CVEs published July 21, 2026

Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Web Content Management).

Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler).

Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler).

Vulnerability in the Oracle Weblogic Server Proxy Plug-in product of Oracle Fusion Middleware (component: WebLogic Server Proxy Plug-In for Third-Party Web Servers).

Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core).

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).

Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component: Rest Service).

Sandbox escape due to invalid pointer in the Disability Access APIs component.

A filename supplied during file upload is not properly sanitized before being used in system command execution, allowing an attacker to inject shell metacharacters and achieve command injection via the…

Unvalidated input in asset filter parameters allows shell metacharacters to escape command argument handling, resulting in remote code execution as a low-privileged OS user via the Analysis REST endpoint.

Vulnerability in the PeopleSoft Enterprise FIN Common Objects Argentina product of Oracle PeopleSoft (component: Staffing).

Vulnerability in the PeopleSoft Enterprise FIN Common Objects Argentina product of Oracle PeopleSoft (component: eProcurement).

Vulnerability in the PeopleSoft Enterprise FIN Common Objects Argentina product of Oracle PeopleSoft (component: Integration).

Vulnerability in the RDBMS component of Oracle Database Server.

Vulnerability in the PeopleSoft In-Memory Project Discovery product of Oracle PeopleSoft (component: Project Discovery).

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System).

Vulnerability in the PeopleSoft Enterprise HCM Talent Acquisition Manager product of Oracle PeopleSoft (component: Job Opening).

Vulnerability in the PeopleSoft Enterprise FIN Staffing Front Office Brazil product of Oracle PeopleSoft (component: Staffing).

Vulnerability in the Oracle Demantra Demand Management product of Oracle Supply Chain (component: Product Security).

Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Service API).

Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager).

Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Web Content Management).

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security).

Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools).

Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools).

Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools).

Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools).

Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites).

Vulnerability in the Oracle Managed File Transfer product of Oracle Fusion Middleware (component: MFT Runtime Server).

Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware (component: Human Workflow).

Vulnerability in the Oracle Managed File Transfer product of Oracle Fusion Middleware (component: MFT Runtime Server).

Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core).

Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle).

Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle).

Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle).

Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle).

Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle).

Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle).

Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle).

Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle).

Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core).

Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core).

Vulnerability in the TimesTen In-Memory Database product of Oracle TimesTen In-Memory Database (component: Kubernetes Operator).

Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler).

Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler).

Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core).

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).

Corresponding to version 1.6.40 of praisonaiagents, `execute_code()` in `praisonaiagents/tools/python_tools.py` (v1.6.37, subprocess sandbox mode) can be fully bypassed using `print.__self__` to retrieve…

Autel Maxi Charger Single firmware through V1.03.51 is vulnerable to OS command injection when processing OCPP GetDiagnostics requests.

Autel Maxi Charger Single firmware through V1.03.51 is vulnerable to OS command injection in the /test endpoint exposed on TCP port 9002.

Autel Maxi Charger Single firmware through V1.03.51 allows unauthenticated remote code execution via the service listening on TCP port 9002.

Autel Maxi Charger Single firmware through V1.03.51 contains a hard-coded authentication token that bypasses authorization checks for multiple management endpoints.

Grav 2.0.4 (fixed in 2.0.7) contains a remote code execution vulnerability in Blueprint::dynamicData() (system/src/Grav/Common/Data/Blueprint.php), which passes a Class::method callable string and its…

Heap type confusion and out-of-bounds read/write in the Apache Fory C++ implementation.

Deserialization of untrusted data vulnerability that may allow class-registration checks to be bypassed during Java lambda deserialization.

Vulnerability in the PeopleSoft Enterprise FIN Manufacturing Brazil product of Oracle PeopleSoft (component: Integration).

Vulnerability in the PeopleSoft Enterprise FIN Common Objects Brazil product of Oracle PeopleSoft (component: Integration).

Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI).

Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Reporting).

Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Installation).

Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security).

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller).

Vulnerability in the Oracle Commerce Guided Search Platform Services product of Oracle Commerce (component: Forge).

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System).

Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites).

Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framework).

Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: ATG Portals).

Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle).

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).

Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component: Rest Service).

Vulnerability in the Oracle Work in Process product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools).

Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites).

Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites).

Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Enterprise Scheduling System).

Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Enterprise Scheduling System).

Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: PeopleSoft Applications).

Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: PeopleSoft Applications).

Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core).

Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle).

Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle).

Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler).

Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler).

Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server).

Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler).

Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler).

Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler).

Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler).

Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler).

Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler).

Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler).

Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler).

Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler).

Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler).

Vulnerability in the Oracle Weblogic Server Proxy Plug-in product of Oracle Fusion Middleware (component: WebLogic Server Proxy Plug-In for Third-Party Web Servers).

Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: Apache Plugin).

Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core).

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).

Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI).

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).

Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Security).

Data::DisjointSet::Shared versions before 0.02 for Perl allow out-of-bounds reads and writes via an unvalidated parent index in dsu_find.

Data::RingBuffer::Shared versions before 0.04 for Perl allow a stack buffer overflow via an unvalidated elem_size in ring_read_seq.

Any caller that can deliver bytes to a Netty channel pipeline containing `XmlDecoder` can send XML with a `DOCTYPE` declaration to an `AsyncXMLInputFactory` instantiated with no security configuration,…

SQL injection vulnerability in Wgcloud 3.6.4 allows a remote attacker to escalate privileges via the PortInfoMapper.xml file

SQL injection vulnerability in Crocus v.1.3.44 allows a remote attacker to escalate privileges via the RecordStateMapper.xml file

SQL injection vulnerability in Crocus v.1.3.44 allows a remote attacker to escalate privileges via the DeviceInfoMapper.xml file

An issue in DayuanJiang next-ai-draw-io 0.4.13 allows a remote attacker to obtain sensitive information via the X-Forwarded-For header value

Versions prior to 0.1.4 have an insecure default cryptographic key.

PraisonAI's call server exposes a network-facing agent control API without authentication when `CALL_SERVER_TOKEN` is not configured.

CVE-2026-44338 (GHSA-6rmh-7xcm-cpxj) documents that PraisonAI ships a code-generator (`praisonai.deploy.api.generate_api_server_code`) that emits a Flask API server with authentication disabled by default.

PraisonAI's first-party A2A server example exposes an unauthenticated A2A JSON-RPC endpoint and registers a `calculate(expression)` tool implemented with Python `eval()`.

Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM (component: Siebel Approval Manager).

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Agent Next Gen).

Vulnerability in the Oracle Retail Integration Bus product of Oracle Retail Applications (component: RIB Kernal).

Vulnerability in the Oracle Retail Integration Bus product of Oracle Retail Applications (component: RIB Kernal).

Vulnerability in Oracle Application Testing Suite.

Vulnerability in Oracle Application Testing Suite.

Vulnerability in Oracle Application Testing Suite.

