141985 matches found
CVE-2026-60231
CVE-2026-60231 describes a vulnerability in Oracle Coherence (Core) within Oracle Fusion Middleware. Affected supported versions are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. The flaw allows a low-privilege attacker with network access over HTTP to compromise Coherence, enabling unautho...
CVE-2026-60219
...
CVE-2026-60197
...
CVE-2026-47032
CVE-2026-47032 affects Oracle Siebel CRM End User (component: Redwood UI). Affected versions: 24.4–26.3. The issue is exploitable with network access via HTTP by a high-privilege attacker and requires user interaction; may impact additional products (scope change) and can cause a partial denial o...
CVE-2026-47027
...
CVE-2026-46994
CVE-2026-46994 affects Oracle Enterprise Manager Base Platform (Oracle Enterprise Manager) - Agent Next Gen component. Affected supported versions are 13.5 and 24.1. The vulnerability allows an unauthenticated attacker with network access over HTTPS to compromise the Base Platform, potentially le...
CVE-2026-47709 libheif has a NULL pointer dereference in heif_image_handle_get_image_tiling for malformed unci image missing ispe
libheif is a HEIF and AVIF file format decoder and encoder. Versions prior to 1.22.0 crashes in the public C API heifimagehandlegetimagetiling when a malformed uncompressed HEIF image item has an associated uncC property but no associated ispe property. In debug builds this trips the ispe && uncC...
[SECURITY] [DLA 4690-1] xz-utils security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-4690-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb July 20, 2026 https://wiki.debian.org/LTS -...
CVE-2026-59892
creationtimestamp| type| source ---|---|--- 2026-07-21 20:35:11+00:00| published-proof-of-concept| https://github.com/open-telemetry/opentelemetry-js/security/advisories/GHSA-45rx-2jwx-cxfr...
GHSA-F283-GHQC-FG79 vulnerabilities
Vulnerabilities for packages: drupal, nextcloud-server, privatebin...
GHSA-J3F2-48V5-CCWW vulnerabilities
Vulnerabilities for packages: homepage, kibana, langfuse-fips, cadence-web, librechat, kubeflow-centraldashboard, vitess, thingsboard-fips, pulumi, opentelemetry-auto-instrumentations-node, jitsucom-jitsu...
GHSA-V422-HMWV-36X6 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines, json-server, sqlpad, langfuse, argo-workflows, tileserver-gl, kubeflow-centraldashboard...
GHSA-CVVH-RHRC-WG4Q vulnerabilities
Vulnerabilities for packages: powershell, promitor, dotnet-sdk, dotnet...
GHSA-G8R8-53C2-PM3F vulnerabilities
Vulnerabilities for packages: powershell, promitor, dotnet-sdk, dotnet...
GHSA-23RF-6693-G89P vulnerabilities
Vulnerabilities for packages: powershell, promitor, dotnet-sdk, dotnet...
CVE-2026-55082
DHIS2 is a flexible information system for data capture, management, validation, analytics and visualization. DHIS2 SQL View data endpoints allowed authenticated users with SQL View access to provide crafted filter values that were interpolated into generated SQL. An authenticated user with acces...
GHSA-J8GR-8FP3-5Q5H Microsoft Security Advisory CVE-2026-56170 – .NET Denial of Service Vulnerability
Microsoft Security Advisory CVE-2026-56170 – .NET Denial of Service Vulnerability Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in ASP.NET Core SignalR Microsoft.AspNetCore.App.Runtime. This advisory also provides guidance on what...
Microsoft Security Advisory CVE-2026-56170 – .NET Denial of Service Vulnerability
Microsoft Security Advisory CVE-2026-56170 – .NET Denial of Service Vulnerability Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in ASP.NET Core SignalR Microsoft.AspNetCore.App.Runtime. This advisory also provides guidance on what...
Microsoft Security Advisory CVE-2026-47303 – .NET Elevation of Privilege Vulnerability
Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in ASP.NET Core Negotiate Authentication Microsoft.AspNetCore.Authentication.Negotiate. This advisory also provides guidance on what developers can do to update their applications to remov...
GHSA-2969-4Q4W-W5H3 Microsoft Security Advisory CVE-2026-50650 – .NET Elevation of Privilege Vulnerability
Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Windows Presentation Foundation WPF. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. An elevation of privilege...