315 matches found
Astra Linux – Vulnerability in tar
In GNU tar before version 1.35, mishandling of extension attributes in a PAX archive can cause the application to crash in xheader.c...
MINI-R63J-3GCM-C93V
Bulletin has no description...
MINI-Q7P7-842W-7J3R
Bulletin has no description...
HPLIP: HPLIP: Arbitrary code execution and privilege escalation via integer overflow in hpcups
A flaw was found in HP Linux Imaging and Printing Software HPLIP. An integer overflow in the hpcups processing path when handling crafted print data may lead to arbitrary code execution or privilege escalation on the affected system...
CVE-2026-62451
CVE-2026-62451 affects Oracle Work in Process within Oracle E-Business Suite (Internal Operations). Affected versions are 12.2.14–12.2.15. The vulnerability allows a low-privileged attacker with network access via HTTP to compromise Oracle Work in Process, leading to unauthorized creation, deleti...
CVE-2026-61161
...
CVE-2026-61117
...
CVE-2026-60824
CVE-2026-60824 affects Oracle E-Business Suite’s Oracle iSupport (component: Internal Operations). Affected versions are 12.2.3–12.2.15. The issue enables a low-privileged, network-adjacent attacker with HTTP access to compromise iSupport, with potential unauthorized access to all Oracle iSupport...
CVE-2026-60760
...
CVE-2026-60735
CVE-2026-60735 affects Oracle E-Business Suite, Oracle Sales Offline (Internal Operations) in versions 12.2.3–12.2.15. An attacker with low privilege gains network access via HTTP to compromise Oracle Sales Offline, enabling unauthorized creation, deletion or modification of data and potentially ...
CVE-2026-60712
...
CVE-2026-60703
The CVE-2026-60703 entry concerns Oracle Interaction Blending (Internal Operations) in Oracle E-Business Suite, affected on 12.2.3–12.2.15. A local, low-privileged attacker with logon can compromise Oracle Interaction Blending, potentially leading to unauthorized creation, deletion or modificatio...
CVE-2026-60669
The CVE-2026-60669 entry concerns Oracle PeopleSoft Enterprise HCM Global Payroll Mexico (component: Global Payroll for Mexico) with affected version 9.2. A low-privilege, network-accessible (via HTTP) attacker can access and modify data, potentially causing unauthorized data changes and a partia...
CVE-2026-60408
...
CVE-2026-60397
...
CVE-2026-60302
...
CVE-2026-47058
CVE-2026-47058 affects Oracle Java SE (Scripting) on 8u491, 8u491-perf, and 11.0.31. The vulnerability enables an unauthenticated attacker over network protocols to compromise data confidentiality and integrity, potentially leading to unauthorized creation, deletion, or modification of data. The ...
CVE-2026-47032
...
UBUNTU-CVE-2026-46640
Twig is a template language for PHP. From 3.15.0 until 3.26.0, self. and import-alias dynamic attribute syntax can concatenate an attacker-controlled string into a MacroReferenceExpression name without identifier validation, causing raw PHP to be emitted into the generated template source and...