An issue was discovered in bytebot-ai in commit 3d37894ce07ef8d8b40adc7fd309ad96c2a71313 (2025-09-11) allowing attackers to execute arbitrary code via crafted path to `computer_write_file`.

Memory safety bugs present in Firefox ESR 140.12 and Firefox 152.

Memory safety bugs present in Firefox 152.

JIT miscompilation in the JavaScript Engine: JIT component.

Integer overflow in the Audio/Video: Playback component.

Mitigation bypass in the DOM: Service Workers component.

Integer overflow in the Graphics: ImageLib component.

Integer overflow in the Audio/Video component.

Incorrect boundary conditions, integer overflow in the Libraries component in NSS.

Sandbox escape in the DOM: Networking component.

Site isolation issue in the Networking component.

Mitigation bypass in the DOM: Networking component.

Mitigation bypass in the DOM: Service Workers component.

Mitigation bypass in the PDF Viewer component.

Site isolation issue in the Networking: HTTP component.

Integer overflow in the JavaScript: WebAssembly component.

Incorrect boundary conditions in the JavaScript: WebAssembly component.

JIT miscompilation in the JavaScript: WebAssembly component.

Memory safety bugs present in Thunderbird ESR 140.12.

Memory safety bugs present in Firefox ESR 115.37, Firefox ESR 140.12 and Firefox 152.

Site isolation issue in the Graphics: WebRender component.

Incorrect boundary conditions in the Graphics component.

Sandbox escape due to use-after-free in the Disability Access APIs component.

JIT miscompilation in the JavaScript Engine: JIT component.

Invalid pointer in the DOM: Bindings (WebIDL) component.

Sandbox escape due to use-after-free in the Disability Access APIs component.

Sandbox escape due to use-after-free in the DOM: Navigation component.

Incorrect boundary conditions in the Audio/Video: cubeb component.

Same-origin policy bypass in the DOM: Navigation component.

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Turkmesh Communication Services Inc.

The Easy Form Builder by WhiteStudio plugin for WordPress is vulnerable to Unauthenticated Privilege Escalation to Administrator in versions up to, and including, 4.0.11 This is due to the password recovery…

The Grav api plugin (grav-plugin-api) before 1.0.8 fails to properly authorize API key generation and revocation: the plugin intercepts the apiKeyGenerate/apiKeyRevoke admin tasks before the…

Vulnerability in the Oracle HRMS (UK) product of Oracle E-Business Suite (component: UK Payroll).

Vulnerability in the Oracle Banking Trade Finance Process Management product of Oracle Financial Services Applications (component: Common).

Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core).

Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools).

Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Integration Business Insight).

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).

Versions prior to 0.1.4 are vulnerable to vertical privilege escalation.

Versions prior to 0.1.4 have aprivilege escalation / cross-tenant member injection.

When executing class files where a previously concrete superclass method has been recompiled as abstract, execution is incorrectly delegated to an interface default method.

Use after free in GPU in Google Chrome on Android prior to 150.0.7871.182 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.…

Out of bounds read and write in ANGLE in Google Chrome on Android prior to 150.0.7871.182 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security…

Vulnerability in the PeopleSoft Enterprise FIN Expenses product of Oracle PeopleSoft (component: Expenses).

Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Install).

The Platform server exposes resources under `/api/v1/workspaces/{workspace_id}/...` and protects them with a `require_workspace_member(workspace_id)` FastAPI dependency.

Keep (commit 91c75e0) contains a server-side request forgery vulnerability that allows unauthenticated attackers to make the backend issue arbitrary HTTP requests by supplying attacker-controlled host…

Ninja Forms plugin version 3.14.8 and prior for WordPress Multisite contains an incorrect authorization vulnerability that allows a subsite Administrator to trigger network-wide deletion of all Ninja Forms…

Ninja Forms plugin for WordPress versions 3.10.4 through 3.14.9 contains an unauthenticated stored cross-site scripting vulnerability in the Repeatable Fieldset feature where parseSubmissionIndex() accepts…

Home Assistant Core before 2026.6.0 contains a path traversal vulnerability that allows unauthenticated attackers to write arbitrary files to any directory on the host filesystem by uploading a crafted…

Vulnerability in the PeopleSoft Enterprise SCM eProcurement product of Oracle PeopleSoft (component: Manage Requisition Status).

Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues).

Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server).

Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server).

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).

The `log_file_name` parameter in the `stata_do` API and CLI is directly interpolated into a Stata command string without sanitization.

Integer overflow in Chromecast in Google Chrome prior to 150.0.7871.182 allowed a local attacker to potentially perform a sandbox escape via malicious network traffic. (Chromium security severity: High)

Out-of-bounds read via sun.misc.Unsafe in Apache Fory.

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Web Utilities).

Joomla Extension - joomdonation.com - Insecure default configuration Membership Pro < 4.6.2 - The Joomla extension Membership Pro prior version 4.6.2 did by default allow unauthenticated users to upload…

Vulnerability in the PeopleSoft Enterprise FIN Manufacturing Argentina product of Oracle PeopleSoft (component: Manufacturing).

Vulnerability in the PeopleSoft Enterprise FIN Common Objects Argentina product of Oracle PeopleSoft (component: eProcurement).

Vulnerability in the PeopleSoft Enterprise HCM Global Payroll Switzerland product of Oracle PeopleSoft (component: Global Payroll for Switzerland).

Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI).

Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Management).

Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security).

Vulnerability in the Oracle Commerce Guided Search Platform Services product of Oracle Commerce (component: Forge).

Vulnerability in the Oracle Commerce Guided Search Platform Services product of Oracle Commerce (component: Forge).

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager).

Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framework).

Vulnerability in the PeopleSoft Enterprise SCM Order Management product of Oracle PeopleSoft (component: Security).

Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Web Content Management).

Vulnerability in the PeopleSoft Enterprise CC Common Application Objects product of Oracle PeopleSoft (component: Common Application Objects).

Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI).

Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: mod_ssl).

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).

Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage Applications (component: POS).

Data::Intern::Shared versions before 0.02 for Perl allow an out-of-bounds read via unvalidated slot, reverse and arena indices in si_idx_find.

Data::HashMap::Shared versions before 0.14 for Perl allow an out-of-bounds read via an unvalidated arena offset and length in shm_str_copy.

Data::RadixTree::Shared versions before 0.02 for Perl allow an out-of-bounds read via unvalidated node and arena indices in rdx_find_locked.

Data::SortedSet::Shared versions before 0.03 for Perl allow an out-of-bounds read via unvalidated node indices in the rank and min/max query paths.

Data::ReqRep::Shared versions before 0.05 for Perl allow an out-of-bounds read via an unvalidated arena offset and length in reqrep_recv_locked.

The Binary Stream Capture (BSC) component exposes an unauthenticated HTTP API for dynamically creating packet capture "handlers." Because the code blindly trusts path‑related form fields, a remote client…

Vulnerability in the Oracle Net Services component of Oracle Database Server.

