9219 matches found
CVE-2026-21942
CVE-2026-21942 is a vulnerability in Oracle Solaris (Filesystems component) affecting Solaris 10 and 11. The issue, described as a local-privilege exposure that requires user interaction, can lead to a hang or frequent crash (complete DOS) of Solaris. CVSSv3.1 base score is 5.0 (AV:L/AC:L/PR:L/UI...
CVE-2026-21945
...
CVE-2026-21943
...
CVE-2026-21939
...
CVE-2026-21937
CVE-2026-21937 affects Oracle MySQL Server (Server: DDL) with affected versions 8.0.0–8.0.44, 8.4.0–8.4.7 and 9.0.0–9.5.0. The vulnerability allows a high-privileged, network-accessible attacker via multiple protocols to cause a hang or a frequent, repeatable crash (complete DOS) of MySQL Server....
CVE-2026-21934
...
CVE-2026-21934
The CVE-2026-21934 issue affects Oracle PeopleSoft Enterprise PeopleTools (Push Notifications). Affected versions are 8.60, 8.61 and 8.62. A low-privileged, unauthenticated attacker on the network via HTTP can exploit this flaw to modify or delete data and gain unauthorized read access to certain...
CVE-2026-21930
...
CVE-2026-21928
The CVE-2026-21928 vulnerability affects Oracle Solaris (Kernel) on Solaris 11. An unauthenticated attacker can exploit over a network (TCP) to read a subset of data from the system. The issue is rooted in the Kernel component; attack impact is Confidentiality (read access) with a CVSS v3.1 base ...
CVE-2026-21926
...
CVE-2026-21925
...
CVE-2026-21923
...
CVE-2026-21924
...
EUVD-2026-3324
HackerOne community member Patrick Lang 7yr has reported a reflected XSS vulnerability in the banner-acl.php and channel-acl.php scripts of Revive Adserver. An attacker can craft a specific URL that includes an HTML payload in a parameter. If a logged in administrator visits the URL, the HTML is...
EUVD-2026-3330
HackerOne community member Patrick Lang 7yr has reported a reflected XSS vulnerability in the banner-acl.php script of Revive Adserver. An attacker can craft a specific URL that includes an HTML payload in a parameter. If a logged in administrator visits the URL, the HTML is sent to the browser a...
EUVD-2026-3323
A malformed HTTP/2 HEADERS frame with oversized, invalid HPACK data can cause Node.js to crash by triggering an unhandled TLSSocket error ECONNRESET. Instead of safely closing the connection, the process crashes, enabling a remote denial of service. This primarily affects applications that do not...
EUVD-2026-3334
A flaw in Node.js's permission model allows Unix Domain Socket UDS connections to bypass network restrictions when --permission is enabled. Even without --allow-net, attacker-controlled inputs such as URLs or socketPath options can connect to arbitrary local sockets via net, tls, or undici/fetch...
EUVD-2026-3339
We have identified a bug in Node.js error handling where "Maximum call stack size exceeded" errors become uncatchable when asynchooks.createHook is enabled. Instead of reaching process.on'uncaughtException', the process terminates, making the crash unrecoverable. Applications that rely on...
