CVEs published September 15, 2026

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).

Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component: Forms Services, C/S, Charmode).

Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server).

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Container).

Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars).

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).

Setting MCP_TRANSPORT=sse causes src/mysql_mcp_server/server.py to construct SseServerTransport without security_settings or enable_dns_rebinding_protection, while the Starlette routes /, /sse, and…

The python_sandbox_server in mcp-servers/python/python_sandbox_server/src/python_sandbox_server/server_fastmcp.py exposes raw getattr through safe_builtins, omits a required _getattr_ guard, and relies on…

Casdoor through 4.4.0 contains an authorization bypass vulnerability in the /api/mcp endpoint that allows attackers with any application's clientId and clientSecret to gain unrestricted access to user…

A security flaw has been discovered in D-Link DI-8400 16.07.

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Platform Security).

Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server).

Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server).

Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server).

Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server).

Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer).

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: TopLink Integration).

Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites).

Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler).

Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler).

Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler).

kaiten from 57.192.20 to before 57.214.26 is vulnerable to SQL Injection.

A vulnerability exists in the SD-WAN Orchestrator that may lead to the exposure of sensitive configuration information.

Privilege escalation vulnerabilities exist in the API of HPE Networking EdgeConnect SD-WAN Orchestrator.

Privilege escalation vulnerabilities exist in the API of HPE Networking EdgeConnect SD-WAN Orchestrator.

Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer).

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).

9.0.22, and 9.1.10, DataManagementSystem/Service/FileCatalogHandler.py checkDataset forwards an authenticated caller-controlled datasets value to DatasetManager.py __checkDataset, where datasetName is…

CodeMode in src/praisonai-ts/src/tools/builtins/code-mode.ts executes untrusted JavaScript with new Function() inside with(sandbox) and relies on a small source-code blocklist plus shadowed process and…

9.0.22, and 9.1.10, the RequestManagementSystem/Service/ReqManagerHandler.py export_getRequestCountersWeb function passes an authenticated caller-controlled groupingAttribute to…

A maliciously constructed mail header could lead to multiple fields being parsed as one, or potential memory safety violations.

Sandbox escape in the Profile Backup component.

Incorrect boundary conditions in the Security: Process Sandboxing component.

Incorrect boundary conditions in the DOM: Animation component.

Incorrect boundary conditions in the Networking: HTTP component.

Cotonti 1.0.0 Comments plugin passes the ci GET parameter to unserialize() without allowed_classes restriction, allowing unauthenticated attackers to instantiate arbitrary PHP classes with…

Tencent Mass Service Engine in Cluster (MSEC) allows a remote, unauthenticated attacker to send a crafted POST request including ../ and gain root access on the target device.

The Issabel Framework, the web framework supporting Issabel PBX software, before commit b97dbaf contains a hard-coded HS256 JWT signing key in the pbxapi index.php file that is identical across every…

SmartAdmin v3.30.0 contains an authorization flaw in the configuration query endpoint.

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).

Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite (component: MWA Terminal Server).

Vulnerability in the Oracle Document Management and Collaboration product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Enterprise Manager for Fusion Middleware product of Oracle Enterprise Manager (component: Metrics).

Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle).

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Personalization).

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Platform Security).

Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Security).

Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Core).

Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component: Console / Repository Explorer).

Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler).

Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component: Forms Services, C/S, Charmode).

Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component: Forms Services, C/S, Charmode).

Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component: Forms Services, C/S, Charmode).

Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component: Forms Services, C/S, Charmode).

Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component: Forms Services, C/S, Charmode).

Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server).

Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server).

Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server).

Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server).

Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server).

Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI).

Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites).

Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites).

Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites).

Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler).

Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars).

Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars).

Buffer overflow vulnerabilities exist in the underlying operating system of HPE Networking EdgeConnect SD-WAN Gateways that could allow an unauthenticated remote attacker to execute arbitrary code.

Vulnerabilities have been identified in the API of EdgeConnect SD-WAN Orchestrator that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls.

Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Portlet Services).

Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: ADF Faces).

Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer).

Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Portlet Services).

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).

The mySCADA myPRO Manager command API does not properly enforce authentication for privileged functions.

Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: Core).

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).

Dell SmartFabric OS10 Software, versions prior to 10.6.1.3, contains a Session Fixation vulnerability.

The pre-authentication /authservice PLL endpoint accepts a CustomCallback XML element whose className value selects an arbitrary Java class for AuthXMLUtils to load and instantiate without verifying that it…

The SSE transport mode (`SSE=true`) exposes all MCP tools without any authentication.

Praisonai_platform/services/auth_service.py falls back to the public dev-secret-change-me HS256 signing key when PLATFORM_JWT_SECRET is unset, while the startup and token-issuance guards are disabled…

Praisonai_platform/services/auth_service.py assigns the public dev-secret-change-me value to JWT_SECRET when PLATFORM_JWT_SECRET is unset, and its production guard does not run when PLATFORM_ENV is also…

The codeMode tool in src/praisonai-ts/src/tools/builtins/code-mode.ts executes model-generated JavaScript with new Function() and with(sandbox), while a regular-expression blocklist can be bypassed with…

MCPServer.startHttp() in src/praisonai-ts/src/mcp/server.ts binds without a host restriction and forwards every HTTP POST request to handleRequest() without authentication or authorization.

This could lead to remote escalation of privilege with no additional execution privileges needed.

This could lead to remote escalation of privilege with no additional execution privileges needed.

Surfio does not correctly validate size fields in IRAP files, leading to a buffer overflow when untrusted files are parsed.

Fireshare facilitates self-hosted media and link sharing.

Ghostscript before 10.08.0 contains a heap-based buffer overflow vulnerability in the JPEG 2000 output adapter (base/sjpx_openjpeg.c) that allows attackers to cause memory corruption by supplying a crafted…

TOTOLINK X5000R V9.1.0cu.2415_B20250515 was discovered to contain a hardcoded password for root access.

libwebsockets HTTP/2 HPACK Path Header Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability.

IBM MQ 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1 CD, 9.4.0.0 through 9.4.0.25 LTS, 9.4.0.0 through 9.4.5.1 LTS, and 10.0.0.0 could allow a remote attacker to execute arbitrary code due to unsafe…

IBM Verify Identity Access is vulnerable to a buffer overflow attack.

Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component.

Sandbox escape due to incorrect boundary conditions in the WebRTC component.

Sandbox escape due to incorrect boundary conditions in the Graphics component.

Sandbox escape due to invalid pointer in the Graphics component.

Sandbox escape in the DOM: Core & HTML component.

Use after free in Workers in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity:…

Improper input validation in ANGLE in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security…

Use after free in DigitalCredentials in Google Chrome prior to 153.0.8010.47 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page.…

Integer overflow in V8 in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

Use after free in Core in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

Use after free in Auth in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

Use after free in WebAppInstalls in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).

Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer).

Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Portlet Services).

Vulnerability in the Oracle Managed File Transfer product of Oracle Fusion Middleware (component: MFT Runtime Server).

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).

On affected platforms running Arista EOS with Dynamic Host Configuration Protocol (DHCP) relay configured, an unauthenticated attacker with network access could send a crafted DHCP reply packet from an IP…

The affected products use hard-coded credentials, which could allow remote access to files with root privileges where FTP is reachable.

The affected products are missing authorization on state-changing CGIs and session checks are not performed.

Versions prior to 2.1.30 expose the Streamable HTTP MCP endpoint without an effective Host or Origin allowlist.