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: UI Framework).

SolarWinds Serv-U is affected by a broken access control vulnerability that could allow arbitrary file read and write, which can then be used to escalate privileges and execute code as root.

SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vulnerability that can lead to privilege escalation.

SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vulnerability that can lead to privilege escalation to a system administrator with the ability to execute commands as the root user.

SolarWinds Serv-U is affected by an insecure direct object reference vulnerability that leads to an account takeover.

SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vulnerability that can lead to SMTP hijacking leading to arbitrary account takeover.

SolarWinds Serv-U is affected by a privilege escalation vulnerability.

SolarWinds Serv-U is affected by a privilege escalation vulnerability that allows a domain administrator to escalate their user type to that of a system administrator.

SolarWinds Serv-U is affected by a broken access control vulnerability that allows a domain administrator to create system administrator accounts.

SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vulnerability that can lead to remote code execution.

SolarWinds Serv-U is affected by a privilege escalation vulnerability that allows a domain user group to be elevated into an administrator group.

SolarWinds Serv-U is affected by a privilege escalation vulnerability that allows a domain administrator to elevate their privileges to a system administrator.

SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vulnerability that can lead to remote code execution as root.

SolarWinds Serv-U is affected by a remote code execution vulnerability that, when exploited, can allow the arbitrary execution of code remotely as root.

SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vulnerability that can lead to privilege escalation and remote code execution as root.

Using -Xtrace to trace method arguments can lead to buffer underflow.

Mitigation bypass in the Networking component.

Mitigation bypass in the DOM: Security component.

Incorrect boundary conditions in the Graphics: WebGPU component.

JIT miscompilation in the JavaScript Engine: JIT component.

Mitigation bypass in the Enterprise Policies component.

Same-origin policy bypass in the Networking: DNS component.

Mitigation bypass in the Networking component.

Mitigation bypass in the DOM: Networking component.

Incorrect boundary conditions in the Audio/Video: Playback component.

Incorrect boundary conditions in the Audio/Video: GMP component.

Vulnerability in the Oracle Communications Converged Application Server product of Oracle Communications (component: Security).

Vulnerability in the PeopleSoft Enterprise FIN Program Management product of Oracle PeopleSoft (component: Primavera Integration).

Vulnerability in the PeopleSoft Enterprise CRM Common Objects product of Oracle PeopleSoft (component: Common Objects).

Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues).

Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core).

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).

Version 1.3.0 has an unauthenticated Remote Code Execution vulnerability when `secureEnabled` is set to `true`.

Versions 1.2.11 until 1.3.1 allow an unauthenticated remote attacker to achieve Full Remote Code Execution (RCE) as root.

Autel Maxi Charger Single firmware through V1.03.51 contains a heap-based buffer overflow in the set_ap_param command handled by the /localcfg endpoint.

The audit file upload handler does not sanitize filenames, allowing shell metacharacters to flow into system command execution.

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Web Utilities).

Vulnerability in the Oracle Demantra Demand Management product of Oracle Supply Chain (component: Product Security).

Vulnerability in the Oracle Flow Manufacturing product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Yard Management product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Public Sector Financials product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Public Sector Payroll product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: Claim LOV).

Vulnerability in the TeleSales product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Payables product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Process Manufacturing Product Development product of Oracle E-Business Suite (component: Quality Management Specs).

Vulnerability in the PeopleSoft Enterprise FIN Common Objects Argentina product of Oracle PeopleSoft (component: Staffing).

Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Management).

Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Management).

Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security).

Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: User and User Group).

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager).

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager).

Vulnerability in the Oracle Communications Service Catalog and Design product of Oracle Communications (component: Solution Designer).

Vulnerability in the Oracle HRMS (UK) product of Oracle E-Business Suite (component: UK Payroll).

Vulnerability in the Oracle Applications DBA product of Oracle E-Business Suite (component: ADPatch).

Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle).

Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle).

Vulnerability in the PeopleSoft Enterprise SCM Supplier Contract Management product of Oracle PeopleSoft (component: Security).

Vulnerability in the PeopleSoft Enterprise FIN Cash Management product of Oracle PeopleSoft (component: Cash Management).

Vulnerability in the Oracle Process Manufacturing Systems product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Advanced Collections product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle SDP Number Portability product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Transportation Execution product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Labor Distribution product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Public Sector Payroll product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Customer Care product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Project Intelligence product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Warehouse Management product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools).

Vulnerability in the Oracle Advanced Pricing product of Oracle E-Business Suite (component: Pricing Installation).

Vulnerability in the Oracle Advanced Outbound Telephony product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Sales Offline product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle iReceivables product of Oracle E-Business Suite (component: AR Web Utilities).

Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: Create Item Instance).

Vulnerability in the Oracle Enterprise Asset Management product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Process Manufacturing Regulatory Management product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Search Bean).

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Search Bean).

Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server).

Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Web Content Management).

Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Web Content Management).

Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Web Content Management).

Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Web Content Management).

Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server).

Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server).

Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server).

Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server).

Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server).

Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server).

Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server).

Vulnerability in the JD Edwards EnterpriseOne Procurement and Subcontract Management product of Oracle JD Edwards (component: Procurement).

Vulnerability in the PeopleSoft Enterprise CS Student Records product of Oracle PeopleSoft (component: Australian Features).

Vulnerability in the PeopleSoft Enterprise CS Student Financials product of Oracle PeopleSoft (component: Billing).

Vulnerability in the PeopleSoft Enterprise CS Campus Community product of Oracle PeopleSoft (component: Integration and Interfaces).

Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain (component: Install).

Vulnerability in the Oracle Enterprise Command Center Framework product of Oracle E-Business Suite (component: Core).

Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools).

Vulnerability in the Oracle Managed File Transfer product of Oracle Fusion Middleware (component: MFT Runtime Server).

Vulnerability in the Oracle Managed File Transfer product of Oracle Fusion Middleware (component: MFT Runtime Server).

Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Integration Business Insight).

Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core).

Vulnerability in the JD Edwards EnterpriseOne Solution Advisor product of Oracle JD Edwards (component: Solution Advisor).

Vulnerability in the JD Edwards EnterpriseOne Human Resources Management product of Oracle JD Edwards (component: Human Resources).

Vulnerability in the JD Edwards EnterpriseOne CRM Foundation product of Oracle JD Edwards (component: CRM Foundation).

Vulnerability in the JD Edwards EnterpriseOne CRM Foundation product of Oracle JD Edwards (component: CRM Foundation).

Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core).

Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core).

Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core).

Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core).

Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core).

Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core).

Vulnerability in Oracle GoldenGate (component: Admin Server Executable).

Vulnerability in Oracle GoldenGate (component: Oracle GoldenGate Microservices).

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).

Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server).

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).

Vulnerability in the RDBMS component of Oracle Database Server.

