PT-2026-62905

Name of the Vulnerable Software and Affected Versions Oracle Project Portfolio Analysis versions 12.2.3 through 12.2.15 Description An issue exists in the Internal Operations component of the Oracle Project Portfolio Analysis product within Oracle E-Business Suite. A low privileged attacker with...

PT-2026-63204

Name of the Vulnerable Software and Affected Versions Oracle Flow Manufacturing versions 12.2.13 through 12.2.15 Description An issue exists in the Internal Operations component of the Oracle Flow Manufacturing product of Oracle E-Business Suite. A low privileged attacker with network access via...

PT-2026-62834

Name of the Vulnerable Software and Affected Versions Oracle Advanced Pricing versions 12.2.14 through 12.2.15 Description An issue exists in the Pricing Installation component of Oracle Advanced Pricing within Oracle E-Business Suite. A low privileged attacker with network access via HTTP can...

PT-2026-63087

Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft Enterprise SCM eProcurement version 9.2 Description An issue exists in the Manage Requisition Status component that allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful...

PT-2026-62605

Name of the Vulnerable Software and Affected Versions Oracle WebCenter Portal version 12.2.1.4.0 Oracle WebCenter Portal version 14.1.2.0.0 Description A flaw in the Runtime Tools component of Oracle Fusion Middleware allows a low privileged attacker with network access via HTTP to compromise the...

PT-2026-62237

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox version 7.2.12 Description A flaw in the Core component allows a high privileged attacker with access to the infrastructure where the software executes to compromise the system. Successful exploitation can result in a full...

PT-2026-62654

Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft PeopleSoft Enterprise CS Campus Community version 9.2.38 Description A security flaw in the Security component allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful exploitation...

PT-2026-62849

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Payroll versions 12.2.3 through 12.2.15 Description A flaw in the Internal Operations component allows a low privileged attacker with network access via HTTP to compromise the system. Successful exploitation can...

PT-2026-62790

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle E-Business Intelligence versions 12.2.3 through 12.2.15 Description An issue exists in the Internal Operations component of the Oracle E-Business Intelligence product. A high privileged attacker with network acce...

PT-2026-62183

Name of the Vulnerable Software and Affected Versions Oracle Product Hub versions 12.2.3 through 12.2.15 Description An issue exists in the Item Catalog component of Oracle Product Hub. A low privileged attacker with network access via HTTP can compromise the system, potentially leading to...

PT-2026-62701

Vulnerability in the PeopleSoft Enterprise HCM Global Payroll Switzerland product of Oracle PeopleSoft component: Global Payroll for Switzerland. The supported version that is affected is 9.2. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to...

Amazon Linux 2 : golist, --advisory ALAS2-2026-3818 (ALAS-2026-3818)

The version of golist installed on the remote host is prior to 0.10.1-10. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3818 advisory. On Unix systems, opening a file in an os.Root improperly follows symlinks to locations outside of the Root when the final...

Amazon Linux 2 : yelp, --advisory ALAS2-2026-3821 (ALAS-2026-3821)

The version of yelp installed on the remote host is prior to 3.28.1-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3821 advisory. A flaw was found in Yelp due to an overly permissive Content Security Policy CSP implementation provided by yelp-xsl. A malicious...

Amazon Linux 2 : krb5, --advisory ALAS2-2026-3798 (ALAS-2026-3798)

It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3798 advisory. An integer underflow vulnerability was found in MIT krb5 in the berval2tldata function in plugins/kdb/ldap/libkdbldap/ldapprincipal2.c. The function performs an unsigned subtraction bvlen - 2 without a...

Amazon Linux 2 : amazon-ssm-agent, --advisory ALAS2-2026-3809 (ALAS-2026-3809)

The version of amazon-ssm-agent installed on the remote host is prior to 3.3.4624.0-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3809 advisory. An authenticated SSH client that repeatedly opened channels which were rejected by the server caused unbound...

EulerOS Virtualization 2.12.1 (EulerOS-SA-2026-2754)

According to the versions of the package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Requests is a HTTP library. Prior to version 2.33.0, the requests.utils.extractzippedpaths utility function uses a predictable filename whe...

Amazon Linux 2 : xorg-x11-server, --advisory ALAS2-2026-3806 (ALAS-2026-3806)

It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3806 advisory. glamor Font Atlas Heap Buffer Overflow CVE-2026-55999 Tenable has extracted the preceding description block directly from the tested product security advisory. Note that Nessus has not tested for this iss...

Amazon Linux 2 : python, --advisory ALAS2-2026-3810 (ALAS-2026-3810)

The version of python installed on the remote host is prior to 2.7.18-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3810 advisory. When using the tarfile module with a file opened in streaming mode mode=r| the tarfile module did not properly handle EOF, making...

nginx security update

1.26.3-6.0.1.el102.5 - Reference oracle-indexhtml within Requires Orabug: 33802044 2:1.26.3-6.5 - Resolves: RHEL-191778 - nginx: 'HTTP/2 bomb' nginx fix breaks module ABI causing crashes - Resolves: RHEL-188402 - nginx: NGINX: Arbitrary code execution or. Denial of Service via heap-based buffer...

PT-2026-63078

Name of the Vulnerable Software and Affected Versions Oracle Agile Engineering Data Management version 6.2.1 Description A flaw in the Core component of the Oracle Agile Engineering Data Management product allows a low privileged attacker with network access via TCP to compromise the system...