When the environment variable `ENABLE_DYNAMIC_API_URL=true` is set, the server reads the `X-GitLab-API-URL` HTTP request header and uses it as the base URL for all outbound GitLab API calls made within that…

On macOS, the virtio-fs host server used by Docker Sandboxes improperly follows symlinks when reopening an unlinked file from a stored path.

An insufficient check allowed for the overwrite of arbitrary files via a symlink.

AgentOS in src/praisonai-ts/src/os/agentos.ts uses the 0.0.0.0 default from src/praisonai-ts/src/os/config.ts and registers GET /api/agents and POST /api/chat without authentication middleware.

Incorrect boundary conditions in the DOM: Editor component.

FreeRDP server versions before 3.31.0 contain a protocol negotiation bypass vulnerability that allows unauthenticated attackers to establish RDSTLS connections despite server policy disabling them.

An unauthenticated OS command injection vulnerability exists in the ping.php endpoint, allowing remote attackers to execute arbitrary commands on the underlying operating system and achieve remote code…

Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core).

Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Portlet Services).

A fail-open in the authentication code allows any attacker to bypass authentication by flooding a public endpoint to exhaust resources causing database access to fail, granting unauthenticated access to all…

MSISDNValidation in the MSISDN authentication module concatenates the request-supplied MSISDN value into an LDAP search filter without escaping, while the default empty trusted-gateway list allows all traffic.

The Liberty Web Services SOAP receiver permits unauthenticated remote requests to write persistent entries through SOAPReceiver and DiscoveryService into a user's Liberty Discovery store and the shared…

Ember HTTP/1.1 does not reject messages containing both Transfer-Encoding and Content-Length, so an intermediary and Ember can select different body framing rules.

WebAuthnAuthentication.deserialize applies an ObjectInputFilter that allows every serialized object at depth greater than 1 and therefore constrains only an AuthenticatorImpl root object.

The JMX RMI connector in opendj-server-legacy/src/main/java/org/opends/server/protocols/jmx/RmiConnector.java processes attacker-controlled credential objects before authentication without a restrictive…

WebAuthnAuthentication loads a serialized AuthenticatorImpl object graph from the configured userAttribute through loadAuthenticators without an ObjectInputFilter.

A malicious or compromised IMAP server can trigger an out-of-bounds read in the IMAP response parser by sending an untagged '* ID' response, crashing Thunderbird.

Mitigation bypass in the Widget: Win32 component.

Mitigation bypass in the Networking component.

Mitigation bypass in the Enterprise Policies component.

Spoofing issue due to invalid pointer in the Graphics component.

Sandbox escape due to race condition in the XPConnect component.

Mitigation bypass in the DOM: Networking component.

Mitigation bypass in the Remote Settings Client component.

Site isolation issue in the Graphics component.

pig before 4.1.0 contains an authentication bypass vulnerability in the /register/password endpoint where password verification results are discarded, allowing any value as the current password.

A flaw has been found in D-Link DI-8300 16.07.

A vulnerability was determined in EFM ipTIME C200E 1.094.

A trust subnet written in IPv4-mapped IPv6 notation with an IPv4-sized prefix, such as ::ffff:10.0.0.0/8 instead of the correct ::ffff:10.0.0.0/104, is accepted without error but trusts every IPv4 address…

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).

Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security).

Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security).

Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Security).

Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Event Java PX).

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Siebel Management Console).

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).

Vulnerability in the Siebel Apps - Financial Services product of Oracle Siebel CRM (component: Financial Accounts).

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).

Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI).

Vulnerability in Oracle Application Testing Suite.

Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component: Forms Services, C/S, Charmode).

Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component: Forms Services, C/S, Charmode).

Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component: Forms Services, C/S, Charmode).

Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools).

Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle).

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).

A hardcoded cryptographic client authentication key vulnerability exists in the robot testing framework component of Wärtsilä FOS-Onboard.

A command injection vulnerability exists in the command line interface of EdgeConnect SD-WAN Gateways.

Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Portlet Services).

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).

Dell SmartFabric OS10 Software, versions prior to 10.6.1.3, contains a Download of Code Without Integrity Check vulnerability.

Conflibot warns in advance when merging a pull request will cause conflicts in other open pull requests.

The official Docker image sets APP_SECRET to the public value change_this_to_something_unique in Dockerfile, and .docker/entrypoint.sh neither replaces nor rejects that value before Symfony uses it as…

AuthorizationCodeGrantTypeHandler requires a code_verifier only when the realm-wide codeVerifierEnforced setting is enabled, even when an authorization code stores a code_challenge.

MotionEye accepts the client-controlled meye_username and meye_password_hash cookies as authentication material without server-side session validation.

IBM Verify Identity Access containers may not apply management password change operations correctly.

Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component.

Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component: Forms Services, C/S, Charmode).

A hardcoded cryptographic server key vulnerability exists in the deployer-ng Update Controller component of Wärtsilä FOS-Onboard.

Time-of-check Time-of-use (TOCTOU) Race Condition in Slab safeurl allows an attacker who controls a hostname's DNS responses to reach internal network destinations that validation rejected.

Server-Side Request Forgery (SSRF) vulnerability in Slab safeurl allows an attacker who controls a validated URL to reach internal network destinations the library is configured to block.

Pipeline/backend/kubernetes/backend_options.go defines backend_options.kubernetes.serviceAccountName, and the Kubernetes backend in pipeline/backend/kubernetes/pod.go copies that pipeline-step value…

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Web General).

Incorrect boundary conditions in the Networking component.

Mitigation bypass in the Popup Blocker component.

Privilege escalation in the Enterprise Policies component.

Use-after-free in the Widget: Gtk component.

Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component.

Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component.

Privilege escalation in the Session Restore component.

Use-after-free in the Internationalization component.

Use-after-free in the Graphics component.

Use-after-free in the Graphics: Text component.

Privilege escalation in the DevTools component.

Privilege escalation in the Memory component.

Privilege escalation in the Graphics: CanvasWebGL component.

Privilege escalation due to uninitialized memory in the Graphics: CanvasWebGL component.

Use-after-free in the Widget: Win32 component.

Privilege escalation in the Crash Reporting component.

Use-after-free in the Graphics component.

Privilege escalation due to incorrect boundary conditions in the Audio/Video component.

Use-after-free in the JavaScript: WebAssembly component.

Privilege escalation in Firefox for Android.

Use-after-free in the SVG component.

Use-after-free in the DOM: Core & HTML component.

Use-after-free in the DOM: Streams component.

Use-after-free in the Networking component.

Use-after-free in the DOM: Navigation component.

Use-after-free in the SVG component.

Use-after-free in the XML component.

Use-after-free in the DOM: HTML Parser component.

Use-after-free in the JavaScript Engine: JIT component.

Privilege escalation due to incorrect boundary conditions in the Graphics: WebRender component.

Privilege escalation in the DOM: Service Workers component.

Use-after-free in the Disability Access APIs component.

Privilege escalation in the WebExtensions component.

Privilege escalation due to incorrect boundary conditions in the Graphics component.

Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component.

Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component.

Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component.

Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component.

Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component.

Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component.

Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component.

Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component.

FreeRDP versions before 3.31.0 contain a heap-based buffer overflow in nego_send_negotiation_request when processing Server Redirection PDU messages with attacker-controlled LoadBalanceInfo fields.

Flowise versions before 3.1.4 fail to validate file paths in the SQL Database Chain node when connecting to SQLite databases, allowing authenticated attackers to write arbitrary files.

Polyaxon through 2.16.4 renders operation specification fields with an unsandboxed Jinja2 environment during server-side run preparation, allowing authenticated users to execute arbitrary code.