Vulnerability in Oracle GoldenGate (component: Service Manager).

A flaw was found in libssh.

A SQL injection vulnerability was identified in the SqlView API endpoint of the DHIS2 application in the `filter` parameter used by the `/api/sqlViews/{viewId}/data.json` endpoint.

Versions prior to 0.1.4 have a broken workspace authorization check that allows any authenticated low-privilege workspace member to escalate their own role to `owner`.

The workspace-scoped REST routes contain a systemic object-level authorization flaw that allows an authenticated user from one workspace to access, modify, and delete objects belonging to another workspace…

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).

Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Bill Issues).

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Self Update Framework).

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Metadata Plugin).

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Metadata Plugin).

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Enterprise Config Management).

A buffer overflow vulnerability was found in the command line interface of AOS-CX.

Use after free in UI in Google Chrome prior to 150.0.7871.182 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page.…

Inappropriate implementation in WebAudio in Google Chrome prior to 150.0.7871.182 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

Type Confusion in WebAudio in Google Chrome prior to 150.0.7871.182 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

Stack buffer overflow in V8 in Google Chrome prior to 150.0.7871.182 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

Privilege escalation in the Data Loss Prevention component.

Privilege escalation in WebExtensions.

Privilege escalation in the DOM: Content Processes component.

Privilege escalation in the DOM: Content Processes component.

Privilege escalation in the DOM: Navigation component.

Privilege escalation in the DOM: Navigation component.

Privilege escalation in the DOM: Workers component.

Use-after-free in the WebRTC: Audio/Video component.

The Free Builder for Elementor WordPress plugin before 1.6.7 does not sanitise submitted contact form field values before storing them and outputting them in the admin dashboard, allowing unauthenticated…

Vulnerability in the PeopleSoft Enterprise CC Common Application Objects product of Oracle PeopleSoft (component: Common Application Objects).

Vulnerability in the Oracle Service Fulfillment Manager product of Oracle E-Business Suite (component: Fulfillment Engine).

Vulnerability in the PeopleSoft Enterprise FIN Cash Management product of Oracle PeopleSoft (component: Cash Management).

Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites).

Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server).

Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core).

Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core).

Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server).

Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server).

Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core).

Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core).

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).

DHIS2 SQL View data endpoints allowed authenticated users with SQL View access to provide crafted filter values that were interpolated into generated SQL.

The fix for GHSA-9mqq-jqxf-grvw / CVE-2026-44336 is incomplete.

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Process Scheduler).

An authenticated administrative user can exploit a path traversal vulnerability to read arbitrary files from the server filesystem, write files to arbitrary directories, or determine whether specific files…

Verba RAG application version 2.1.3 contains an unauthenticated server-side request forgery vulnerability that allows unauthenticated attackers to cause the backend to issue arbitrary HTTP GET requests by…

Verba RAG application version 2.1.3 contains a server-side request forgery vulnerability combined with a same-origin middleware bypass that allows unauthenticated remote attackers to make the server issue…

LMDeploy through 0.14.0, fixed in commit 03c3130, contains a server-side request forgery (SSRF) vulnerability in the _load_http_url function within the connection.py media handler, where the private-IP…

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: BI Platform Security).

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).

Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites).

Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites).

Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: PeopleSoft Applications).

Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: mod_proxy).

Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core).

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: WLS - Web Services).

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).

Vulnerability in the Oracle Process Manufacturing Regulatory Management product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core).

Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server).

Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core).

Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core).

Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI).

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).

Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/Net).

Vulnerability in the Oracle Contracts Integration product of Oracle E-Business Suite (component: Internal Operations).

An authenticated non-admin user can exploit a SQL injection flaw in the ticketing REST API to access sensitive data stored in the appliance database.

Home Assistant Core before 2026.7.0 contains a path traversal vulnerability in the backup-restore function that allows attackers to write files to arbitrary absolute filesystem paths by supplying a crafted…

Vulnerability in the Oracle Price Protection product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Command Line - RapidClone).

Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component: Market Place).

Vulnerability in the Oracle Common Application Components product of Oracle E-Business Suite (component: Oracle Common Modules).

Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler).

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Group Replication Plugin).

A sandbox confinement bypass vulnerability exists in Canonical snapd within its internal execution environment compiler (snap-confine).

Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: Create Item Instance).

Vulnerability in the Oracle Sales Offline product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server).

Vulnerability in the Oracle Enterprise Command Center Framework product of Oracle E-Business Suite (component: Core).

Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core).

Versions prior to 0.1.4 have an* Insecure Direct Object Reference.

Versions prior to 0.1.4 have an Insecure Direct Object Reference.

Out of bounds write in ANGLE in Google Chrome prior to 150.0.7871.182 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.…

mcp-webresearch 0.1.7 contains a server-side request forgery vulnerability that allows attackers to access internal network services by supplying loopback, link-local, or cloud metadata addresses to the…

Vulnerability in the Oracle HRMS (UK) product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the PeopleSoft Enterprise FIN Common Objects Argentina product of Oracle PeopleSoft (component: eSettlements).

Vulnerability in the PeopleSoft Enterprise SCM Purchasing product of Oracle PeopleSoft (component: Purchasing).

Vulnerability in the Oracle MES for Process Manufacturing product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the PeopleSoft Enterprise SCM Inventory product of Oracle PeopleSoft (component: Security).

Vulnerability in the Oracle Quality product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Supply Chain Trading Connector product of Oracle E-Business Suite (component: Collaboration History).

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: BI Platform Security).

Vulnerability in the PeopleSoft Enterprise HCM Human Resources product of Oracle PeopleSoft (component: French Public Sector Specific).

Vulnerability in the PeopleSoft Enterprise HCM Global Payroll Switzerland product of Oracle PeopleSoft (component: Global Payroll for Switzerland).

Vulnerability in the PeopleSoft Enterprise CS Campus Community product of Oracle PeopleSoft (component: Security).

Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: B2B Engine).

Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server).

Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core).

Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core).

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: X Plugin).

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).

The `clearAES` and `clearPMTasks` methods in `FOGPage` can be invoked by an unauthenticated attacker via a single HTTP GET request through the public `client` node endpoint.

Vulnerability in the RDBMS component of Oracle Database Server.

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Agent Next Gen).

Two undocumented privileged accounts exist in Autel Maxi Charger Single firmware through V1.03.51.

Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer).

Vulnerability in the Oracle HRMS (France) product of Oracle E-Business Suite (component: French HR).

Vulnerability in the Oracle Process Manufacturing Regulatory Management product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Time and Labor product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Flow Manufacturing product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Time and Labor product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: Create Item Instance).

Vulnerability in the Oracle Human Resources product of Oracle E-Business Suite (component: Enterprise Command Center).

Vulnerability in the Oracle Work in Process product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools).

