attacker with network access over HTTP to compromise Coherence, enabling unautho...

CVE-2026-60219

...

CVE-2026-60197

...

CVE-2026-60186

...

CVE-2026-47032

CVE-2026-47032 affects Oracle Siebel CRM End User (component: Redwood UI). Affected versions: 24.4–26.3. The issue is exploitable with network access via HTTP by a high-privilege attacker and requires user interaction; may impact additional products (scope change) and can cause a partial denial o...

CVE-2026-47027

...

CVE-2026-46994

CVE-2026-46994 affects Oracle Enterprise Manager Base Platform (Oracle Enterprise Manager) - Agent Next Gen component. Affected supported versions are 13.5 and 24.1. The vulnerability allows an unauthenticated attacker with network access over HTTPS to compromise the Base Platform, potentially le...

CVE-2026-47709 libheif has a NULL pointer dereference in heif_image_handle_get_image_tiling for malformed unci image missing ispe

libheif is a HEIF and AVIF file format decoder and encoder. Versions prior to 1.22.0 crashes in the public C API heifimagehandlegetimagetiling when a malformed uncompressed HEIF image item has an associated uncC property but no associated ispe property. In debug builds this trips the ispe && uncC...

[SECURITY] [DLA 4690-1] xz-utils security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4690-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb July 20, 2026 https://wiki.debian.org/LTS -...

CVE-2026-59892

creationtimestamp| type| source ---|---|--- 2026-07-21 20:35:11+00:00| published-proof-of-concept| https://github.com/open-telemetry/opentelemetry-js/security/advisories/GHSA-45rx-2jwx-cxfr...

GHSA-F283-GHQC-FG79 vulnerabilities

Vulnerabilities for packages: nextcloud-server, drupal, privatebin...

GHSA-J3F2-48V5-CCWW vulnerabilities

Vulnerabilities for packages: langfuse-fips, cadence-web, vitess, homepage, jitsucom-jitsu, opentelemetry-auto-instrumentations-node, pulumi, kubeflow-centraldashboard, thingsboard-fips, kibana, librechat, nemo...