CVE-2026-46868

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager component: Extensibility Framework. Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows high privileged attacker with network access via HTTPS to compromis...

CVE-2026-46855

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager component: Metadata Plugin. Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle...

CVE-2026-46857

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager component: Oracle Management Service. Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromi...

CVE-2026-46832

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager component: Discovery Framework. Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise...

ROOT-OS-DEBIAN-13-CVE-2025-61729 CVE-2025-61729 in rootio-golang-1.24 - Patched by Root

Root has patched CVE-2025-61729 in the rootio-golang-1.24 package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-11824 CVE-2026-11824 in rootio-sqlite3 - Patched by Root

Root has patched CVE-2026-11824 in the rootio-sqlite3 package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-24450 CVE-2026-24450 in rootio-libraw - Patched by Root

Root has patched CVE-2026-24450 in the rootio-libraw package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-20889 CVE-2026-20889 in rootio-libraw - Patched by Root

Root has patched CVE-2026-20889 in the rootio-libraw package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-20884 CVE-2026-20884 in rootio-libraw - Patched by Root

Root has patched CVE-2026-20884 in the rootio-libraw package for Root:Debian:13. Multiple fixed versions available...

Bosch Security Systems IP Cameras Uncontrolled Resource Consumption (CVE-2023-32229)

Due to an error in the software interface to the secure element chip on Bosch IP cameras of family CPP13 and CPP14, the chip can be permanently damaged when enabling the Stream security option signing of the video stream with option MD5, SHA-1 or SHA-256. This plugin only works with Tenable.ot...

Bosch Security Systems IP Cameras NXP Chip Side-Channel Key Extraction (CVE-2021-3011)

Several Bosch IP cameras are built on a hardware platform that uses an NXP SmartMX/P5x secure element affected by an electromagnetic-wave side-channel vulnerability. An attacker with extended physical access to the device could recover the ECDSA private key and clone the device. The issue resides...

CVE-2026-54273 vulnerabilities

Vulnerabilities for packages: airflow, apache-beam-python-3.13-sdk, text-generation-inference, authentik-fips, apache-beam-python-3.11-sdk, awx, tritonserver-backend-vllm-cuda-12.9, py3-vllm-cuda-12.4, dask-kubernetes-fips, authentik, tritonserver-backend-vllm-cuda-13.0, mlflow-fips, mlflow,...

CVE-2026-54277 vulnerabilities

Vulnerabilities for packages: airflow, apache-beam-python-3.13-sdk, text-generation-inference, authentik-fips, apache-beam-python-3.11-sdk, awx, tritonserver-backend-vllm-cuda-12.9, py3-vllm-cuda-12.4, dask-kubernetes-fips, authentik, tritonserver-backend-vllm-cuda-13.0, mlflow-fips, mlflow,...

CVE-2026-54274 vulnerabilities

Vulnerabilities for packages: airflow, apache-beam-python-3.13-sdk, text-generation-inference, authentik-fips, apache-beam-python-3.11-sdk, awx, tritonserver-backend-vllm-cuda-12.9, py3-vllm-cuda-12.4, dask-kubernetes-fips, authentik, tritonserver-backend-vllm-cuda-13.0, mlflow-fips, mlflow,...

Grimoire

書 — The Pentesterʼs Spellbook Answer the questions. Unleash th...

pypdf: Possible infinite loop when retrieving fonts for layout-mode text extraction

Impact An attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires extracting the text in layout mode. Patches This has been fixed in pypdf==6.13.0. Workarounds If you cannot upgrade yet, consider applying the changes from PR 3830...

Infinite loop

Overview pypdf is an A pure-python PDF library capable of splitting, merging, cropping, and transforming PDF files Affected versions of this package are vulnerable to Infinite loop via the font retrieving. An attacker can cause the application to enter an infinite loop by crafting a specially...

postgresql: PostgreSQL: Credential recovery via covert timing channel in MD5 password comparison

A flaw was found in PostgreSQL. This vulnerability, a covert timing channel, exists in the comparison of MD5-hashed passwords during authentication. A remote attacker could exploit this to recover user credentials, gaining unauthorized access to the database. This issue specifically impacts...

PT-2026-49965

Name of the Vulnerable Software and Affected Versions Oracle Enterprise Manager Base Platform version 13.5 Oracle Enterprise Manager Base Platform version 24.1 Description An issue exists in the Oracle Management Service component of the Oracle Enterprise Manager Base Platform. This flaw allows a...

PT-2026-49960

Name of the Vulnerable Software and Affected Versions Oracle Enterprise Manager Base Platform version 13.5 Oracle Enterprise Manager Base Platform version 24.1 Description An issue exists in the Metadata Plugin component of the Oracle Enterprise Manager Base Platform. A low privileged attacker wi...