CVE-2026-101525 is a high-severity vulnerability in Oracle Enterprise Manager for Siebel versions 13.5 and 24.1. It allows a low privileged attacker with network access via HTTP to compromise the product, potentially resulting in full takeover. The vulnerability affects confidentiality, integrity, and availability with a CVSS 3.1 base score of 8.8. Oracle has released security patches addressing this and many other vulnerabilities in their October 2026 Critical Patch Update advisory.
CVE-2026-101524 is a vulnerability in Oracle Enterprise Manager Base Platform versions 13.5 and 24.1. It allows an unauthenticated attacker with network access via HTTP to perform unauthorized read, update, insert, or delete operations on accessible data and potentially cause a partial denial of service. The vulnerability is rated medium severity with a CVSS 3.1 base score of 5.6. The attack complexity is high, and no privileges or user interaction are required. Oracle has published a Critical Patch Update advisory that includes patches for this and many other vulnerabilities.
CVE-2026-101518 is a high-severity vulnerability in Oracle Enterprise Manager Base Platform versions 13.5 and 24.1. It allows a low privileged attacker with network access via HTTP to compromise the platform, potentially leading to full takeover. The vulnerability affects confidentiality, integrity, and availability, with a CVSS 3.1 base score of 8.8. Oracle has released patches addressing this and many other vulnerabilities in their October 2026 Critical Patch Update. Customers are strongly advised to apply these patches promptly to mitigate the risk.
CVE-2026-101511 is a vulnerability in Oracle Enterprise Manager Base Platform affecting versions 13.5 and 24.1. It allows a low privileged attacker with network access via HTTP to gain unauthorized read access to some accessible data. The vulnerability has a CVSS 3.1 base score of 4.3, indicating a medium severity impact focused on confidentiality. Oracle has released security patches as part of its October 2026 Critical Patch Update advisory.
Pillow's EPS image loader allows Ghostscript to render images at a scaled size that exceeds Pillow's decompression bomb limit. This occurs because the decompression bomb check is only applied to the unscaled image size declared in the EPS file, not the scaled size requested by the application. As a result, an attacker can cause Ghostscript to generate very large temporary files, consuming excessive disk space and CPU resources. The vulnerability affects Pillow versions from 2.3.0 up to but not including 13.0.0. A patch is available to address this issue.
The uv software versions before 0.13.4 include a bundled CA root certificate 'emSign ECC Root CA - G3' whose intermediate CA keys have been compromised. This allows an attacker with access to these keys to issue fraudulent certificates trusted by uv, enabling potential man-in-the-middle (MITM) attacks. Version 0.13.4 removes this root from the trusted bundle, mitigating the risk.
A vulnerability in the Node.js package follow-redirects versions 1.2.4-1, 1.13.1-1, and 1.14.5-1 allows sensitive credential headers to be forwarded to attacker-controlled destinations during cross-origin redirects when headers are provided as arrays. This occurs because the header removal logic incorrectly assumes headers are plain objects, failing to remove Authorization, Proxy-Authorization, and Cookie headers in array form. The issue is patched in version 1.16.1.
ApostropheCMS versions from 4.25.0 up to but not including 4.33.0, and AI helper versions from 1.0.0-beta.10 up to but not including 1.0.0-beta.13, contain a server-side request forgery (SSRF) vulnerability. This occurs when an editor uses image-generation features to create base64-generated image records without a stored provider URL, allowing the server to make bounded requests to attacker-controlled hosts. The vulnerability is fixed in versions 4.33.0 and 1.0.0-beta.13.
CVE-2026-113605 affects Stirling-PDF versions 2.13.2 through 3.2.0 and involves an incomplete denylist in the DatabaseService.validateSqlContent() function. This flaw allows authenticated administrators to bypass H2 database import restrictions by using the CREATE OR REPLACE ALIAS command. By uploading a crafted SQL backup to the import-database endpoint, attackers can define Java function aliases via RUNSCRIPT, enabling execution of arbitrary Java methods.
