RUSTSEC-2026-0325Published
Mis-typed WebAssembly tag imports can lead to GC heap corruption
osv · CVE-2026-115383 · GHSA-cfhf-m2cr-62wj
crates.io: wasmtime
Advisory catalog
Public source statements across vendors. Explicit aliases connect records; each publisher keeps its own state, severity and affected-version evidence.
Collected statements
677607 source statements · aliases may refer to the same vulnerabilityRUSTSEC-2026-0326Published
Rooting for GC values live across `try_call` may be missing, causing GC heap corruption
osv · CVE-2026-115379 · GHSA-hw8m-q44c-ggrf
crates.io: wasmtime
RUSTSEC-2026-0327Published
Wasmtime component async-lifted callback result count is unvalidated, causing a native stack buffer overflow
osv · CVE-2026-115384 · GHSA-32h6-97mm-8q3c
crates.io: wasmtime
RUSTSEC-2026-0378Published
Panic lowering a host-created component model stream into a guest that expects a different payload type
osv · CVE-2026-115892 · GHSA-9pvw-hwfg-92h5
crates.io: wasmtime
RUSTSEC-2026-0380Published
Bit-packing in Cranelift compiler causes silent overflow and miscompilation
osv · CVE-2026-115889 · GHSA-897f-g5gm-fmxm
crates.io: wasmtime
CVE-2026-108013Published
HCL BigFix Platform is affected by security vulnerability around intermediate CA certificate bundle (CVE ID)
cve-program ·
Vendor product: BigFix Platform
MAL-2026-18248Published
Malicious code in overarch-windows-x64-yr (npm)
osv · GHSA-v5v8-j5gm-pq8v
npm: overarch-windows-x64-yr
CVE-2026-115806Published
Prime Mover <= 2.2.1 - Unauthenticated PHP Object Injection via Base64-Encoded Comment during Migration Search-and-Replace
cve-program ·
Vendor product: Prime Mover – Backup and Migration
CVE-2026-115807Published
User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor <= 4.0.3 - Authenticated (Author+) Limited Privilege Escalation via Gutenberg Block 'Assigned Role' Attribute
cve-program ·
Vendor product: User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor
CVE-2026-79858Published
Unauthenticated SQL Injection Vulnerability in the PAPI Protocol of AOS-8
cve-program ·
Vendor product: ArubaOS (AOS)
CVE-2026-79857Published
Unauthenticated Command Injection Vulnerability in AOS-8 PAPI Protocol
cve-program ·
Vendor product: ArubaOS (AOS)
CVE-2026-79856Published
Unauthenticated Buffer Overflow Vulnerability leads to Authentication Bypass in AOS-8
cve-program ·
Vendor product: ArubaOS (AOS)
CVE-2026-79855Published
Authentication Bypass in the SSH Daemon of AOS-8 leads to Complete System Compromise
cve-program ·
Vendor product: ArubaOS (AOS)
CVE-2026-79854Published
Unauthenticated SQL Injection Vulnerability leads to Remote Code Execution in AOS-10
cve-program ·
Vendor product: ArubaOS (AOS)
CVE-2026-79887Published
Authentication Bypass in Web Interface of AOS-8 allows Remote Command Execution (RCE)
cve-program ·
Vendor product: ArubaOS (AOS)
CVE-2026-79888Published
Unauthenticated Buffer Overflow allows Remote Code Execution in web interface
cve-program ·
Vendor product: ArubaOS (AOS)
CVE-2026-79889Published
Multiple Unauthenticated Buffer Overflow vulnerabilities in AOS-8 Web Interface result in Remote Code Execution
cve-program ·
Vendor product: ArubaOS (AOS)
CVE-2026-101557Published
Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with netwo…
cve-program ·
Vendor product: Oracle Purchasing
CVE-2026-91093Published
HP One Agent Software – Security Update
cve-program ·
Vendor product: HP One Agent Software
CVE-2026-79890Published
Unauthenticated Command Injection Vulnerabilities in AOS-8 Accessed by the PAPI Protocol
cve-program ·
Vendor product: ArubaOS (AOS)
CVE-2026-110447Published
Collabora Online Built-in CODE Server before 26.4.303 (richdocumentscode), a Nextcloud app, allows remote code execution, as exploited in the wild in September and October 2026, a different vulnerability than CVE-2025-66208. This is an OS c…
cve-program ·
https://apps.nextcloud.com: richdocumentscode
CVE-2026-101854Published
Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with netw…
cve-program ·
Vendor product: Oracle Product Hub
CVE-2026-101853Published
Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with netw…
cve-program ·
Vendor product: Oracle Product Hub
CVE-2026-101852Published
Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with netw…
cve-program ·
Vendor product: Oracle Product Hub
CVE-2026-101656Published
Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker …
cve-program ·
Vendor product: Oracle Mobile Field Service
CVE-2026-101654Published
Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker …
