[NEW] [high] Oracle SQL Developer: Multiple vulnerabilities
A remote, anonymous attacker can exploit multiple vulnerabilities in Oracle SQL Developer to compromise confidentiality, integrity, and availability.
Advisories tracked
20,889
● Live advisory feed
Security Advisory Fusion for CSIRTs, SOCs & Defenders
Security advisories from 24 sources — CISA, CERT-EU, NCSC-UK, BSI, CERT-FR, NCSC-NL, JPCERT/CC, JVN, HKCERT, the Canadian Cyber Centre, NVD, GitHub, Microsoft, Cisco, Fortinet, Palo Alto Networks and more — normalized, translated to English and flagged against the CISA KEV catalog. One global feed for CSIRTs, SOCs and defenders.
Known exploited
1,782
Sources online
24
Last sync
13M AGO
[UPDATE] [low] OpenSC: Multiple vulnerabilities allow unspecified attack
An attacker with physical access can exploit multiple vulnerabilities in OpenSC to conduct an unspecified attack.
[UPDATE] [high] IBM WebSphere Application Server: Multiple vulnerabilities
An attacker can exploit multiple vulnerabilities in IBM WebSphere Application Server to bypass security measures and execute arbitrary code.
[UPDATE] [medium] jq: Multiple vulnerabilities allow Denial of Service
A remote, anonymous attacker can exploit multiple vulnerabilities in jq to conduct a Denial of Service attack.
[UPDATE] [high] Roundcube Webmail: Multiple vulnerabilities
An attacker can exploit multiple vulnerabilities in Roundcube Webmail to conduct SQL injection attacks, bypass security measures, manipulate data, disclose confidential information, gain elevated privileges, execute arbitrary code, or conduct cross-site scripting attacks.
[UPDATE] [medium] Red Hat Enterprise Linux (glib): Multiple vulnerabilities
A remote, anonymous attacker can exploit multiple vulnerabilities in Red Hat Enterprise Linux to execute arbitrary program code or cause a Denial-of-Service condition.
[UPDATE] [high] LangChain: Vulnerability allows file manipulation and information disclosure
A remote, anonymous attacker can exploit a vulnerability in LangChain to manipulate files and disclose information.
[UPDATE] [medium] jq: Vulnerability allows bypassing security measures
A local attacker can exploit a vulnerability in jq to bypass security measures.
[UPDATE] [high] Red Hat Enterprise Linux (openEXR): Vulnerability allows code execution
A remote, anonymous attacker can exploit a vulnerability in Red Hat Enterprise Linux (openEXR) to execute arbitrary code.
[UPDATE] [high] IBM App Connect Enterprise Certified Container: Multiple vulnerabilities
An attacker can exploit multiple vulnerabilities in IBM App Connect Enterprise Certified Container to execute arbitrary code, bypass security measures, conduct Cross-Site Scripting attacks, manipulate data, disclose confidential information, or cause a Denial of Service condition…
[UPDATE] [medium] jq: Vulnerability allows denial of service
A local attacker can exploit a vulnerability in jq to conduct a denial of service attack.
[UPDATE] [high] Mozilla Firefox and Firefox ESR: Multiple vulnerabilities
An attacker can exploit multiple vulnerabilities in Mozilla Firefox and Mozilla Firefox ESR to potentially execute arbitrary code, bypass security measures, disclose confidential information, or carry out other unspecified attacks.
[NEW] [high] Oracle Database Server: Multiple vulnerabilities
A remote, anonymous or authenticated attacker can exploit multiple vulnerabilities in Oracle Database Server to compromise confidentiality, integrity, and availability.
[NEW] [medium] Perl: Vulnerability allows denial of service
A remote, anonymous attacker can exploit a vulnerability in Perl to conduct a denial of service attack.
[NEW] [high] Red Hat Enterprise Linux (openexr): Multiple vulnerabilities
An attacker can exploit multiple vulnerabilities in Red Hat Enterprise Linux (openexr) to execute arbitrary code, disclose information, and conduct a denial of service attack.
[NEW] [medium] Checkmk: Multiple vulnerabilities
An attacker can exploit multiple vulnerabilities in Checkmk to elevate their privileges and bypass security measures.
[NEW] [low] libarchive: Vulnerability allows code execution and DoS
A local attacker can exploit a vulnerability in libarchive to cause a Denial-of-Service condition or potentially execute arbitrary code.
[UPDATE] [medium] libarchive: Vulnerability allows denial of service
A remote, anonymous attacker can exploit a vulnerability in libarchive to conduct a denial of service attack.
[UPDATE] [medium] OpenSSH: Multiple vulnerabilities
A remote attacker can exploit multiple vulnerabilities in OpenSSH to execute code, escalate privileges, bypass security mechanisms, or achieve unspecified impacts.
[NEW] [high] X.Org X11 and Xwayland: Multiple vulnerabilities allow code execution and DoS
An attacker can exploit multiple vulnerabilities in X.Org X11 and Xwayland to cause a denial of service or potentially execute arbitrary program code.
[UPDATE] [high] xz: Vulnerability allows code execution
A remote, anonymous attacker can exploit a vulnerability in xz to execute arbitrary code.
[UPDATE] [medium] Python: Vulnerability allows code execution
An attacker can exploit a vulnerability in Python to execute arbitrary code.
[UPDATE] [medium] Roundcube: Multiple vulnerabilities
An attacker can exploit multiple vulnerabilities in Roundcube to manipulate files, bypass security measures, conduct a cross-site scripting attack, and disclose information.