Vulnerability in the Oracle Contracts Integration product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Product Workbench product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Product Workbench product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Price Protection product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Process Manufacturing Financials product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Customers Online product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Process Manufacturing Systems product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Communications Converged Application Server product of Oracle Communications (component: Core).

Vulnerability in the Oracle E-Business Suite Secure Enterprise Search product of Oracle E-Business Suite (component: Search Integration Engine).

Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security).

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge).

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager).

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager).

Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framework).

Vulnerability in the Oracle HRMS (UK) product of Oracle E-Business Suite (component: UK Payroll).

Vulnerability in Oracle GoldenGate (component: Config Service Executable).

Vulnerability in the Oracle Banking Trade Finance product of Oracle Financial Services Applications (component: Infrastructure).

Vulnerability in the Oracle Banking Trade Finance product of Oracle Financial Services Applications (component: Infrastructure).

Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle).

Vulnerability in the PeopleSoft Enterprise FIN Common Objects Brazil product of Oracle PeopleSoft (component: eProcurement).

Vulnerability in the Oracle Loans product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Financials Common Country product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Process Manufacturing Product Development product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle iRecruitment product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Customers Online product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Customers Online product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Process Manufacturing Logistics product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Landed Cost Management product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Process Manufacturing Systems product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Universal Work Queue product of Oracle E-Business Suite (component: Non-Media Integration issues).

Vulnerability in the Oracle Project Portfolio Analysis product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle US Federal Human Resources product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Scripting product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle E-Business Tax product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle E-Business Tax product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Public Sector Human Resources product of Oracle E-Business Suite (component: Regression Testing).

Vulnerability in the Oracle HRMS (France) product of Oracle E-Business Suite (component: French HR).

Vulnerability in the Oracle Treasury product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle SDP Number Portability product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Telecommunications Billing Integrator product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Time and Labor product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Learning Management product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Service Fulfillment Manager product of Oracle E-Business Suite (component: Fulfillment Engine).

Vulnerability in the Oracle Inventory Management product of Oracle E-Business Suite (component: Core Receiving).

Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: Create Item Instance).

Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: Claim LOV).

Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: Claim LOV).

Vulnerability in the Oracle Risk Management product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Advanced Pricing product of Oracle E-Business Suite (component: Pricing Installation).

Vulnerability in the Oracle Contracts Integration product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Lease and Finance Management product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Project Contracts product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Customer Support product of Oracle E-Business Suite (component: Update Service Request).

Vulnerability in the Oracle Demand Signal Repository product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart).

Vulnerability in the Oracle TeleSales product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle iReceivables product of Oracle E-Business Suite (component: AR Web Utilities).

Vulnerability in the Oracle Trading Community product of Oracle E-Business Suite (component: Party Search UI).

Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Payments product of Oracle E-Business Suite (component: File Transmission).

Vulnerability in the Oracle Complex Maintenance, Repair and Overhaul product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Graph / Charting).

Vulnerability in the Oracle Financials Common Modules product of Oracle E-Business Suite (component: Common Components).

Vulnerability in the Oracle EDI Gateway product of Oracle E-Business Suite (component: All Miscellaneous EDI Issues).

Vulnerability in the Oracle Assets product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Cost Management product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Cash Management product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle E-Business Intelligence product of Oracle E-Business Suite (component: Definition).

Vulnerability in the Oracle Sales Offline product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle iReceivables product of Oracle E-Business Suite (component: AR Web Utilities).

Vulnerability in the Oracle Price Protection product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle EDI Gateway product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Process Manufacturing Financials product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Process Manufacturing Inventory product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Universal Work Queue product of Oracle E-Business Suite (component: UWQ Server Issues).

Vulnerability in the Oracle Content Manager product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle U.S.

Vulnerability in the Oracle Applications Technology Stack product of Oracle E-Business Suite (component: Client System Analyzer).

Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Web Content Management).

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime Security).

Vulnerability in the PeopleSoft Enterprise CS Student Records product of Oracle PeopleSoft (component: Research Tracking).

Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: REST WebServices).

Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites).

Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: B2B Engine).

Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core).

Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server).

Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server).

Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core).

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).

Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI).

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).

Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/Net).

Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage Applications (component: POS).

Cross Site Scripting vulnerability in DayuanJiang next-ai-draw-io 0.4.13 allows a remote attacker to execute arbitrary code via the mcp parameter

Versions prior to 0.1.4 have an Insecure Direct Object Reference.

Versions prior to 0.1.4 have an Insecure Direct Object Reference.

Versions prior to 0.1.4 have an authorization bypass enabling destructive action.

Versions prior to 0.1.4 have an authorization bypass enabling owner lockout.

Versions prior to 0.1.4 have an Insecure Direct Object Reference.

The v4.6.32 chokepoint refactor (which patched CVE-2026-44334 / GHSA-xcmw-grxf-wjhj) added the PRAISONAI_ALLOW_LOCAL_TOOLS env-var gate to the tool_override.py sinks.

Vulnerability in the Oracle Document Management and Collaboration product of Oracle E-Business Suite (component: Attachments).

Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Item Catalog).

Vulnerability in the Oracle Product Workbench product of Oracle E-Business Suite (component: Security).

A SQL injection (CWE-89) and security boundary bypass (CWE-863) vulnerability exists in the prebuilt BigQuery forecasting tool (bigquery-forecast) of googleapis/mcp-toolbox.

The MCTP-over-I2C+GPIO target binding in Zephyr (subsys/pmci/mctp/mctp_i2c_gpio_target.c) processes pseudo-register writes from an I2C bus master byte-by-byte in mctp_i2c_gpio_target_write_received()…

Vulnerability in the Oracle Communications Converged Application Server product of Oracle Communications (component: Security).

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).

Vulnerability in the Oracle Process Manufacturing Logistics product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Sales Offline product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Web Content Management).

Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Web Content Management).

Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Web Content Management).

Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Web Content Management).

Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server).

Vulnerability in the Oracle Enterprise Command Center Framework product of Oracle E-Business Suite (component: Core).

Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Generic Unix Connector).

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).

Kubeflow Community Distribution helps users to install Kubeflow Platform in popular Kubernetes clusters.

Vulnerability in the Oracle Public Sector Financials (International) product of Oracle E-Business Suite (component: Authorization).

This High severity RCE (Remote Code Execution) vulnerability was introduced in version 3.4.11 of Sourcetree for Mac and Sourcetree for Windows.

A local privilege escalation vulnerability exists in snap-confine, a set-capabilities core component used internally by Canonical snapd to construct the secure execution environment for snap applications.

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Install).

Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications (component: Platform).

Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications (component: BRM Server).

Vulnerability in the Oracle Project Foundation product of Oracle E-Business Suite (component: Miscellaneous).

Vulnerability in the PeopleSoft Enterprise SCM Order Management product of Oracle PeopleSoft (component: Security).

Vulnerability in the Oracle Communications BRM - Elastic Charging Engine product of Oracle Communications (component: Diameter Gateway and SDK).