Weights & Biases wandb before 0.29.0 fails to validate the file name from server responses in the File.download function, allowing path traversal attacks.

Use after free in V8 in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

Type confusion in CacheStorage in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

Use after free in PDF in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

Use after free in DOM in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

Type confusion in Compositing in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

Use after free in Input in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

Use after free in Internals in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity:…

Type confusion in ServiceWorker in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

Out of bounds write in ServiceWorker in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

Type confusion in ServiceWorker in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

An issue in RuoYi-Vue-Plus 6.0.0 allows a remote attacker to execute arbitrary code via the FlwTaskController.java component, and the FlwTaskServiceImpl.completeTask, CompleteExecuteComponent.process,…

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).

Vulnerability in the Oracle Contract Lifecycle Management for Public Sector product of Oracle E-Business Suite (component: ECC For Award and IDV).

Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Other issue).

Vulnerability in the Oracle Contract Lifecycle Management for Public Sector product of Oracle E-Business Suite (component: Award/PO).

Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Setup Workbench).

Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network.

Vulnerability in the Oracle Contracts product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Demand Signal Repository product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Document Management and Collaboration product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Complex Maintenance, Repair and Overhaul product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: Security Framework).

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).

Vulnerability in the RDBMS component of Oracle Database Server.

Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: Security).

Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Oracle Diagnostics Interfaces).

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Server).

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Personalization).

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Personalization).

Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Security).

Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: Resource Catalog Services).

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Service Administration UI).

Vulnerability in the RDBMS component of Oracle Database Server.

Vulnerability in the Siebel Apps - Self Service product of Oracle Siebel CRM (component: Helpdesk/Training).

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).

Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM (component: Workflow).

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Migration).

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Personalization).

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).

Vulnerability in the Oracle Depot Repair product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle User Management product of Oracle E-Business Suite (component: Proxy User Delegation).

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).

Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Oracle Diagnostics Interfaces).

Vulnerability in the Oracle Customer Interaction History product of Oracle E-Business Suite (component: User Interface).

Vulnerability in the Oracle Customer Interaction History product of Oracle E-Business Suite (component: Outcome-Result).

Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Attachments / File Upload).

Vulnerability in the RDBMS component of Oracle Database Server.

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).

Vulnerability in Oracle Application Testing Suite.

Vulnerability in the Oracle Spares Management product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Spares Management product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Report Manager product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Sales Online product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Report Manager product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Audience).

Vulnerability in the Oracle Alert product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle User Management product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Spares Management product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager).

Vulnerability in the Oracle Fusion Middleware Control product of Oracle Fusion Middleware (component: Framework).

Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools).

Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites).

Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites).

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Report Distribution).

Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle).

Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle).

Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle).

Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle).

Incorrect privilege assignment in the admin user-management component of Webkul Bagisto 2.4.9 allows an authenticated backend user holding only the settings.users.edit permission to escalate to full…

Netcore NR255-V version 1.5.130703 contains an os command argument injection vulnerability in the Nettools tcpdump launch paths, including ntools_start_set_cgi, ntools_tcpdump_start_set_cgi, exe_default,…

Netcore NR255-V version 1.5.130703 contains a stack-based buffer overflow in ntools_tcpdump_start_set.cgi caused by an unsized sprintf call when processing form values.

Netcore NR255-V version 1.5.130703 contains a stack-based buffer overflow in wake_up_set.cgi caused by unbounded tokenization of MAC and ID input.

Netcore NR268 firmware version 1.7.121109 has an improper integrity verification flaw in mtd_write allowing forged firmware authenticity checks.

A vulnerability in the API endpoint of HPE Networking EdgeConnect SD-WAN Gateways could allow a low-privilege authenticated remote attacker to escalate privileges.

A privilege escalation vulnerability exists in the API of EdgeConnect SD-WAN Gateways.

Buffer overflow vulnerabilities exist in the underlying operating system of EdgeConnect SD-WAN Gateways that could allow an unauthenticated adjacent attacker to execute arbitrary code if certain…

Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer).

Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Portlet Services).

Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI).

Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: Core).

Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: Core).

Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

The affected products use hard-coded credentials, which could allow an attacker to run the ftpd service as root, providing remote root file access where FTP is reachable.

The affected products are missing authentication for a critical function, which could allow an attacker to run as root and pass received bytes directly to a system command.

The turbo-graph package starts its embedded Next.js server from packages/turbo-graph/src/index.ts on all interfaces, including 0.0.0.0:29312 by default, while the GET handler for /api/run in…

This could lead to remote code execution with no additional execution privileges needed.

This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed.

This could lead to remote code execution with no additional execution privileges needed.

CreateAgentLoop() in src/praisonai-ts/src/ai/agent-loop.ts passes executable tools to generateText() before invoking the onToolCall approval callback.

CommandValidator in src/praisonai-ts/src/cli/features/sandbox-executor.ts validates only the first whitespace-delimited executable against allowedCommands, then SandboxExecutor passes the complete command…

The shell() helper exported from src/praisonai-ts/src/tools/utility-tools.ts checks only the first whitespace-delimited token against safeCommands and then passes the complete original string to…

This could lead to remote escalation of privilege with no additional execution privileges needed.

This could lead to remote code execution with no additional execution privileges needed.

This could lead to remote escalation of privilege with no additional execution privileges needed.

This could lead to remote code execution with no additional execution privileges needed.

This could lead to remote code execution with no additional execution privileges needed.

This could lead to remote code execution with no additional execution privileges needed.

This could lead to remote code execution with no additional execution privileges needed.

An issue in MitraStar GPT-2742GX4X5v6-SV GL_g2.5_100XNT0b23_3 allows an authenticated attacker to execute arbitrary code via the /cgi-bin/device-management-utilities-internet.cgi component

OpenCost provides cost monitoring for Kubernetes workloads and cloud costs.

CrowdStrike released a security update to address a vulnerability in the Falcon sensor for Windows.

Koha Eval Code Injection Remote Code Execution Vulnerability.

OpenBMC's IPMI implementation, phosphor-net-ipmid, is vulnerable to a logic flaw where the authorization context of an existing session can be replaced with a target account while still maintaining the…

The Consulting theme for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 6.7.16.

IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1 CD, 9.4.0.0 through 9.4.0.25 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 could…

This could lead to remote escalation of privilege with no additional execution privileges needed.

This could lead to remote code execution with no additional execution privileges needed.

This could lead to remote escalation of privilege with no additional execution privileges needed.

This could lead to remote code execution with no additional execution privileges needed.

Insufficient session expiration vulnerability in bizwell xClick allows Authentication Bypass.

The "Design Scuole Italia" WordPress theme is affected by multiple Authorization Bypass vulnerabilities in the dsi_pdf_generator and dsi_csv_generator functions, allowing an unauthenticated attacker to…

A path traversal vulnerability exists in the reserved_file_check function of the functions.php file in the WordPress Design Scuole Italia theme.

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).

Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Security).

Vulnerability in the Siebel Apps - Customer Order Management product of Oracle Siebel CRM (component: Order Management).

Vulnerability in the Siebel Apps - Customer Order Management product of Oracle Siebel CRM (component: Order Management).

Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart).

Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core).

