147986 matches found
CVE-2026-75978
A security vulnerability has been detected in xianrendzw EasyReport up to 2.0.17.0522Beta. The affected element is the function DataSourceController.add of the file DataSourceController.java of the component QueryerFactory. Such manipulation of the argument queryerClass leads to permission issues...
CVE-2026-75978
In xianrendzw EasyReport up to 2.0.17.0522_Beta, the function DataSourceController.add in DataSourceController.java allows remote manipulation of the queryerClass argument, causing permission issues exploitable with low privileges; no vendor patch is available yet, and a PoC has been disclosed pu...
CVE-2026-75978 xianrendzw EasyReport QueryerFactory DataSourceController.java DataSourceController.add permission
A security vulnerability has been detected in xianrendzw EasyReport up to 2.0.17.0522Beta. The affected element is the function DataSourceController.add of the file DataSourceController.java of the component QueryerFactory. Such manipulation of the argument queryerClass leads to permission issues...
Link content parser - Critical - Unsupported - SA-CONTRIB-2026-101
The security team is marking this project unsupported. There is a known security issue with the project that has not been fixed by the maintainer. If you would like to maintain this project, read the documentation on becoming the maintainer of a project that is unsupported for security reasons...
PT-2026-78252
Name of the Vulnerable Software and Affected Versions xianrendzw EasyReport versions prior to 2.0.17.0522 Beta Description A remote issue exists within the QueryerFactory component in the DataSourceController.add function of the DataSourceController.java file. Manipulating the queryerClass argume...
CVE-2026-70998
creationtimestamp| type| source ---|---|--- 2026-08-18 22:25:27+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtfb3rckqn2t 2026-08-19 08:10:12+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtgbr4vswg2u 2026-08-19 16:46:08+00:00| seen|...
MINI-P26W-QRHC-X8WH
Bulletin has no description...
CVE-2026-73938
...
CVE-2026-73902
...
CVE-2026-71071
...
CVE-2026-71060
...
CVE-2026-70877
A CVSS 8.8 HIGH-severity flaw in Oracle Hyperion Data Relationship Management 11.2.25.0.000 (Access and security component) allows low-privileged, network-authenticated attackers via HTTP to fully compromise the application (C/H/I/A all High). Oracle's August 2026 CPU advisory is the patch refere...
CVE-2026-70827
...
CVE-2026-70816
Oracle E-Business Suite Financials for EMEA (component: Internal Operations) versions 12.2.3–12.2.15 are vulnerable. A low-privileged attacker with network HTTP access can obtain unauthorized read access to critical data and perform limited unauthorized updates, inserts, or deletes. CVSS 3.1 base...
CVE-2026-70781
Oracle E-Business Suite's Proposals product, Internal Operations component, versions 12.2.3 to 12.2.15, is vulnerable to a HIGH-severity (CVSS 7.2) issue exploitable by a high-privileged network attacker over HTTP, enabling full takeover. Oracle's August 2026 CPU advisory provides patches. Exploi...
CVE-2026-61032
...
CVE-2026-61011
Oracle WebCenter Sites (component of Oracle Fusion Middleware) versions 12.2.1.4.0 and 14.1.2.0.0 are affected. An unauthenticated remote attacker can exploit this via HTTP, gaining unauthorized creation, deletion, or modification access to all accessible data and causing partial denial of servic...
CVE-2026-60995
CVE-2026-60995 affects the Oracle Identity Manager Connector (Core component) of Oracle Fusion Middleware, versions 12.2.1.4.0 and 14.1.2.1.0 . A low-privileged attacker with network access via TLS can exploit this vulnerability to achieve full takeover of the component. The scope change means su...