CVE-2026-64059

A flaw was found in the Linux kernel's network filesystem netfs component. The netfsperformwrite function, responsible for handling write operations, does not correctly manage private data associated with memory pages, known as folios. This improper handling can lead to memory leaks, where system...

CVE-2026-3182

Zohocorp ManageEngine Endpoint Central versions before 11.4.2528.34 are affected by cleartext transmission of sensitive information vulnerability...

CVE-2026-15811

A vulnerability was found in kronosnet's version =1.34 cryptographic configuration management. The framework does not correctly zero-out or wipe sensitive memory segments after executing changes to its cryptographic configuration. This omission leaves raw encryption keys resident in memory after...

webkit2gtk3 security update

An update is available for webkit2gtk3. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list WebKitGTK is the port of the portable web rendering engine WebKit to the...

CVE-2026-3182

CVE-2026-3182 affects Zohocorp ManageEngine Endpoint Central versions before 11.4.2528.34, with a vulnerability described as cleartext transmission of sensitive information. The CVSS v3.1 base score is 4.3 (Medium), and the issue is network-based with low privileges required and no user interacti...

CVE-2026-3182 Sensitive Data Exposure

Zohocorp ManageEngine Endpoint Central versions before 11.4.2528.34 are affected by cleartext transmission of sensitive information vulnerability...

CVE-2026-3182 Sensitive Data Exposure

Zohocorp ManageEngine Endpoint Central versions before 11.4.2528.34 are affected by cleartext transmission of sensitive information vulnerability...

CVE-2026-3182

Zohocorp ManageEngine Endpoint Central versions before 11.4.2528.34 are affected by cleartext transmission of sensitive information vulnerability...

EUVD-2026-46154

Zohocorp ManageEngine Endpoint Central versions before 11.4.2528.34 are affected by cleartext transmission of sensitive information vulnerability...

CVE-2026-16207

A vulnerability was detected in django-tastypie up to 0.15.1. Impacted is the function ApiKeyAuthentication of the file tastypie/authentication.py. The manipulation results in use of get request method with sensitive query strings. The attack can be launched remotely. This attack is characterized...

PT-2026-63174

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Order Management versions 12.2.4 through 12.2.15 Description A flaw in the Product Diagnostic Tools component allows a low privileged attacker with network access via HTTP to compromise the system. This can lead ...

PT-2026-62633

Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft Enterprise FIN Pay/Bill Management version 9.2 Description A flaw in the Paybill Management component allows a low-privileged attacker with access to the infrastructure where the software executes to compromise the system. Th...

PT-2026-63261

Name of the Vulnerable Software and Affected Versions Kibana affected versions not specified Description Missing authorization allows a user with limited feature privileges to access workflow execution outputs within their Kibana space. This occurs because the documented API does not properly...

CVE-2026-56579: Exposure of Sensitive Information to an Unauthorized Actor

HCL MyCloud was affected with License Key Revealed in HTTP Response. It may enable attackers to misuse the exposed information and compromise the application's security...

CVE-2026-47043: Exposure of Sensitive Information to an Unauthorized Actor

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.12. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle ...

CVE-2026-60339: Exposure of Sensitive Information to an Unauthorized Actor

Vulnerability in the Oracle Project Manufacturing product of Oracle E-Business Suite component: PJM Command Center. The supported version that is affected is V16. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Project...

CVE-2026-12547: Insertion of Sensitive Information Into Sent Data

SoupAuthManager caches proxy authentication credentials without scoping them to the proxy authority host:port. When the proxy configuration changes e.g., via system settings or WPAD, cached Proxy-Authorization headers from the previous proxy are sent to the new proxy, leaking credentials...

CVE-2026-3182: Cleartext Transmission of Sensitive Information

Zohocorp ManageEngine Endpoint Central versions before 11.4.2528.34 are affected by cleartext transmission of sensitive information vulnerability...

PT-2026-63313

Name of the Vulnerable Software and Affected Versions Gitea affected versions not specified Description The ToHook function in services/webhook/general.go decrypts the HeaderAuthorizationEncrypted field and returns the plaintext authorization header in the API response. This allows repository...

PT-2026-62090

Name of the Vulnerable Software and Affected Versions aiflowy versions prior to 2.1.3 Description A Cross Site Scripting XSS issue exists where a remote attacker can obtain sensitive information. The flaw is located within the UploadController.java file. Recommendations Update aiflowy to version...