Joomla Extension - j2commerce.com - Any order can be marked Failed by anyone in J2Store 1.0.0-3.3.2, 4.0.0-4.0.22, 4.1.0-4.1.7 - Unauthenticated denial-of-service against the order pipeline: mass-failing…

Joomla Extension - j2commerce.com - Arbitrary file read via `task=download` in J2Store 1.0.0-3.3.2, 4.0.0-4.0.22, 4.1.0-4.1.7 - `J2StoreModelOrderdownloads::getFilePath()` built the on-disk path to a…

Joomla Extension - j2commerce.com - Unauthenticated blind SQL injection in the storefront product list in J2Store 1.0.0-3.3.2, 4.0.0-4.0.22, 4.1.0-4.1.7 - Unauthenticated, blind extraction of arbitrary…

Hidden functionality issue exists in FF-RFI079I4 and FF-RFI078I4, which may allow a user who can log in via SSH and access the enable mode on the product to execute arbitrary OS commands.

The guest-to-host Unix-domain socket relay in Docker Sandboxes validates that a socket path is inside an authorized workspace, but later reconnects using the pathname.

Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in FF-RFI079I4 and FF-RFI078I4.

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).

Ember’s HTTP/1.1 parser accepts differing duplicate Content-Length headers and uses the last value instead of rejecting the message.

Ember’s HeaderP.parse uses a case-sensitive substring test for the Transfer-Encoding value and decodes header bytes with the platform default charset.

The Lokka-Microsoft tool in src/mcp/src/main.ts uses direct URL string concatenation to append the user-controlled path value to the management.azure.com base URL.

MCP Gateway allows easy and secure running and deployment of MCP servers.

netty-incubator-codec-ohttp implements Oblivious HTTP (OHTTP) gateway and client functionality using Netty.

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).

Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Security).

Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Security).

Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI).

Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component: Forms Services, C/S, Charmode).

Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager).

Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core).

Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain an Unrestricted Upload of File with Dangerous Type vulnerability.

Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain an Unrestricted Upload of File with Dangerous Type vulnerability.

Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain an Unrestricted Upload of File with Dangerous Type vulnerability.

Vulnerabilities in HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated adjacent attacker to conduct denial-of-service attacks.

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).

The default agent-coderag sync flow in code_rag/entry/cli.py calls sync_dependencies for an indexed path, and code_rag/core/manager.py treats build.gradle or build.gradle.kts as sufficient to invoke…

EmbedHtmlFormatter::toHtml in includes/EmbedService/EmbedHtmlFormatter.php passes the user-supplied class value directly to sprintf while constructing a figure element.

Flowise before 3.1.4 contains a validation bypass vulnerability in MCP server configuration allowing authenticated attackers remote code execution through an unvalidated cwd parameter.

Flowise before 3.1.4 contains a remote code execution vulnerability in the Custom MCP node that allows authenticated attackers to execute arbitrary code by supplying npx package names in the mcpServerConfig…

pgweb through 0.17.0 leaves the POST /api/connect endpoint unguarded when connect-backend authorization is configured, allowing attackers to supply arbitrary database connection strings.

GitLab has remediated an issue in GitLab EE affecting all versions from 12.3 to 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 under certain conditions could allow an authenticated user to achieve…

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).

Vulnerability in the Oracle HRMS (India) product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle iRecruitment product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Product Workbench product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Complex Maintenance, Repair and Overhaul product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Actions).

Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Security).

Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Server).

Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Security).

Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Publisher Security).

Vulnerability in the Oracle Text component of Oracle Database Server.

Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Publisher Security).

Vulnerability in the Oracle Sales Online product of Oracle E-Business Suite (component: OSO Other).

Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Audience).

Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Security Framework).

Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools).

Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle).

Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle).

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Business Interlink).

A vulnerability in the API of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker with low privileges to access sensitive information beyond what is authorized by the user's…

Vulnerabilities in the API of EdgeConnect SD-WAN Orchestrator could allow a remote attacker authenticated with low privileges to conduct server-side request forgery (SSRF) attacks.

From mcp-from-openapi 2.3.0 until 2.5.0 and from frontmcp and @frontmcp/adapters 1.2.1 until 1.5.0, libs/adapters/src/openapi/openapi.adapter.ts loadOpenAPISpec() forwards untrusted OpenAPI url and spec…

SessionRequestHandler in the session management endpoint does not enforce ownership or privilege checks when a low-privileged authenticated user queries session information in deployments using stateful…

IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1 CD, 9.4.0.0 through 9.4.0.25 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 could…

Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Communication Interface).

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).

Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues).

This could lead to local escalation of privilege with no additional execution privileges needed.

This could lead to local escalation of privilege with no additional execution privileges needed.

This could lead to local escalation of privilege with no additional execution privileges needed.

PathFilter in src/pathfilter.ts compiles restricted-directory patterns case-sensitively and compares paths without canonicalizing filesystem-equivalent segment names.

This could lead to remote escalation of privilege with no additional execution privileges needed.

This could lead to local escalation of privilege with no additional execution privileges needed.

This could lead to local escalation of privilege with no additional execution privileges needed.

This could lead to local escalation of privilege with no additional execution privileges needed.

This could lead to local escalation of privilege with no additional execution privileges needed.

This could lead to local escalation of privilege with no additional execution privileges needed.

This could lead to local escalation of privilege with no additional execution privileges needed.

This could lead to local escalation of privilege with no additional execution privileges needed.

This could lead to local escalation of privilege with no additional execution privileges needed.

This could lead to local escalation of privilege with no additional execution privileges needed.

This could lead to local escalation of privilege with no additional execution privileges needed.

Flowise before 3.1.4 fails to validate baseURL parameters in chat-model nodes, allowing authenticated users to redirect requests to arbitrary hosts.

Flextype CMS through 1.0.0-alpha.3 fails to properly validate id and new_id parameters in the Entries REST API, allowing API token holders to read, create, or overwrite files outside the entries directory.

Race condition in Extensions in Google Chrome on on Mac prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially execute…

Race condition in Core in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML…

Incorrect authorization in WebUI in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a…

Improper state validation in Skia in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page.…

Use after free in Input in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted…

Race condition in Extensions in Google Chrome on on Mac prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox…

A security vulnerability has been detected in SabyasachiRana WebMap up to 8b95fe4dc301a3c09ddf145b895de0bf9f8d2a25.

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).

Vulnerability in the Oracle Financials for Asia/Pacific product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Security).

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: BI Search).

Vulnerability in the Oracle Managed File Transfer product of Oracle Fusion Middleware (component: MFT Runtime Server).

Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core).

Coder allows organizations to provision remote development environments via Terraform.

ToolsMCPServer.run_sse() in src/praisonai-agents/praisonaiagents/mcp/mcp_server.py mounts SseServerTransport on the legacy /sse and /messages/ endpoints without default Host, Origin, or authentication…

The upload_ad_image tool in meta_ads_mcp/core/ads.py passes an attacker-controlled image_url to try_multiple_download_methods() in meta_ads_mcp/core/utils.py, where httpx.AsyncClient uses…

The OAuth 2.0 and OpenID Connect authorization endpoint does not sufficiently encode user-supplied parameters before FormPostResponse.ftl and checkSession.ftl render them into HTML for the form_post…

Session fixation vulnerability in Secomea GateManager (webserver module) allows Session Fixation.

Improper certificate validation on LDAPS connections to Active Directory in Devolutions Server 2026.2.16 and earlier allows a network-positioned attacker to intercept privileged directory service…

Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Application Server).

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).

Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite (component: MWA Terminal Server).

Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite (component: MWA Terminal Server).

Vulnerability in the Oracle Engineering product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Communications Cloud Native Core Security Edge Protection Proxy product of Oracle Communications (component: SEPP).