Vulnerability in the Oracle E-Business Tax product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystems).

Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component: Studio).

Vulnerability in the PeopleSoft Enterprise FIN Project Costing product of Oracle PeopleSoft (component: Projects).

Vulnerability in Oracle GoldenGate (component: Libraries).

Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: mod_http2.so).

Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: Core).

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).

Data::SpatialHash::Shared versions before 0.02 for Perl allow out-of-bounds reads and writes via unvalidated bucket, link and free-list indices in sph_walk_cell and sph_alloc_slot.

Directory Traversal vulnerability in DayuanJiang next-ai-draw-io 0.4.13 allowsa remote attacker to execute arbitrary code via the nex-ai-draw-io/mcp-server

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).

A flaw was found in ansible-core.

Insufficient validation of untrusted input in Chromecast in Google Chrome prior to 150.0.7871.182 allowed a local attacker to potentially perform a sandbox escape via malicious network traffic. (Chromium…

Vulnerability in the Oracle HRMS (UK) product of Oracle E-Business Suite (component: UK Payroll).

Vulnerability in the Oracle HRMS (Norway) product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Advanced Benefits product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Configure to Order product of Oracle E-Business Suite (component: Supply to Order Workbench).

Vulnerability in the Oracle Inventory Management product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Capacity product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager).

Vulnerability in the Oracle Process Manufacturing Regulatory Management product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server).

Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J).

Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Integration Business Insight).

Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: PeopleSoft Applications).

Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler).

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Application Service Level Mgmt).

Version 1.3.0 has an authorization bypass in the /api/getTagValue endpoint allows unauthenticated access to tag values when the referenced script does not exist.

Vulnerability in the Oracle Production Scheduling product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Advanced Planning Command Center product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Advanced Benefits product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Management).

Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framework).

Vulnerability in the Oracle Work in Process product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server).

Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server).

Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain (component: CSV Management).

Vulnerability in the Oracle Enterprise Command Center Framework product of Oracle E-Business Suite (component: Core).

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console).

Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server).

Versions prior to 0.1.4 have an Insecure Direct Object Reference.

The Classic (BR/EDR) L2CAP signaling handlers l2cap_br_conf_req() and l2cap_br_conf_rsp() in subsys/bluetooth/host/classic/l2cap_br.c validated the minimum command size against buf->len (the bytes remaining…

The bpost-shipping-platform WordPress plugin before 3.2.3 does not properly sanitize a parameter before using it in a SQL query during WooCommerce order submission, allowing unauthenticated attackers to…

Feedbin (commit 739884a) contains an unauthenticated information disclosure vulnerability that allows unauthenticated attackers to retrieve private article content by sending requests to the entries text…

Ollama (HEAD f0078ae) contains an uncontrolled memory allocation vulnerability in the GGUF metadata parser that allows remote attackers to crash the server by supplying a crafted GGUF file with…

Ninja Forms WordPress plugin version 3.14.8 and prior contains an improper input validation vulnerability that allows unauthenticated attackers to inject arbitrary numeric values into form calculations and…

Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: US Payroll - General).

Vulnerability in the Oracle Process Manufacturing Process Execution product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Lease and Finance Management product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle In-Memory Cost Management for Discrete Industries product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the PeopleSoft Enterprise FIN Common Objects Brazil product of Oracle PeopleSoft (component: Staffing).

Vulnerability in the PeopleSoft Enterprise FIN Common Objects Brazil product of Oracle PeopleSoft (component: Common Objects).

Vulnerability in the Oracle Communications Converged Application Server product of Oracle Communications (component: RTP Proxy).

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility).

Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Installation).

Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security).

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager).

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager).

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager).

Vulnerability in the Oracle Advanced Benefits product of Oracle E-Business Suite (component: Affordable Care Act).

Vulnerability in the Oracle Complex Maintenance, Repair and Overhaul product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framework).

Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core).

Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: DB Privileges).

Vulnerability in the PeopleSoft Enterprise SCM Manufacturing product of Oracle PeopleSoft (component: Security).

Vulnerability in the PeopleSoft Enterprise FIN Payables product of Oracle PeopleSoft (component: Security).

Vulnerability in the PeopleSoft Enterprise SCM Order Management product of Oracle PeopleSoft (component: Security).

Vulnerability in the PeopleSoft Enterprise SCM Inventory product of Oracle PeopleSoft (component: Security).

Vulnerability in the PeopleSoft Enterprise SCM Mobile Inventory Management product of Oracle PeopleSoft (component: Security).

Vulnerability in the PeopleSoft Enterprise FIN Common Objects Brazil product of Oracle PeopleSoft (component: Purchasing).

Vulnerability in the Oracle iRecruitment product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Project Portfolio Analysis product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Service Fulfillment Manager product of Oracle E-Business Suite (component: Fulfillment Engine).

Vulnerability in the Oracle Public Sector Financials product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Public Sector Financials product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Quoting product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Quality product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Cost Management product of Oracle E-Business Suite (component: Costing Transaction Errors).

Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core).

Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager).

Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager).

Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server).

Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: Data Visualization Tools).

Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: Security Framework).

Vulnerability in the JD Edwards EnterpriseOne HCM Foundation product of Oracle JD Edwards (component: Time Accounting and HRM Base).

Vulnerability in the PeopleSoft Enterprise CS Student Records product of Oracle PeopleSoft (component: Higher Ed Statistics Agency - UK HESA).

Vulnerability in the PeopleSoft Enterprise CS Campus Community product of Oracle PeopleSoft (component: Security).

Vulnerability in the PeopleSoft Enterprise CS Student Records product of Oracle PeopleSoft (component: Research Tracking).

Vulnerability in the PeopleSoft Enterprise FIN Staffing Front Office product of Oracle PeopleSoft (component: Staffing Front Office).

Vulnerability in the Oracle Enterprise Command Center Framework product of Oracle E-Business Suite (component: Core).

Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites).

Vulnerability in the JD Edwards EnterpriseOne Human Resources Management product of Oracle JD Edwards (component: Human Resources).

Vulnerability in the JD Edwards EnterpriseOne CRM Foundation product of Oracle JD Edwards (component: CRM Foundation).

Vulnerability in the JD Edwards EnterpriseOne Advanced Pricing - Procurement product of Oracle JD Edwards (component: Advanced Pricing).

Vulnerability in the JD Edwards EnterpriseOne Requirements Planning product of Oracle JD Edwards (component: Requirements Planning).

Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core).

Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core).

Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core).

Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler).

Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component: Patchset Assistant).

Vulnerability in the MySQL Router product of Oracle MySQL (component: Router: General).

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).

Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/C++).

Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage Applications (component: POS).

Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage Applications (component: POS).

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).

A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes.

A remote unauthenticated peer can leak one direct `ByteBuf` per HTTP/2 `DATA` frame in applications that enable HTTP/2 content decompression via `DelegatingDecompressorFrameListener`.