cve-program ·
Vendor product: Oracle Mobile Field Service
CVE-2026-101653Published
Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker …
cve-program ·
Vendor product: Oracle Mobile Field Service
CVE-2026-101664Published
Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker …
cve-program ·
Vendor product: Oracle Mobile Field Service
CVE-2026-101655Published
Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker …
cve-program ·
Vendor product: Oracle Mobile Field Service
CVE-2026-101635Published
Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker …
cve-program ·
Vendor product: Oracle Mobile Field Service
CVE-2026-101692Published
Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Admin UI). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with networ…
cve-program ·
Vendor product: Oracle Mobile Field Service
CVE-2026-79891Published
Unauthenticated Buffer Overflow Vulnerability leads to Remote Code Execution in AOS-8
cve-program ·
Vendor product: ArubaOS (AOS)
CVE-2026-79892Published
Authenticated Local Memory Corruption Vulnerability leads to Arbitrary Code Execution in AOS-8
cve-program ·
Vendor product: ArubaOS (AOS)
CVE-2026-101813Published
Vulnerability in the Oracle Engineering product of Oracle E-Business Suite (component: Change Management). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with networ…
cve-program ·
Vendor product: Oracle Engineering
CVE-2026-101686Published
Vulnerability in the Oracle E-Business Suite Integrated SOA Gateway product of Oracle E-Business Suite (component: SOA Provider). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileg…
cve-program ·
Vendor product: Oracle E-Business Suite Integrated SOA Gateway
CVE-2026-101685Published
Vulnerability in the Oracle E-Business Suite Integrated SOA Gateway product of Oracle E-Business Suite (component: SOA Provider). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileg…
cve-program ·
Vendor product: Oracle E-Business Suite Integrated SOA Gateway
CVE-2026-101567Published
Vulnerability in the Oracle Cost Management product of Oracle E-Business Suite (component: Cost Planning). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with networ…
cve-program ·
Vendor product: Oracle Cost Management
CVE-2026-79956Published
Improper Sanitization leads to Command Injection in AOS-8 Web Interface
cve-program ·
Vendor product: ArubaOS (AOS)
CVE-2026-95704Published
Authenticated Remote Code Execution allows Unauthorized System Control in Wireless Network Management Interface
cve-program ·
Vendor product: ArubaOS (AOS)
CVE-2026-83363Published
Vulnerability in the Oracle Contract Lifecycle Management for Public Sector product of Oracle E-Business Suite (component: Award/PO). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low priv…
cve-program ·
Vendor product: Oracle Contract Lifecycle Management for Public Sector
CVE-2026-95705Published
Authenticated Command Injection Vulnerabilities in AOS-8
cve-program ·
Vendor product: ArubaOS (AOS)
CVE-2026-95706Published
Authenticated Command Injection Vulnerabilities in AOS-8
cve-program ·
Vendor product: ArubaOS (AOS)
CVE-2026-115785Published
Zimbra Collaboration Suite Data Source Test SMTP Command Injection via Unsanitized Email Address
cve-program ·
Vendor product: Zimbra Collaboration Suite
CVE-2026-50056Published
Zimbra Collaboration Suite Local Privilege Escalation via zmmailboxdmgr JVM Argument Injection
cve-program ·
Vendor product: Zimbra Collaboration Suite
CVE-2026-95707Published
Authenticated Buffer Overflow Vulnerability leads to Remote Code Execution in AOS-8
cve-program ·
Vendor product: ArubaOS (AOS)
CVE-2026-95708Published
Authenticated File Write leads to Command Injection Vulnerabilities in AOS-10
cve-program ·
Vendor product: ArubaOS (AOS)
CVE-2026-95709Published
Authenticated Command Injection Vulnerabilities in AOS-10
cve-program ·
Vendor product: ArubaOS (AOS)
CVE-2026-95711Published
Authentication Bypass Leading to Remote Code Execution in AOS-10 Web-Based Management Interface
cve-program ·
Vendor product: ArubaOS (AOS)
CVE-2026-95714Published
Authenticated Adjacent Buffer Overflow Vulnerability leads to Remote Code Execution in AOS-10
cve-program ·
Vendor product: ArubaOS (AOS)
CVE-2026-79852Published
Unauthenticated SQL Injection allows Remote Code Execution in AOS Web-Based Management Interface
cve-program ·
Vendor product: ArubaOS (AOS)
A catalog match establishes published evidence, not applicability to your environment. Check resolved package dependencies, or open a Microsoft CVE for fixing KBs, releases and planning.