Vulnerability in the Oracle Utilities Network Management System product of Oracle Utilities Applications (component: System Wide).

Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: Resource Catalog Services).

Vulnerability in the Oracle Web Services Manager product of Oracle Fusion Middleware (component: Web Services Agent).

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge).

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager).

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager).

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).

Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM (component: Workspaces).

Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager).

Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager).

Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager).

Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools).

A vulnerability in the network security monitoring component of intrusion detection systems could allow an unauthenticated remote attacker to exploit a limited buffer overflow.

On affected platforms running Arista EOS with authenticated Bidirectional Forwarding Detection (BFD) sessions configured, a specially crafted packet can cause the BFD session(s) to go down.

Libp2p-quic could panic during an inbound QUIC handshake when a remote peer presented a valid short-lived libp2p TLS certificate and delayed the final TLS 1.3 handshake fragment until after the certificate…

MCPSecurity.evaluatePolicy() in src/praisonai-ts/src/mcp/security.ts invokes the configured credential validator only when AuthMethod is api-key or bearer.

0.39.6, 0.42.1, and 0.48.0, the GitHub App provider accepts X-GitHub-Enterprise-Host as the API host while processing webhook events containing an installation.id, before webhook signature validation or…

A maliciously constructed IMAP line could cause an out-of-bounds buffer read.

Mitigation bypass in the Remote Settings Client component.

atomic-agents-stack before 1.1.0 accepts cleartext HTTP schemes in the HTTP MCP server-registry backend factory, allowing network man-in-the-middle attackers to rewrite catalog responses.

Missing authorization in AppManifest in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass web origin policy…

Incorrect reference resolution in Extensions in Google Chrome on on Mac prior to 153.0.8010.47 allowed a local attacker who had compromised the renderer process to execute arbitrary code outside the sandbox…

Code injection in XML in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Low)

1024-lab SmartAdmin v3.30.0 contains a missing authorization vulnerability in the scheduled-job management module.

Vulnerability in the Oracle GraalVM product of Oracle Java SE (component: Compiler).

Vulnerability in the Oracle GraalVM product of Oracle Java SE (component: Compiler).

Vulnerability in the Oracle GraalVM product of Oracle Java SE (component: Compiler).

Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Other issue).

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).

Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: G-Invoicing).

Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: G-Invoicing).

Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Other issue).

Vulnerability in the Oracle HRMS (India) product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools).

Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: Create Item Instance).

Vulnerability in the Oracle Work in Process product of Oracle E-Business Suite (component: Workbenches).

Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite (component: MWA Terminal Server).

Vulnerability in the Oracle Demand Signal Repository product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Demand Signal Repository product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Financials Common Modules product of Oracle E-Business Suite (component: Common Components).

Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-security-providers-idcs-mapper).

Vulnerability in the Oracle Product Workbench product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Depot Repair product of Oracle E-Business Suite (component: Estimate and Actual Charges).

Vulnerability in the Oracle Product Workbench product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Demand Signal Repository product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Demand Signal Repository product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI).

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).

Vulnerability in the Oracle GraalVM for JDK, Oracle GraalVM product of Oracle Java SE (component: Compiler).

Vulnerability in the Oracle GraalVM for JDK, Oracle GraalVM product of Oracle Java SE (component: Compiler).

Vulnerability in the RDBMS component of Oracle Database Server.

Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Service API).

Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Security).

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Web General).

Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Security).

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Platform Security).

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge).

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge).

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge).

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge).

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge).

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge).

Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: Event Publish and Subscribe).

Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI).

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).

Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Documents).

Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Application Framework).

Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Java Server Issues).

Vulnerability in the Oracle Project Intelligence product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Siebel Apps - Life Sciences product of Oracle Siebel CRM (component: eDetailing).

Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart).

Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component: Forms Services, C/S, Charmode).

Vulnerability in the Oracle Alert product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager).

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Search Bean [Incl.

Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: ADF Shared Components).

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: SQR).

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Cube Manager).

Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars).

Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle).

An authenticated Server-Side Request Forgery (SSRF) in the /adminapi/file/online_upload component of CRMEB v6.0.0 allows attackers to scan internal resources via a crafted POST request.

Improper validation of the quantity parameter in the add-to-cart path of Webkul Bagisto v2.4.9 allows authenticated attackers to reduce their order total below the legitimate price of shippable goods.

Netcore NR255-V firmware version 1.5.130703 contains a cross-site request forgery vulnerability affecting the wan_config_set_cgi, wan_num_set_cgi, and lan_ip_change_cgi endpoints.

Netcore NR268 firmware version 1.7.121109 contains a security check bypass vulnerability in the parame_put_file.cgi restore archive prefix validation.

A vulnerability exists in the proxy packet processing logic of the affected component where it improperly processes malformed or truncated input.

Vulnerabilities have been identified in the API of HPE Networking EdgeConnect SD-WAN Orchestrator that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls.

Buffer overflow vulnerabilities exist in the API endpoint of HPE Networking EdgeConnect SD-WAN Gateways that could allow an unauthenticated remote attacker to run arbitrary commands on the underlying host…

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Business Interlink).

Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Portlet Services).

9.0.22, and 9.1.10, WorkloadManagementSystem/Utilities/PilotWrapper.py pilotWrapperScript uses ssl._create_unverified_context to download the second-stage pilot.tar archive without TLS certificate…

Packages/admin/src/Livewire/Components/Products/VariantStock.php exposes stockAction() without edit_product_variants authorization and leaves public $variant client mutable because it lacks the Livewire…

GroupedBulkActions in packages/admin/src/Livewire/Pages/Attribute/Browse.php, packages/admin/src/Livewire/Pages/Tag/Index.php, packages/admin/src/Livewire/Pages/Brand/Index.php,…

Packages/admin/src/Livewire/Components/Collection/CollectionProducts.php exposes Action::make('delete') and DeleteBulkAction::make() without delete_collections authorization, while public Collection…

The fix for CVE-2026-44221 added an UPDATE_SCHEMA authorization check only to LocalDocumentType.createProperty, while the remaining public schema mutators in…

OpenBMC's IPMI implementation, phosphor-net-ipmid, contains a logic flaw in which an unauthenticated client can force the RAKP Message 1 handler to return before it overwrites the authentication object's…

IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1 CD, 9.4.0.0 through 9.4.0.25 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 Classes…

IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1 CD, 9.4.0.0 through 9.4.0.25 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 could…

IBM Verify Identity Access could allow an administrator to execute additional commands they are not entitled to due to improper validation of user supplied requests.

IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1 CD, 9.4.0.0 through 9.4.0.25 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 could…

Incorrect boundary conditions in the Safe Browsing component.

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).

Vulnerability in the Oracle Banking Branch product of Oracle Financial Services Applications (component: Reports).

Vulnerability in the Oracle Advanced Benefits product of Oracle E-Business Suite (component: Self-serv What-if Analysis).

Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Setup Workbench).

Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core).

Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Documents).

Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Command Line - RapidClone).

Vulnerability in the Oracle Spares Management product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Banking Corporate Lending product of Oracle Financial Services Applications (component: Core).

Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain a Missing Cryptographic Step vulnerability.

This could lead to remote (proximal/adjacent) code execution with no additional execution privileges needed.

This could lead to remote code execution with no additional execution privileges needed.

Strimzi provides a way to run an Apache Kafka cluster on Kubernetes or OpenShift in various deployment configurations.

Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component: Forms Services, C/S, Charmode).

Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager).

Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle).

