2026

Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component: Market Place). Supported ve

Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Command Line - RapidClon

Vulnerability in the Oracle Price Protection product of Oracle E-Business Suite (component: Internal Operations). Suppo

Information disclosure in Bosch Configuration Manager in Version 7.72.0106 allows an attacker to access sensitive inform

In JetBrains WebStorm before 2026.2 arbitrary code execution was possible before granting project trust via project-loca

In JetBrains WebStorm before 2026.2 arbitrary code execution was possible before granting project trust via project-loca

In JetBrains WebStorm before 2026.2 arbitrary code execution was possible before granting project trust via the configur

In JetBrains PhpStorm before 2026.2 arbitrary code execution was possible before granting project trust via project tool

In JetBrains PhpStorm before 2026.2 arbitrary code execution was possible before granting project trust via the configur

Exim before 4.99.5 allows directory traversal to access files outside of the spool area, and consequently gain privilege

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: hyper-v: Bound the bank index when queryi

In the Linux kernel, the following vulnerability has been resolved: ALSA: virtio: Validate control metadata from the de

In the Linux kernel, the following vulnerability has been resolved: firmware: arm_ffa: Bound PARTITION_INFO_GET_REGS co

An OS Command Injection vulnerability in Progress Software LoadMaster, ECS Connection Manager, Object Scale Connection M

An OS Command Injection vulnerability in Progress Software LoadMaster, ECS Connection Manager, Object Scale Connection M

An OS Command Injection vulnerability in Progress Software LoadMaster, ECS Connection Manager, Object Scale Connection M

SiYuan before v3.7.2 fails to escape the title-img Individual Attribute List value when rendering Gallery and Kanban cov

In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: reject overflowing copy + len in bpf_

In the Linux kernel, the following vulnerability has been resolved: virtio-net: fix len check in receive_big() receive

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.0 before 19.0.5, 19.1 before 19.1.3, and 1

Use after free in Updater in Google Chrome on Mac prior to 151.0.7922.72 allowed a local attacker to perform privilege e

Inappropriate implementation in Chromoting in Google Chrome on Linux prior to 151.0.7922.72 allowed a local attacker to

A flaw in Node.js Permission Model enforcement can over-grant filesystem access across radix-tree prefix boundaries.

IBM PowerVM Hypervisor FW1110.00 through FW1110.20, FW1060.00 through FW1060.71, and FW950.00 through FW950.H1 A careful

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to buffer overflow in setgid helper db2flacc.

GitPython before 3.1.51 fails to guard against dangerous Git options passed as keyword arguments in Repo.archive() and g

An issue in Vim Project v9.2.0389 and earlier allows a local attacker to execute arbitrary code via the vms_fixfilename(

The affected Thermo Fisher Applied Biosystems Genetic Analyzers are vulnerable because .fsa/.hid output files can be ed

An improper access control vulnerability in CatchPulse could allow a non-administrative local attacker to connect to an

A flaw was found in GIMP's PSD file format plugin. This vulnerability, an unsigned integer underflow in the `block_rem`

In the Linux kernel, the following vulnerability has been resolved: fs: preserve ACL_DONT_CACHE state in forget_cached_

In the Linux kernel, the following vulnerability has been resolved: misc: nsm: only unlock nsm_dev on post-lock error p

In the Linux kernel, the following vulnerability has been resolved: usb: musb: omap2430: Do not put borrowed of_node in

Dokploy is a free, self-hostable Platform as a Service (PaaS). From 0.28.7 until 0.29.13, the server.remove tRPC mutatio

tls_opt_dtls_peer_connection_id_value_get() in subsys/net/lib/sockets/sockets_tls.c, which handles getsockopt(SOL_TLS, T

Google Turbinia allows arbitrary command execution via worker tasks. An attacker with privileges to submit a processing

is affected by a Use of Hard-coded Cryptographic Key vulnerability that could result in a Security feature bypass. A low

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

An insecure handling of serialized objects vulnerability was found in the one of the service of GMS application 9.5.1 (B

CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 fails to validate the integrity of the DataStore, a non-partition

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to buffer overflow in the IXF IMPORT parser.

amazing-print/amazing_print at commit dc890dfafdf07088ea901df53c19c2710e5c5234 contains a Ruby code injection condition

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to gain elevated privileges due to improper val

A malicious GOPROXY was previously capable of forging up to two sumdb tiles that allow for a requested module to bypass

The user-space system-call verifier z_vrfy_z_log_msg_static_create() in subsys/logging/log_msg.c was a pure pass-through

In the Linux kernel, the following vulnerability has been resolved: spi: uniphier: Fix completion initialization order

In the Linux kernel, the following vulnerability has been resolved: dmaengine: sh: rz-dmac: Move interrupt request afte

In the Linux kernel, the following vulnerability has been resolved: tpm: tpm2-sessions: wait for async KPP completion i

In the Linux kernel, the following vulnerability has been resolved: landlock: Fix LANDLOCK_SCOPE_SIGNAL bypass on the S

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: bound copy_lcns dp->page_lcns[] index in