126 matches found
SUSE CVE-2026-55998
The endpoint /v3/import/tokenclusterId.yaml retrieves the cluster object before validating the token. When a valid cluster ID references a cluster that has private registry secrets configured, a nil pointer dereference in pkg/systemtemplate/privateregistry.go causes the request to return HTTP 502...
SUSE CVE-2026-53541
unknown...
SUSE CVE-2026-53713
unknown...
SUSE CVE-2026-53999
unknown...
SUSE CVE-2026-55770
unknown...
UBUNTU-CVE-2026-61547
Unknown description...
SUSE CVE-2026-59901
Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.136.Final and 4.2.16.Final, the Bzip2Decoder handler in Netty's compression codec pipeline is vulnerable to a denial-of-service attack through a malformed bzip2 stream that permanently captures the...
UBUNTU-CVE-2026-50586
Unknown description...
SUSE CVE-2026-47304
unknown...
CVE-2026-61099
...
CVE-2026-61088
...
CVE-2026-60886
CVE-2026-60886 affects Oracle E-Business Suite Oracle Work in Process (Internal Operations) on versions 12.2.3–12.2.15. The vulnerability allows a low-privileged, network-accessible attacker (HTTP) to compromise Work in Process, requiring user interaction. Attacks can lead to unauthorized access ...
CVE-2026-60776
CVE-2026-60776 affects the Oracle Application Object Library (AOL) Generic Loader within Oracle E-Business Suite. Affected vendor/product: Oracle E-Business Suite AOL; affected component: AOL Generic Loader; affected versions: 12.2.3–12.2.15. Exploitation scenario: a highly privileged attacker wi...
CVE-2026-60668
...
CVE-2026-60547
CVE-2026-60547 : Vulnerability in Oracle Fusion Middleware’s Oracle Managed File Transfer (MFT Runtime Server). Affected: 12.2.1.4.0 and 14.1.2.0.0. An attacker with network access over HTTP and low privileges can compromise MFT, with potential impact across confidentiality, integrity, and availa...
CVE-2026-60378
CVE-2026-60378 affects Oracle Fusion Middleware Service Delivery Platform, Messaging Enabler component. Affected versions: 12.2.1.4.0 and 14.1.2.0.0. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the Service Delivery Platform, potentially taking o...
CVE-2026-60336
The CVE concerns Oracle E-Business Suite’s Oracle Project Manufacturing (PJM Command Center) on V16. It enables a highly privileged local attacker to compromise PJM, potentially creating/deleting/modifying critical data and gaining access to all PJM data. The CVSS v3.1 base score is 5.7 (Confiden...
CVE-2026-60212
The CVE affects Oracle Coherence (Core) within Oracle Fusion Middleware. Affected versions are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. The vulnerability allows an unauthenticated attacker with network access via TCP to compromise Oracle Coherence, potentially taking over the affected ...