A flaw was found in the file-psd plugin in GIMP.

pdfforge PDF Architect activation-service Update Service Uncontrolled Search Path Element Local Privilege Escalation Vulnerability.

pdfforge PDF Architect PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability.

pdfforge PDF Architect PDF File Parsing Memory Corruption Remote Code Execution Vulnerability.

pdfforge PDF Architect PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability.

pdfforge PDF Architect App Object Out-Of-Bounds Read Remote Code Execution Vulnerability.

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).

Vulnerability in the PeopleSoft Enterprise FIN Engineering Brazil product of Oracle PeopleSoft (component: Engineering).

Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server).

Vulnerability in the Oracle Utilities Network Management System product of Oracle Utilities Applications (component: System Wide).

Vulnerability in the Oracle Middleware Common Libraries and Tools product of Oracle Fusion Middleware (component: Remote Diagnostic Agent).

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Server).

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Installation).

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Platform Security).

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: FNDN).

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Platform Security).

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Platform Security).

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: BI Search).

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller).

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge).

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge).

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).

Vulnerability in the Applications DBA product of Oracle E-Business Suite (component: ADPatch).

Vulnerability in the PeopleSoft Enterprise FIN Inventory Brazil product of Oracle PeopleSoft (component: Inventory).

Vulnerability in the Applications DBA product of Oracle E-Business Suite (component: AD Utilities).

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Machine Learning).

Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core).

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: SQR).

Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars).

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Installation).

This could lead to local escalation of privilege with no additional execution privileges needed.

This could lead to local escalation of privilege with no additional execution privileges needed.

This could lead to local escalation of privilege with System execution privileges needed.

This could lead to local escalation of privilege with System execution privileges needed.

This could lead to local escalation of privilege with no additional execution privileges needed.

This could lead to local escalation of privilege with System execution privileges needed.

This could lead to local escalation of privilege with no additional execution privileges needed.

POST /api/tools/ogc/sld accepted a caller-supplied WMS server URL and performed a server-side HTTP GET without destination validation.

This could lead to local escalation of privilege with User execution privileges needed.

This could lead to local escalation of privilege with no additional execution privileges needed.

This could lead to local escalation of privilege with no additional execution privileges needed.

OriginLab Origin Viewer OGM File Parsing Memory Corruption Remote Code Execution Vulnerability.

OriginLab Origin Viewer OGWU File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability.

Ashlar-Vellum Cobalt VS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability.

Rsbuild before 2.0.9 contains a command injection vulnerability that allows attackers to execute arbitrary OS commands by supplying a crafted URL containing shell metacharacters to the server.open…

This could lead to local escalation of privilege with no additional execution privileges needed.

Crawl4AI before 0.9.3 contains a server-side request forgery vulnerability in PDFContentScrapingStrategy where _get_pdf_path() re-downloads targets with Python requests without egress validation.

KubeSphere through 4.1.3 contains a server-side request forgery vulnerability in the git credential verification endpoint that accepts unvalidated caller-supplied URLs without allowlist restrictions.

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Integration Broker).

Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: SDK).

Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Application Server).

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).

Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Setup Workbench).

Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security).

Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security).

Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security).

Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: G-Invoicing).

Vulnerability in the Oracle iRecruitment product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Item Catalog).

Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Item Catalog).

Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Item Catalog).

Vulnerability in the Oracle Engineering product of Oracle E-Business Suite (component: Change Management).

Vulnerability in the Enterprise Command Center Framework product of Oracle E-Business Suite (component: Security).

Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Service API).

Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Security).

Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: E-Business Suite - XDO).

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Presentation Services).

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager).

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager).

Vulnerability in the Oracle Customer Interaction History product of Oracle E-Business Suite (component: Outcome-Result).

Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI).

Vulnerability in the Oracle Proposals product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Field Service product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart).

Vulnerability in the Oracle Web Applications Desktop Integrator product of Oracle E-Business Suite (component: File download).

Vulnerability in the Oracle Sales product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Sales Offline product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools).

Vulnerability in the RDBMS component of Oracle Database Server.

Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Audience).

Vulnerability in the PeopleSoft Enterprise PRTL Interaction Hub product of Oracle PeopleSoft (component: Enterprise Portal).

Vulnerability in the Oracle Enterprise Manager for Oracle Database product of Oracle Enterprise Manager (component: Core).

Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools).

Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Portlet Services).

Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle).

The synchronizerFetch GraphQL query called fetchRemoteStreams after checking only that a remote stream URL used HTTP or HTTPS.

A reader-role user can submit POST /api/v1/command/{database} with language: js because PolyglotQueryEngine.command, PolyglotQueryEngine.analyze, and PolyglotQueryEngine.registerFunctions do not enforce…

Export_space and import_space in packages/mcp-tools/src/tools/jobs/space-to-space-migration/exportSpace.ts and packages/mcp-tools/src/tools/jobs/space-to-space-migration/importSpace.ts expose host, proxy,…

The anonymous Push Notification SNS callback handled by SnsMessageResource falls back to a CTS predicate blob after a messageId expires from the in-memory dispatcher, treats top-level blob keys as Java…

Bucket Squatting in Google Cloud Gemini Enterprise Agent Platform SDK for Python versions prior to 1.166.1 allows an attacker to achieve Remote Code Execution (RCE) and tenant-project token theft.

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.7 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that under certain conditions could have allowed an authenticated…

Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Folders, Files & Attachments).

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).

Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security).

Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security).

Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security).

Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security).

Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security).

Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Administration).

Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM (component: Integration - Scripting).

Vulnerability in the Oracle Sales Online product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Field Service product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools).

Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI).

SandboxExecutor network-isolated mode in src/praisonai-ts/src/cli/features/sandbox-executor.ts uses buildEnv() only to inject invalid http_proxy and https_proxy environment variables and does not establish…

The private_key_jwt client authentication path uses ClientJwksResolverCache without reliably binding a cached jwks_uri resolver and verified assertion to the expected clientID in ClientCredentialsReader.

OAuthTokenStore reads caller-supplied token identifiers from the shared Core Token Store (CTS) without an OAuth-only namespace, and OAuthAdapter accepts a row whose BLOB claims to contain an OAuth token…

Information disclosure in the Networking: HTTP component.

Race condition in the DOM: Content Processes component.

adm-zip versions 0.5.14 through 0.6.0 fail to apply zlib decompression output limits when ZIP entries declare zero uncompressed size.

lamp-cloud through 5.10.0 whitelists the path pattern /*/anno/** for anonymous access, allowing unauthenticated attackers to read the server's full JVM system property map.

Tornado before 6.5.8 contains a memory amplification vulnerability in parse_multipart_form_data that splits multipart data before validating the max_parts limit.

atomic-agents-stack before 1.1.0 contains a path traversal vulnerability in the dashboard HTTP server that allows remote attackers to read arbitrary files by supplying directory traversal sequences in…

Vikunja before 2.6.0 fails to properly restrict access to the link-share hash field in single-share read endpoints, allowing read-only members to obtain the share's secret credential.

Vikunja before 2.6.0 contains an authentication bypass vulnerability in CalDAV BasicAuth endpoints that lack rate limiting protection.

Vikunja versions before 2.6.0 fail to apply rate limiting to /api/v2 public authentication endpoints including login, register, password-reset, and OAuth token routes.

WWBN AVideo through 29.0 fails to enforce user-group restrictions in the plugin/Live/stats.json.php and plugin/Live/calendar.json.php endpoints.

