PT-2026-62735

Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM component: Siebel Cloud Manager. Supported versions that are affected are 22.3-26.5. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the...

PT-2026-62731

Name of the Vulnerable Software and Affected Versions Oracle Siebel CRM Siebel CRM Cloud Applications versions 22.3 through 26.5 Description An issue exists in the Siebel Cloud Manager component of Oracle Siebel CRM Cloud Applications. An unauthenticated attacker with network access via HTTP can...

PT-2026-62763

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Applications Technology Stack versions 12.2.3 through 12.2.15 Description A flaw in the Configuration component allows a high privileged attacker with access to the infrastructure where the software executes to...

PT-2026-62737

Name of the Vulnerable Software and Affected Versions Oracle Siebel CRM Siebel CRM Cloud Applications versions 22.3 through 26.5 Description A flaw in the Siebel Cloud Manager component allows a low privileged attacker with network access via HTTP to compromise the application. Successful...

PT-2026-62762

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Applications DBA versions 12.2.3 through 12.2.15 Description An issue exists in the Internal Operations component of the Oracle Applications DBA product. A low privileged attacker with access to the infrastructur...

PT-2026-62738

Name of the Vulnerable Software and Affected Versions Oracle Siebel CRM Siebel CRM Cloud Applications versions 22.3 through 26.5 Description A flaw in the Siebel Cloud Manager component allows a low-privileged attacker with access to the infrastructure where the application executes to compromise...

PT-2026-62766

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Applications Framework versions 12.2.3 through 12.2.15 Description A flaw in the Graph / Charting component of the Oracle Applications Framework allows a low privileged attacker with network access via HTTP to...

PT-2026-62716

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite component: Upload Attachments. Supported versions that are affected are 12.2.8-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

PT-2026-62711

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite component: Search Bean. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Applications...

PT-2026-62732

Name of the Vulnerable Software and Affected Versions Oracle Siebel CRM Siebel CRM Cloud Applications versions 22.3 through 26.5 Description A flaw in the Siebel Cloud Manager component allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful exploitati...

PT-2026-62722

Name of the Vulnerable Software and Affected Versions Oracle Siebel CRM Siebel CRM Cloud Applications versions 22.3 through 26.5 Description A flaw in the Siebel Cloud Manager component allows a low privileged attacker with network access via HTTP to compromise the application. Successful...

PT-2026-62764

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Applications Manager versions 12.2.3 through 12.2.15 Description An issue exists in the Command Line - RapidClone component of the Oracle Applications Manager. An unauthenticated attacker with access to the...

PT-2026-62404

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Applications Manager versions 12.2.3 through 12.2.15 Description An issue exists in the Oracle Diagnostics Interfaces component of the Oracle Applications Manager. An unauthenticated attacker with network access...

PT-2026-63226

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Applications Framework versions 12.2.8 through 12.2.15 Description A flaw in the Web Utilities component of the Oracle Applications Framework allows a high privileged attacker with network access via HTTP to...

PT-2026-62175

Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 8u491, 8u491-perf, 11.0.31, 17.0.19, 21.0.11, 25.0.3, and 26.0.1 Oracle GraalVM for JDK versions 17.0.19 and 21.0.11 Oracle GraalVM Enterprise Edition version 21.3.18 Description An issue exists in the ImageIO component...

CVE-2026-32821

dataCycle is a data management system for centrally storing, managing, searching, finding, and distributing data. In dataCycle-CORE, the module handling core processing and framework rules, before and including version 25.07.3, any authenticated API user who has their own access token can ask the...

[SECURITY] Fedora 44 Update: mbedtls-3.6.7-1.fc44

Mbed TLS is a light-weight open source cryptographic and SSL/TLS library written in C. Mbed TLS makes it easy for developers to include cryptographic and SSL/TLS capabilities in their embedded applications with as little hassle as possible...

The vulnerability of Microsoft Office and Office 365 applications relates to the possibility of exploiting memory after it is freed, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Office and Office 365 packages relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

A Non-Intrusive Traffic Analysis Framework for Authorization Risk Detection and Coordinated Response in Web Applications

Authorization violations under valid Web sessions are difficult to identify and handle in real time from traffic because they depend strongly on business semantics and exhibit few distinctive protocol-level features. This paper proposes a non-intrusive traffic analysis framework for authorization...

Microsoft ASP.NET Core privilege escalation vulnerability (CNVD-2026-28484)

Microsoft ASP.NET Core is a cross-platform open-source framework developed by Microsoft. This framework is used to build cloud-based applications such as web applications, IoT applications, and mobile backends. There is a permission escalation vulnerability in Microsoft ASP.NET Core, which allows...