CVE-2026-105312 is a critical vulnerability in Red Hat StreamsHub Console for Apache Kafka® that allows a Kubernetes tenant with create permission on Console custom resources to deploy arbitrary container images. This leads to privilege escalation by granting cluster-wide read and write access to Strimzi control-plane resources through a pod running with a highly privileged ServiceAccount. The vulnerability affects versions >=0.2.0 <0.12.10 and >=0.13.0 <0.14.2 and is fixed in versions 0.12.10 and 0.14.2.
CVE-2026-105311 is a high-severity vulnerability in Red Hat StreamsHub Console for Apache Kafka® where the Console operator acts as a confused deputy. A Kubernetes tenant with permission to create a Console custom resource can specify a KafkaUser namespace outside their own, causing the operator to read sensitive KafkaUser Secrets from another namespace and write them into the attacker's namespace. This cross-namespace secret exfiltration occurs due to lack of namespace validation in the operator. The issue affects versions >=0.2.0 <0.12.10 and >=0.13.0 <0.14.2 and is fixed in versions 0.12.10 and 0.14.2.
A security update for gcc13 addresses a use-after-free (UAF) vulnerability identified as CVE-2026-102010. The flaw occurs due to improper pointer updates when an application calls the erase_if function on a binary heap priority queue in libstdc++. This update also includes non-security fixes and updates to GCC 13.5.
Pillow, a Python imaging library, has a vulnerability in its XBM header parser prior to version 13.0.0. The issue involves a regular-expression denial of service (ReDoS) in the XbmImageFile._open function, where processing a crafted XBM file can cause excessive backtracking and stall the application. This vulnerability allows denial of service by making the image loading operation hang for minutes. The flaw is fixed in Pillow version 13.0.0.
Pillow versions prior to 13.0.0 contain a vulnerability in the TIFF encoder where it can read beyond the ColorMap buffer if TIFF metadata has inconsistent plane size and BitsPerSample values. This flaw can lead to out-of-bounds memory reads, potentially disclosing heap memory or causing application crashes. The issue is resolved in Pillow version 13.0.0.
Pillow versions from 12.0.0 up to but not including 13.0.0 contain a vulnerability in the Image.merge() function where a null image8 plane can be dereferenced. This occurs because validation skips the first input band, allowing certain image types to be merged incorrectly, leading to a native process crash. The issue can be triggered by opening a crafted IPTC file or by direct invocation of Image.merge() with a malicious first band. This vulnerability is fixed in version 13.0.0.
Pillow, a Python imaging library, contains a critical vulnerability in its JPEG decoder prior to version 13.0.0. The decoder can write a full-width scanline into a buffer sized for a requested draft scale due to improper verification of libjpeg's output width and component count. This flaw allows specially crafted JPEG images to corrupt heap memory, crash the process, or potentially enable code execution. The issue is resolved in Pillow version 13.0.0.
Pillow versions prior to 13.0.0 contain a vulnerability where a double free of image memory can occur during certain image transform operations. This happens when ImagingScaleAffine encounters a selective allocation failure in a specific fast path for affine transformations using nearest neighbor resampling. The flaw can cause process crashes and potential memory corruption. The issue is fixed in Pillow version 13.0.0.
Pillow versions prior to 13.0.0 contain a critical vulnerability in the FlashPix JPEG-tile decoder. The decoder can write decoded scanlines beyond the allocated tile buffer due to improper handling of JPEG modes, leading to heap memory corruption. This flaw may allow an attacker to execute arbitrary code by supplying a crafted OLE2 FlashPix file to an application that processes untrusted input with the optional olefile dependency. The issue is fixed in Pillow version 13.0.0.
Pillow, a Python imaging library, has a vulnerability in versions prior to 13.0.0 where the ImageMorph.MorphOp.apply() function can access memory before a row buffer when processing zero-width images. This occurs because PPM and PGM inputs can create images with zero width, and the morphology routine improperly indexes memory without rejecting this geometry. An attacker can exploit this by supplying a crafted image, causing the application to crash. The issue is fixed in version 13.0.0.
Pillow versions from 11.3.0 up to but not including 13.0.0 contain a heap use-after-free vulnerability triggered when libtiff rejects a tag during TIFF encoding to an in-memory buffer. This flaw can cause a process crash and may allow code execution. The issue is resolved in Pillow version 13.0.0.