FreeRDP before 3.31.0 fails to validate client-supplied DesktopWidth and DesktopHeight values during GCC negotiation, allowing remote attackers to crash the server.

FreeRDP versions before 3.31.0 contain an out-of-bounds write vulnerability in server-side static virtual channel handling when CHANNEL_OPTION_SHOW_PROTOCOL is enabled.

FreeRDP server versions before 3.31.0 contain a use-after-free vulnerability in the DRDYNVC parser that dereferences a channel pointer after releasing the synchronization lock.

Crawl4AI before 0.9.3 contains an uncontrolled resource consumption vulnerability in PDFContentScrapingStrategy that allows untrusted clients to cause denial of service.

crawl4ai before 0.9.3 contains an arbitrary file write vulnerability in PDFContentScrapingStrategy where the _filter_untrusted_fields function fails to validate untrusted configuration fields.

Flowise before 3.1.4 fails to sanitize the overrideConfig.sessionId parameter before using it in MongoDB queries within the MongoDBMemory node.

Flowise before 3.1.4 fails to scope enterprise organization and workspace membership APIs to the caller's tenant, allowing authenticated users to supply arbitrary organization IDs.

GNU libextractor before 1.15 contains a stack-based buffer overflow vulnerability in the process_star_office function that sizes a variable-length stack array from attacker-controlled OLE2 stream data.

Hirschmann HiOS Switch Platform devices contain a denial-of-service vulnerability in the integrated web server due to missing validation of HTTP(S) content.

Ember’s HTTP/2 read loop parses a frame’s 24-bit declared length but waits to buffer the entire payload before comparing it with SETTINGS_MAX_FRAME_SIZE.

Versions prior to 2.1.0 have a Broken Access Control vulnerability across several API endpoints (such as `/api/student/{id}/photo` and `/api/course_unit/{id}/exchange/metadata`).

Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-webserver-static-content).

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).

Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Folders, Files & Attachments).

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).

Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security).

Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security).

Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security).

Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security).

Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security).

A flaw was found in tftp-hpa.

Vulnerability in the Oracle Banking Origination product of Oracle Financial Services Applications (component: Onboarding Batch Processes).

Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite (component: MWA Terminal Server).

Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: Oracle JDeveloper).

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).

Vulnerability in the Oracle Net Services component of Oracle Database Server.

Vulnerability in the Oracle Net Services component of Oracle Database Server.

Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Command Line - RapidClone).

Vulnerability in the Oracle Net Services component of Oracle Database Server.

Vulnerability in the Helidon product of Oracle Fusion Middleware (component: WebSocket).

Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: Open Integration).

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Platform Security).

Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Administration).

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: BI Search).

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Presentation Services).

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Platform Security).

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Web General).

Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-webserver).

Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-webserver-http2).

Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-webclient-http2).

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: BI Platform Security).

Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues).

Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues).

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge).

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge).

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager).

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).

Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: EAI).

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Siebel Remote).

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).

Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Reports).

Vulnerability in the Oracle Sourcing product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).

Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM (component: Configuration Tools).

Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core).

Vulnerability in the Oracle XML Developers Kit component of Oracle Database Server.

Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart).

Vulnerability in the Oracle Sales Offline product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Command Line - RapidClone).

Vulnerability in the Oracle Quality product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Audience).

Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component: Forms Services, C/S, Charmode).

Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager).

Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools).

Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools).

Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites).

Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core).

The Address attribute's country-less text formatter skipped HTML-escaping, enabling stored XSS in Express association views.

Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain a Missing Authentication for Critical Function vulnerability.

Tenda Technology Co., Ltd NVR_4H CH3 v2.1 V27.5.58.6 was discovered to contain a hardcoded cryptographic key.

Vulnerabilities have been identified in the web-based management interface of EdgeConnect SD-WAN Orchestrator that could potentially allow an unauthenticated remote actor to circumvent existing…

A vulnerability in the API endpoint of HPE Networking EdgeConnect SD-WAN Orchestrator could allow a low-privilege authenticated remote attacker to escalate privileges.

A vulnerability exists in the underlying operating system of HPE Networking EdgeConnect SD-WAN Gateways.

The Eventin – Event Calendar, Tickets, Registration, Booking & WooCommerce plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.1.23.

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Ren Server).

When Ember receives an HTTP/2 HEADERS or PUSH_PROMISE frame without END_HEADERS, H2Connection buffers the header block and subsequent CONTINUATION fragments without a size bound.

Ember HTTP/2 serializes outbound frames through one unbounded queue consumed by writeLoop.

WebSocket FrameTranscoder.bodyLength rejects extended payload lengths above Integer.MAX_VALUE but permits negative 64-bit lengths.

The shared WebSocket decoder permits unbounded message buffering because defragmentation accumulates fragments without a limit and FrameTranscoder accepts declared lengths up to Int.MaxValue.

The DigestAuth server middleware removes fresh nonces and stops eviction at the first stale nonce because its stale-nonce comparison is inverted.

An Ember server with HTTP/2 enabled through withHttp2 does not enforce SETTINGS_MAX_CONCURRENT_STREAMS for peer-created streams.

Ember’s HTTP/2 flow-control window is replenished according to bytes received from the network rather than bytes consumed by the application, while each stream stores DATA in an unbounded channel.

The `http_poll` C2 transport accepts attacker-controlled HTTP polling sessions before CBOR `MsgAuth` authentication is completed.

Web_url_read in src/index.ts passes a caller-supplied URL to readUrlContent() in src/url-reader.ts, where checkContentLength() treats a missing Content-Length header as an inconclusive preflight and the…

This could lead to remote information disclosure with no additional execution privileges needed.

With the default $wgEmbedVideoRequireConsent configuration enabled, includes/EmbedService/EmbedHtmlFormatter.php places JSON returned through includes/EmbedService/AbstractEmbedService.php into the…

EmbedServiceFactory::newFromName in includes/EmbedService/EmbedServiceFactory.php interpolates an attacker-controlled unknown service name into exception text, and includes/EmbedVideo.php returns that text…

This could lead to remote denial of service with no additional execution privileges needed.

Multiple read and link endpoints authorize only the resource named in the request URL and fail to re-authorize a second caller-influenced dataset reached through a relationship, map layer, VRT source,…

Cookie in pkg/cookie/cookie.go parses the total part count from an attacker-controlled multipart cookie name and passes the value to make([]string, numParts) without checking that the value is positive or…

The C-MOR Video Surveillance web interface (up to version 6.0104) is vulnerable to Path Traversal via the 'cam' parameter in show-movies.pml.

GroovySandboxValueFilter permits an authenticated server-side script author to escape the scripting sandbox despite the default class allow and deny lists.

The Top Navigation Bar block did not HTML-escape dropdown child page names before writing them into the page, so a user who could create or rename pages could store a script through a child page name and…

Concrete CMS 9 (9.0.0 through 9.5.2) does not perform an authorization check on the user selector autocomplete endpoint (/ccm/system/user/autocomplete), which backs the "Preview as User" panel and other…

IBM Verify Identity Access could allow a remote attacker to cause a denial of service due to insufficient validation of incoming request resources.

IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1 CD, 9.4.0.0 through 9.4.0.25 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 could…

IBM Security Verify Identity Access Reverse Proxy in certain configurations may provide weaker than expected cryptographic validation of user supplied data.

IBM Verify Identity Access could allow a remote attacker to cause a denial of service due to insufficient validation of incoming request resources.

A vulnerability has been found in TOTOLINK X5000R 9.1.0cu.2089_B20211224.