Netty's `Http3FrameCodec` buffers incoming data for HTTP/3 reserved frame types up to the wire-specified payload length without limits; `decodeFrame` trusts `payLoadLength`, allowing an attacker to open…

The `SpdyHttpDecoder` handler in Netty's SPDY-to-HTTP codec allocates a pooled `ByteBuf` when processing a client-initiated `SYN_STREAM` frame with `FLAG_FIN=0` and stores the partially constructed…

And 4.1.0.Final up to (but not including) 4.1.135, the `HAProxyMessageDecoder` in Netty's `codec-haproxy` module performs protocol version detection by reading the 13th byte as a signed Java `byte` and…

Netty SPDY header decoding continues inflating zlib-compressed header blocks after the raw header parser has exceeded `maxHeaderSize` and marked the frame truncated in `SpdyFrameCodec`, allowing a remote…

Netty's SPDY SETTINGS decoder accepts a peer-declared SETTINGS entry count up to the 24-bit frame-length limit and materializes every unique setting ID in `DefaultSpdySettingsFrame`, allowing a remote…

SQL Injection vulnerability in aiflowy <= 2.1.2 allows a remote attacker to obtain sensitive information via the getPageData method in the DatacenterQuery.java file

An issue in aiflowy <= 2.1.2 allows a remote attacker to obtain sensitive information via the JobUtil.java file.

An issue in exo-explore exo 1.0.69 allows a remote attacker to escalate privileges via the GET /state and DELETE /instance/{instance_id} endpoints with no authentication.

An issue in DayuanJiang next-ai-draw-io 0.4.13 allows a remote attacker to obtain sensitive information via the x-ai-provider component

Versions of the repo prior to commit 923820de8f64d753951fbbd54f7282a3d5f75173 were vulnerable to exfiltration of `GITHUB_TOKEN` with write permissions to the repository.

The header_size field is read as an `unsigned int` from the first 4 bytes of an Analyze/NIfTI file and passed directly to `new unsigned char[header_size]` without being bounded against the actual file size.

Two bugs in libheif chain to leak process heap memory as visible pixel values in decoded grid images.

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries).

Vulnerability in Oracle Java SE (component: Scripting).

Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager).

Vulnerability in the Oracle Cost Management product of Oracle E-Business Suite (component: Cost Maintenance).

Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer.

A denial of service vulnerability could be triggered by sending specially crafted HTTP requests to server function endpoints, this could lead to excessive CPU usage; affecting the following packages:…

Vulnerability in Oracle Application Testing Suite.

Directory traversal vulnerability in knowns-dev/knowns 0.11.4 via crafted path value to the get_doc and update_doc tools.

Directory traversal vulnerability in knowns-dev/knowns 0.11.4 via crafted folder name value to the create_doc tool.

This High severity Information Disclosure vulnerability was introduced in versions 7.17.0, 7.19.0, 8.5.0, 8.9.0, 9.0.1, 9.1.0, 9.2.0, 10.0.2, 10.1.0, and 10.2.0 of Confluence Data Center.

A flaw was found in dracut.

Insufficient validation of untrusted input in Certificate in Google Chrome on Linux prior to 150.0.7871.182 allowed an attacker in a privileged network position to perform domain spoofing via malicious…

Invalid pointer in the Security: PSM component.

Information disclosure in the Networking: WebSockets component.

Information disclosure in the DOM: Security component.

Site isolation issue in the DOM: Navigation component.

Site isolation issue in the Graphics component.

Information disclosure in the Storage: IndexedDB component.

Information disclosure due to uninitialized memory in the Graphics: WebGPU component.

Information disclosure due to uninitialized memory in the Graphics: WebGPU component.

Information disclosure due to uninitialized memory in the Graphics: WebGPU component.

Other issue in the DOM: Copy & Paste and Drag & Drop component.

Denial-of-service in the Graphics: WebGPU component.

Information disclosure in the Framework component in DevTools.

Information disclosure in the Privacy component in Firefox for Android.

Information disclosure in the Graphics: ImageLib component.

The arraycmp SIMD implementation for Z and P does not check if the number of bytes to compare is zero.

Uncontrolled recursion in the JSON, CBOR, and XML deserializer functions emitted by Amazon smithy-rs code generation could allow remote attackers to cause a denial of service (process abort via stack…

BuildKit custom frontends or clients using the raw low-level API can set git.checkoutbundle=true when checking out Git sources.

A malicious BuildKit client or frontend could craft a request that could lead to BuildKit daemon crashing with a panic.

A crafted message in the BuildKit low-level build API can be used to remove the contents of the /tmp directory.

A custom client can produce such an upload request to the BuildKit daemon that files can escape from the BuildKit-controlled state directory.

Vulnerability in the PeopleSoft Enterprise FIN Common Objects Brazil product of Oracle PeopleSoft (component: eProcurement).

Vulnerability in the PeopleSoft Enterprise SCM Manufacturing product of Oracle PeopleSoft (component: Security).

Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Installation).

Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security).

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System).

Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framework).

Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core).

Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the MySQL Router product of Oracle MySQL (component: Router: General).

Vulnerability in the PeopleSoft Enterprise HCM Human Resources product of Oracle PeopleSoft (component: Core).

Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/Net).

Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/C++).

`OcspClient` does not validate that the `CertificateID` in an OCSP response matches the requested `CertificateID`, which can lead to replay attack. `OcspClient.validateResponse` accepts a legitimately…

Vulnerability in Oracle Java SE (component: Scripting).

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: OpenSearch Dashboards).

Vulnerability in the Oracle Retail EFTLink product of Oracle Retail Applications (component: Core/Plugin).

Spoofing issue in Firefox for Android.

FileGator accepts arbitrary Unix permission values via the '/chmoditems' API endpoint and passes the value directly to PHP's native 'chmod()' function through 'octdec()' conversion, with no validation.

Vulnerability in the Oracle Document Management and Collaboration product of Oracle E-Business Suite (component: Attachments).

Vulnerability in the Oracle HCM Configuration Workbench product of Oracle E-Business Suite (component: Spreadsheet Loading).

Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framework).

Vulnerability in the Oracle Learning Management product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer).

Use After Free vulnerability in the Rust deserialization logic of Apache Fory.

The DHIS2 OpenAPI HTML endpoint reflected values from the `scope` query parameter into the generated HTML document without sufficient sanitization.

The `selectForm()` helper in `fogpage.class.php` renders `<option>` labels using raw, unescaped user input.

The unauthenticated inventory service endpoint (`/service/inventory.php`) persists client-supplied values without sanitization, and the Host Management Inventory page renders all static inventory fields…

Vulnerability in the Oracle Communications Pricing Design Center product of Oracle Communications (component: On-premise Deployment).

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Enterprise Config Management).

A flaw has been found in SourceCodester Class and Exam Timetabling System 1.0.

