PT-2026-79311

Cross-site scripting vulnerability exists in Miraikan Assist App. If this vulnerability is exploited, an arbitrary script may be executed in the browser component WebView running on the affected product, resulting in the displayed content being altered...

ROS-20260821-73-0001

The vulnerability of the virtnetopen function in the virtionet component of the Linux operating system is related to incorrect initialization of the resource. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260821-73-0004

The vulnerability of the nftchainlookupbyid function in the net/netfilter/nftablesapi.c module of the netfilter component of the Linux operating system is related to the use of a previously released resource. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

PT-2026-79359

A weakness has been identified in Dolibarr up to 23.0.4. This affects an unknown part of the file htdocs/user/card.php of the component Account Handler. This manipulation of the argument ID causes improper authorization. The attack may be initiated remotely. The exploit has been made available to...

Oracle VM VirtualBox (August 2026 CSPU)

The 7.2.14 versions of VM VirtualBox installed on the remote host are affected by multiple vulnerabilities as referenced in the August 2026 CSPU advisory. - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.14...

Oracle E-Business Suite (August 2026 CSPU)

The versions of Oracle E-Business Suite installed on the remote host are affected by multiple vulnerabilities as referenced in the August 2026 CSPU advisory. - Vulnerability in the Oracle Payments product of Oracle E-Business Suite component: File Transmission. Supported versions that are affecte...

Apache Struts 6.x < 6.11.0 / 7.x < 7.3.0 Multiple Vulnerabilities (S2-072) (S2-074)

The version of Apache Struts installed on the remote host is 6.0.0 prior to 6.11.0, or 7.0.0 prior to 7.3.0. It is, therefore, affected by multiple denial of service vulnerabilities, as referenced in the S2-072 and S2-074 advisories: - When an application is configured to populate actions from a...

PT-2026-79290

A flaw was found in the clusterclaims-controller component of multicluster engine MCE. A tenant with standard permissions to create and delete ClusterClaim resources can exploit this by manipulating the spec.namespace field. This allows the tenant to specify and delete any ManagedCluster, includi...

The vulnerability of the OID LDAP Server component of the Oracle Internet Directory catalog service in the Oracle Fusion Middleware software platform allows a hacker to gain full control over the system.

The vulnerability of the OID LDAP Server component of the Oracle Internet Directory service in the Oracle Fusion Middleware software platform is related to insecure management of privileges. Exploiting this vulnerability could allow an attacker to gain full control over the system using the LDAP...

The vulnerability of the hp-bioscfg component of the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the hp-bioscfg component in the Linux operating system’s kernel is related to reading data from beyond the allowed buffer size. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the POST /api/v1/repos/{owner}/{repo}/merge-upstream component of the Git repository management system Gitea allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the POST /api/v1/repos/owner/repo/merge-upstream component of the Git repository management system Gitea is related to the lack of protection for service data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected...

AIX : Multiple Vulnerabilities (IJ59565)

The version of AIX installed on the remote host is prior to APAR IJ59565. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ59565 advisory. - IBM WebSphere Application Server 8.5, and 9.0 and IBM WebSphere Application Server - Liberty Continuous delivery has a flaw in...

AIX : Multiple Vulnerabilities (IJ59563)

The version of AIX installed on the remote host is prior to APAR IJ59563. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ59563 advisory. - IBM WebSphere Application Server 8.5, and 9.0 and IBM WebSphere Application Server - Liberty Continuous delivery has a flaw in...

Oracle Primavera P6 Enterprise Project Portfolio Management (August 2026 CSPU)

The version of Primavera P6 Enterprise Project Portfolio Management installed on the remote host is affected by a vulnerability as referenced in the August 2026 CSPU advisory. - Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and Engineerin...

openSUSE 16: MozillaFirefox / MozillaFirefox-branding-upstream / etc (openSUSE-SU-2026:21594-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21594-1 advisory. Update to Firefox Extended Support Release 140.14.0 ESR. - MFSA 2026-76 bsc1274867 CVE-2026-74934: Site isolation issue in the Graphics:...

PT-2026-79352

A path traversal vulnerability existed in the handling of MISP object template names during STIX 2 import and MISP-to-STIX 2 export. MISP object names are passed to PyMISP's object-template resolution mechanism, which constructs a filesystem path by joining the configured MISP object-template...

AIX : Multiple Vulnerabilities (IJ59566)

The version of AIX installed on the remote host is prior to APAR IJ59566. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ59566 advisory. - IBM WebSphere Application Server 8.5, and 9.0 and IBM WebSphere Application Server - Liberty Continuous delivery has a flaw in...

Apache Struts < 7.3.0 Multiple Vulnerabilities (S2-070) (S2-071)

The version of Apache Struts installed on the remote host is 7.2.1. It is, therefore, affected by multiple vulnerabilities in the JSON plugin, as referenced in the S2-070 and S2-071 advisories: - A component of the JSON plugin that holds per-request parsing state could be shared between concurren...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: xmlrpc-c (UTSA-2026-102697)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102697 advisory. XMLRPC-C Library versions 1.07 through 1.67.01 are vulnerable to a reflected cross-site scripting XSS vulnerability in the error page component. Tenable has extracte...

Oracle WebCenter Portal (August 2026 CSPU)

The 12.2.1.4.0 and 14.1.2.0.0 versions of WebCenter Portal installed on the remote host are affected by multiple vulnerabilities as referenced in the August 2026 CSPU advisory. - Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware component: Composer. Supported versio...