Incorrect authorization in Core in Google Chrome on on Windows prior to 153.0.8010.47 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. (Chromium security severity:…

A security flaw has been discovered in D-Link DSL-3782 2016-07-28.

BookStack before 26.05.5 contains an authentication bypass vulnerability in its social login implementation that allows unauthenticated attackers to sign in as arbitrary users by authenticating through a…

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).

Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security).

Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security).

Vulnerability in the Oracle Web Services Manager product of Oracle Fusion Middleware (component: Web Services Security).

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).

Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core).

Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core).

Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component: Forms Services, C/S, Charmode).

AuthInjectionMiddleware in meta_ads_mcp/core/http_auth_integration.py rejects HTTP MCP requests only when both auth_token and pipeboard_token are absent, while extract_token_from_headers() does not…

The default configuration initializes the iPlanetDirectoryPro SSO cookie with HttpOnly disabled and without a protective SameSite default, and OAuth and OpenID Connect consent flows reuse that cookie…

The OAuth2 authentication module updates an existing local account with profile attributes that can include userPassword and inetUserStatus, rewriting the password to the username and reactivating disabled…

Concrete CMS 9.2.0 to 9.5.2 did not enforce per-field edit_user_properties permissions on the REST API user write endpoints (PUT /ccm/api/1.0/users/{uID} and POST /ccm/api/1.0/users/{uID}/change_password).

A vulnerability was identified in WuzhiCMS up to 4.1.0.

A flaw has been found in GPAC up to f1219cde.

A vulnerability has been found in SourceCodester Online Faculty Clearance System 1.0.

A vulnerability was identified in zyx0814 FilePress up to 3.0.1.

A vulnerability was found in SourceCodester Online Faculty Clearance System 1.0.

A vulnerability has been found in SourceCodester Online Faculty Clearance System 1.0.

A flaw has been found in subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07ee693dc4d9a29a578.

A security vulnerability has been detected in SourceCodester College Notes Gallery Management System 1.0.

A weakness has been identified in SourceCodester/katojkalemba Online Food Ordering System 1.0.

A security flaw has been discovered in SourceCodester/katojkalemba Online Food Ordering System 1.0.

A vulnerability has been found in luben zstd-jni up to 1.5.7-13.

A security vulnerability has been detected in SourceCodester College Notes Gallery Management System 1.0.

A vulnerability has been found in PHPGurukul Daily Expense Tracker System 1.1.

A vulnerability was detected in PHPGurukul Daily Expense Tracker System 1.1.

A security flaw has been discovered in PHPGurukul Blood Donor Management System 1.0.

A vulnerability was identified in PHPGurukul Blood Donor Management System 1.0.

Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Communication Interface).

Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Communication Interface).

Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security).

A flaw was found in environment-modules.

Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client).

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager).

Vulnerability in the Siebel Apps - Life Sciences product of Oracle Siebel CRM (component: Life Sciences).

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).

Vulnerability in the Oracle Common Applications product of Oracle E-Business Suite (component: CRM User Management Framework).

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).

Concrete CMS 9.0.0 to 9.5.2 stored group folder names without sanitization and printed them unescaped on the Members > Groups dashboard page, resulting in stored cross-site scripting.

A privilege escalation flaw was found in the scan_mysql actor of leapp-upgrade-el9toel10 (provided by leapp-repository).

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Charting).

Users with certain scoped permission sets could execute arbitrary scripts on a worker (including the Octopus Server built-in worker).

The MotoPress Hotel Booking plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Stripe Webhook event object 'id' in all versions up to, and including, 6.2.4 due to insufficient input…

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).

Vulnerability in the Oracle Contracts product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Contracts product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Document Management and Collaboration product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Database Application Table).

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Personalization).

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Platform Security).

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Platform Security).

Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Security).

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Platform Security).

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).

Vulnerability in the Oracle Depot Repair product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Common Applications product of Oracle E-Business Suite (component: CRM User Management Framework).

Vulnerability in the Applications DBA product of Oracle E-Business Suite (component: AD Utilities).

Vulnerability in the Oracle Lease and Finance Management product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Audience).

Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server).

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: SQR).

Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle).

The Document Library block stored the file-set identifiers submitted through fsID[] without validating them as integers, and when the block was configured with setMode set to any it concatenated each stored…

Netcore NR255-V version 1.5.130703 contains a stack-based buffer overflow in reboot_timer_set.cgi caused by improper sscanf token parsing.

Netcore NR255-V firmware version 1.5.130703 builds root-run command lines from unquoted user-supplied DDNS input in DDNSset_cgi.c and related ddns_Proc.c components, enabling os command argument injection.

Buffer overflow vulnerabilities exist in the API endpoint of HPE Networking EdgeConnect SD-WAN Gateways.

A vulnerability exists in a component of the HPE Networking EdgeConnect SD-WAN Gateways that may allow for arbitrary command execution.

A vulnerability exists in the configuration processing logic of the affected component where malformed input is improperly processed.

Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing).

Fireshare facilitates self-hosted media and link sharing.

IBM Verify Identity Access could allow an administrator to execute additional commands they are not entitled to due to improper validation of user supplied input.

Flowise versions before 3.1.4 contain a server-side request forgery vulnerability in Cheerio, Playwright, and Puppeteer document loader nodes that bypass SSRF protection.

Flowise before 3.1.4 fails to enforce workspace-level authorization checks in openai-realtime endpoints, allowing authenticated users to access tools from ChatFlows in other workspaces by supplying an…

Flowise versions before 3.1.4 contain cross-tenant authorization gaps in Enterprise endpoints that fail to verify resource ownership before operations.

Affected versions of MISP allow a collection element to be created from a bare UUID without consistently checking whether the acting user is allowed to access the referenced object.

Affected versions of MISP fail to authorize a submitted sharing group in a specific event-edit path.

Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Communication Interface).

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).

Vulnerability in the Oracle HRMS (India) product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Enterprise Command Center).

Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Contract Lifecycle Management for Public Sector product of Oracle E-Business Suite (component: Award/PO).

Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security).

Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security).

Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security).

Vulnerability in the Oracle Report Manager product of Oracle E-Business Suite (component: Reports Security).

Vulnerability in the Oracle US Federal Human Resources product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Depot Repair product of Oracle E-Business Suite (component: Recall Management).

Vulnerability in the Oracle Communications Cloud Native Core Security Edge Protection Proxy product of Oracle Communications (component: SEPP).

Vulnerability in the Oracle XML Gateway product of Oracle E-Business Suite (component: Install).

Vulnerability in the Oracle XML Gateway product of Oracle E-Business Suite (component: Install).

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Personalization).

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: BI Platform Security).

Vulnerability in the Oracle XML Gateway product of Oracle E-Business Suite (component: Install).

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge).

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge).

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge).

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge).

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge).

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Siebel Management Console).

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).

Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: EAI).

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).

Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI).

Vulnerability in the Oracle Banking Corporate Lending Process Management product of Oracle Financial Services Applications (component: Base).

Vulnerability in the Oracle Common Applications Calendar product of Oracle E-Business Suite (component: Applications Calendar).

Vulnerability in the Oracle Common Applications Calendar product of Oracle E-Business Suite (component: Applications Calendar).

Vulnerability in the Oracle Common Applications Calendar product of Oracle E-Business Suite (component: Applications Calendar).

Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Documents).

Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Documents).

Vulnerability in the Oracle Project Intelligence product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Command Line - RapidClone).

Vulnerability in the Oracle Site Hub product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Report Manager product of Oracle E-Business Suite (component: Internal Operations).