[UPDATE] [medium] ClamAV: Multiple vulnerabilities
A remote, anonymous attacker can exploit multiple vulnerabilities in ClamAV to conduct a denial of service attack or disclose confidential information.
[UPDATE] [medium] HAProxy Enterprise, Community and ALOHA (QUIC): Multiple vulnerabilities allow Denial of Service
A remote, anonymous attacker can exploit multiple vulnerabilities in HAProxy Enterprise, Community and ALOHA to conduct a Denial of Service attack.
[UPDATE] [medium] GnuTLS: Multiple vulnerabilities allow Denial of Service
A remote, anonymous attacker can exploit multiple vulnerabilities in GnuTLS to conduct a Denial of Service attack.
[UPDATE] [high] ProFTPD: Vulnerability allows bypassing security measures and file manipulation
A remote, authenticated attacker can exploit a vulnerability in ProFTPD to bypass security measures and manipulate files.
[UPDATE] [medium] Keycloak (netty-codec-http): Vulnerability allows file manipulation
A remote, anonymous attacker can exploit a vulnerability in Keycloak to manipulate files.
[UPDATE] [medium] libexpat: Multiple vulnerabilities allow unspecified attack
A local attacker can exploit multiple vulnerabilities in libexpat to conduct an unspecified attack, potentially including arbitrary code execution, data manipulation, bypassing security measures, disclosing confidential information, or causing a Denial of Service condition.
[UPDATE] [medium] expat: Multiple vulnerabilities
A local attacker can exploit multiple vulnerabilities in expat to conduct a denial of service attack or potentially execute code.
[UPDATE] [high] Linux Kernel: Multiple vulnerabilities allow denial of service
An attacker can exploit these vulnerabilities to conduct unspecified attacks that may lead to denial-of-service, memory corruption, or other undefined impacts.
[UPDATE] [medium] Red Hat Enterprise Linux (dracut): Vulnerability allows executing arbitrary code with administrator rights
An attacker from an adjacent network can exploit a vulnerability in Red Hat Enterprise Linux to execute arbitrary code with administrator rights.
[UPDATE] [high] vllm: Vulnerability allows bypassing security measures
A remote, anonymous attacker can exploit a vulnerability in vllm to bypass security measures.
[UPDATE] [medium] vim: Multiple vulnerabilities
An attacker can exploit multiple vulnerabilities in vim to conduct a denial of service attack or execute arbitrary code.
[UPDATE] [medium] Python: Vulnerability allows denial of service
A remote, anonymous attacker can exploit a vulnerability in Python to conduct a denial of service attack.
[UPDATE] [medium] Red Hat Virtualization: Multiple vulnerabilities allow Denial of Service
A remote, anonymous attacker can exploit multiple vulnerabilities in Red Hat Virtualization to conduct a Denial of Service attack.
Mozilla Products Multiple Vulnerabilities
Google Chrome Multiple Vulnerabilities
Oracle Products Multiple Vulnerabilities
Multiple vulnerabilities in HPE Aruba Networking products (July 22, 2026)
Multiple vulnerabilities have been discovered in HPE Aruba Networking products. They allow an attacker to cause remote arbitrary code execution, a breach of data confidentiality, and a bypass of security policy.
Multiple vulnerabilities in Elastic products (July 22, 2026)
Multiple vulnerabilities have been discovered in Elastic products. Some of them allow an attacker to cause a remote denial of service, a breach of data confidentiality, and a breach of data integrity.
Multiple vulnerabilities in Mozilla products (July 22, 2026)
Multiple vulnerabilities have been discovered in Mozilla products. Some of them allow an attacker to cause remote arbitrary code execution, privilege escalation, and a remote denial of service.
Multiple vulnerabilities in Microsoft Sharepoint (July 22, 2026)
On July 14, 2026, during its monthly update, Microsoft released, among other things, patches for two critical vulnerabilities affecting SharePoint. The vulnerabilities CVE-2026-50522 and CVE-2026-58644 allow an unauthenticated attacker to execute arbitrary code at...
DSA-6396-1 chromium - security update
Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure. https://security-tracker.debian.org/tracker/DSA-6396-1
DSA-6395-1 bind9 - security update
Several vulnerabilities were discovered in BIND, a DNS server implementation, which may result in bypass of DNSSEC validation, RPZ policy bypass, cache poisoning or denial of service. https://security-tracker.debian.org/tracker/DSA-6395-1
CVE-2026-50522: Microsoft SharePoint Deserialization of Untrusted Data Vulnerability
Microsoft SharePoint contains a deserialization of untrusted data vulnerability which could allow an unauthorized attacker to execute code over a network.
Multiple vulnerabilities in Google Chrome (July 22, 2026)
Multiple vulnerabilities have been discovered in Google Chrome. They allow an attacker to cause an unspecified security issue by the vendor.
Multiple vulnerabilities in GLPI (July 22, 2026)
Multiple vulnerabilities have been discovered in GLPI. They allow an attacker to cause a breach of data confidentiality, a breach of data integrity, and a bypass of security policy.
CVE-2026-16232: Check Point SmartConsole Improper Authentication Vulnerability
Check Point SmartConsole contains an improper authentication vulnerability which could allow an unauthenticated remote attacker to obtain an application login token and use it to authenticate with full administrative privileges.
DSA-6394-1 firefox-esr - security update
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code, bypass of the same-origin policy, privilege escalation, information disclosure, spoofing or sandbox escape. https://security-tracker.deb…