A vulnerability has been found in D-Link DNS-320 1.0.2.

A vulnerability was detected in D-Link DNS-320 1.0.2.

A security vulnerability has been detected in D-Link DNS-320 1.0.2.

A weakness has been identified in D-Link DNS-320 1.0.2.

A vulnerability was identified in D-Link DNS-320 1.0.2.

A vulnerability was determined in D-Link DNS-320 1.0.2.

A post-authentication command injection vulnerability in the "LogServer" field of the syslog component in Zyxel AX7501-B1 firmware versions through 5.17(ABPC.7.2)C0 could allow an authenticated attacker…

An authenticated path traversal vulnerability exists in AOS-CX.

Buffer overflow vulnerabilities exist in the command line interface of AOS-CX.

Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Human Resources product of Oracle E-Business Suite (component: Data Removal Tool).

Vulnerability in the Oracle Lease and Finance Management product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle EDI Gateway product of Oracle E-Business Suite (component: All Miscellaneous EDI Issues).

Vulnerability in the Oracle Process Manufacturing Systems product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools).

Vulnerability in the Oracle Applications DBA product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication).

Vulnerability in the PeopleSoft Enterprise FIN Billing Argentina product of Oracle PeopleSoft (component: Billing).

Vulnerability in the Oracle Advanced Supply Chain Planning product of Oracle E-Business Suite (component: Core).

Vulnerability in the Oracle Financials for the Americas product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Cost Management product of Oracle E-Business Suite (component: Inventory Costing).

Vulnerability in the Oracle iRecruitment product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Process Manufacturing Logistics product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Public Sector Payroll product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Public Sector Payroll product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Shipping Execution product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Property Manager product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle HCM Configuration Workbench product of Oracle E-Business Suite (component: Rapid Implementation).

Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite (component: MWA General Bugs).

Vulnerability in the Oracle HCM Common Architecture product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Interaction Blending product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart).

Vulnerability in the Oracle Receivables product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Receivables product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Assets product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Trading Community product of Oracle E-Business Suite (component: Party Search UI).

Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Web Content Management).

Vulnerability in the Oracle Enterprise Command Center Framework product of Oracle E-Business Suite (component: Core).

Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Integration Business Insight).

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console).

Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core).

Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core).

Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core).

Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core).

Vulnerability in Oracle GoldenGate (component: Distribution Server executable).

Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: ADF Shared Components).

Vulnerability in the Oracle Project Costing product of Oracle E-Business Suite (component: Enterprise Command Center).

Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server).

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: X Plugin).

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console).

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Self Update Framework).

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Self Update Framework).

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Connector Framework).

Vulnerability in the Oracle Utilities Network Management System product of Oracle Utilities Applications (component: Mobile).

Vulnerability in the Oracle Human Resources product of Oracle E-Business Suite (component: Data Removal Tool).

The _copyProps function in lib/src/object/copy.ts uses for...in to iterate over source object properties without an Object.hasOwnProperty check, and does not filter dangerous keys (__proto__, constructor,…

A vulnerability in the command line interface of ECOS devices could allow a highly privileged, authenticated remote attacker to perform command injection on certain CLI commands.

A vulnerability in the web-based management interface of an ECOS device could allow a highly privileged, authenticated remote attacker to access the device's filesystem.

The MapSVG plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the SVGFile constructor in all versions up to, and including, 8.14.0 This is due to an…

Unsanitized user-supplied input in report filtering parameters is concatenated directly into SQL queries without proper escaping or parameterized queries, enabling blind SQL injection and unauthorized…

Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: US Payroll Year End).

Vulnerability in the Oracle HRMS (UK) product of Oracle E-Business Suite (component: UK Payroll).

Vulnerability in the Oracle Human Resources product of Oracle E-Business Suite (component: Enterprise Command Center).

Vulnerability in the Oracle Contracts Integration product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Price Protection product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Process Manufacturing Logistics product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Commerce Guided Search Platform Services product of Oracle Commerce (component: Forge).

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller).

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager).

Vulnerability in the Oracle HRMS (UK) product of Oracle E-Business Suite (component: UK Payroll).

Vulnerability in the Oracle Communications Unified Inventory Management product of Oracle Communications (component: Security).

Vulnerability in the Oracle Production Scheduling product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Time and Labor product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Project Portfolio Analysis product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Project Portfolio Analysis product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Project Portfolio Analysis product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: Create Item Instance).

Vulnerability in the Oracle Advanced Pricing product of Oracle E-Business Suite (component: Pricing Installation).

Vulnerability in the Oracle Advanced Pricing product of Oracle E-Business Suite (component: Pricing Installation).

Vulnerability in the Oracle Price Protection product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility).

Vulnerability in the Oracle Compensation Workbench product of Oracle E-Business Suite (component: Compensation Workbench).

Vulnerability in the Oracle Compensation Workbench product of Oracle E-Business Suite (component: Compensation Workbench).

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Search Bean [Incl.

Vulnerability in the Oracle Financials Common Modules product of Oracle E-Business Suite (component: Common Components).

Vulnerability in the Oracle Field Service product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Interaction Blending product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystems).

Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Web Content Management).

Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J).

Vulnerability in the PeopleSoft Enterprise CS Campus Community product of Oracle PeopleSoft (component: Person Data).

Vulnerability in the Oracle Enterprise Command Center Framework product of Oracle E-Business Suite (component: Core).

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console).

Vulnerability in the JD Edwards EnterpriseOne HCM Foundation product of Oracle JD Edwards (component: OW HR PR Foundation).

Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core).

Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core).

Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server).

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).

Vulnerability in the Oracle Payments product of Oracle E-Business Suite (component: File Transmission).

Authorization Bypass Through User-Controlled Key (CWE-639) in Kibana can lead to unauthorized information disclosure and case attachment integrity compromise via Privilege Abuse (CAPEC-122).

Shelf is multi-tenant; data is isolated per organization (workspace).

CC-Tweaked's HTTP API (`http.request`, `http.websocket`) blocks requests to private network ranges to prevent server-side request forgery (SSRF).

A missing authorization check in the Space member management controller allowed any authenticated user to trigger the removal of all members from any Space, regardless of their own role or membership in…

Hidden metadata in a webpage causes PraisonAI agents to write attacker-controlled content to arbitrary paths. `write_file` skips path validation when `workspace=None` (always `None` in production).

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PIA Core Technology).

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Metadata Plugin).

Zohocorp ManageEngine ADSelfService Plus versions before 6524 are vulnerable to Multi Factor Authentication Bypass.

Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: Security Framework).

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility).

Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager).

Vulnerability in the JD Edwards EnterpriseOne General Ledger product of Oracle JD Edwards (component: E1 Foundation).

Missing Cryptographic Step (CWE-325) vulnerability exists in certain FeliCa IC chips shipped in or before 2017.

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Discovery Framework).