444 matches found
SUSE CVE-2026-75029
In a query response, an attacker may send named multiple copies of a record that should only exist once such as an SOA record. If the RDATA is the same on all the copies, the record is appended to the in-memory RDATA set, which can cause increased memory usage of the negative cache and possibly...
ALPINE-CVE-2026-75029
In a query response, an attacker may send named multiple copies of a record that should only exist once such as an SOA record. If the RDATA is the same on all the copies, the record is appended to the in-memory RDATA set, which can cause increased memory usage of the negative cache and possibly...
AZL-103353 CVE-2026-75029 affecting package bind 9.20.26-1
In a query response, an attacker may send named multiple copies of a record that should only exist once such as an SOA record. If the RDATA is the same on all the copies, the record is appended to the in-memory RDATA set, which can cause increased memory usage of the negative cache and possibly...
CVE-2026-75029
In a query response, an attacker may send named multiple copies of a record that should only exist once such as an SOA record. If the RDATA is the same on all the copies, the record is appended to the in-memory RDATA set, which can cause increased memory usage of the negative cache and possibly...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: unbound (UTSA-2026-104802)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104802 advisory. In NLnet Labs Unbound up to and including version 1.25.1, when the validator builds the canonical RDATA form for an RRSIG-covered PX/RP/MINFO/SOA RRset, it computes...
CVE-2026-61002
Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware component: B2B Engine. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle SOA Suite...
EUVD-2026-61301
Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware component: B2B Engine. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle SOA Suite...
CVE-2026-61002: Improper Access Control
Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware component: B2B Engine. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle SOA Suite...
PT-2026-77457
Name of the Vulnerable Software and Affected Versions Oracle SOA Suite versions 12.2.1.4.0 Oracle SOA Suite versions 14.1.2.0.0 Description A flaw in the B2B Engine component of Oracle Fusion Middleware allows a low privileged attacker with network access via HTTP to compromise the system...
AZL-92940 CVE-2026-56416 affecting package unbound for versions less than 1.25.2-1
In NLnet Labs Unbound up to and including version 1.25.1, when the validator builds the canonical RDATA form for an RRSIG-covered PX/RP/MINFO/SOA RRset, it computes the address of the second embedded domain name as 'datstart + dnamevaliddatstart, ...' and passes it straight to 'querydnametolower'...
EUVD-2026-46934
Vulnerability in the Oracle E-Business Suite Integrated SOA Gateway product of Oracle E-Business Suite component: Web Service Provider. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromi...
EUVD-2026-46900
Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware component: Enterprise Scheduling System. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...
EUVD-2026-46901
Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware component: Integration Business Insight. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...
EUVD-2026-46903
Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware component: Enterprise Scheduling System. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...
EUVD-2026-46905
Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware component: B2B Engine. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle SOA Suite...
EUVD-2026-46910
Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware component: Integration Business Insight. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...
CVE-2026-60548
Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware component: Integration Business Insight. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...
CVE-2026-60546
Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware component: Integration Business Insight. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle...
CVE-2026-60540
Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware component: Integration Business Insight. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...
CVE-2026-60541
Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware component: Enterprise Scheduling System. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...