CVE-2026-34268

CVE-2026-34268 affects Oracle Java SE and Oracle GraalVM family (Java SE: 8u481, 8u481-b50, 8u481-perf, 11.0.30, 17.0.18, 21.0.10, 25.0.2, 26; GraalVM for JDK: 17.0.18, 21.0.10; GraalVM EE: 21.3.17). The issue is described as a vulnerability that allows an unauthenticated attacker with local acce...

CVE-2026-34269

...

CVE-2026-22014

...

CVE-2026-22011

...

CVE-2026-22008

The CVE-2026-22008 entry affects Oracle Java SE Libraries, specifically Oracle Java SE version 25.0.1. The vulnerability permits an unauthenticated attacker, via network access over multiple protocols, to compromise Java SE and potentially perform unauthorized updates, inserts, or deletes to some...

CVE-2026-22006

...

CVE-2026-22002

...

CVE-2026-21998

...

CVE-2026-34980 affecting package cups for versions less than 2.4.17-1

CVE-2026-34980 affecting package cups for versions less than 2.4.17-1. An upgraded version of the package is available that resolves this issue...

Oracle VM VirtualBox 安全漏洞

Oracle VM VirtualBox is a virtual machine management software developed by Oracle Corporation. Version 7.2.6 of Oracle VM VirtualBox contains a security vulnerability. This vulnerability stems from issues with the Core component, which may allow attackers with high privileges to log in and execut...

GHSA-RP42-5VXX-QPWR vulnerabilities

Vulnerabilities for packages: kibana, opensearch-dashboards, wazuh-dashboard, opensearch-dashboards-fips, code-server...

DeepCool DeepCreative 安全漏洞

DeepCool DeepCreative is a creative design and control software platform for the hardware ecosystem developed by DeepCool Corporation in China. Versions of DeepCool DeepCreative prior to 1.2.7 contained security vulnerabilities. These vulnerabilities were caused by improper permission settings,...

PT-2026-33541

Movary is a self hosted web app to track and rate a user's watched movies. Prior to version 0.71.1, an ordinary authenticated user can escalate their own account to administrator by sending isAdmin=true to PUT /settings/users/userId for their own user ID. The endpoint is intended to let a user ed...

CVE-2026-6300 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-6301 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-40319 Giskard has a Regular Expression Denial of Service (ReDoS) in RegexMatching Check

Giskard is an open-source testing framework for AI models. In versions prior to 1.0.2b1, the RegexMatching check passes a user-supplied regular expression pattern directly to Python's re.search without any timeout or complexity guard. A crafted regex pattern can trigger catastrophic backtracking,...

CVE-2026-6303 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-5GRW-5P3C-HG2G vulnerabilities

Vulnerabilities for packages: chromium...

Exploit for CVE-2026-5059

No d...

Malicious code in relion-chain (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 650bf9452e7eaed5b89edb5f2af6208d4491aa079a90805fd6360b32ee6ff6d8 The package relion-chain was found to contain malicious code...