PT-2026-77322

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.169 Description An inappropriate implementation in the Media component of Google Chrome on Mac allows a remote attacker to execute arbitrary code outside the sandbox. This is achieved by inducing the...

The vulnerability of the Git-based software platform for collaborative code development in GitLab EE/CE lies in improper code generation management. This allows attackers to gain unauthorized access to protected information and execute arbitrary code.

The vulnerability of the Git-based software platform for collaborative code development in GitLab EE/CE stems from improper code generation management. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information and execute arbitra...

EUVD-2021-34863

An Authentication Bypass vulnerability exists in EPSON EH-TW5350 EPSON 150075647YWWV110, which could let a remote malicious user cause a Denial of Service via specially crafted series of HTTP...

PT-2026-77297

Improper handling of highly compressed data in the GZIP auto-decompression handler in Amazon ion-java before 1.12.0 might allow remote actors to cause a denial of service via a crafted compressed Ion document that expands to an arbitrarily large size upon decompression. To remediate this issue,...

PT-2026-77790

Vulnerability in the Oracle Applications Platform Engineering product of Oracle E-Business Suite component: Valid Session. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Oracle Net to compromise...

CVE-2026-71675

An issue in Open5GS v.2.7.0 allows a remote attacker to cause a denial of service via the ngapsendtonas function in src/amf/ngap-path.c...

CVE-2026-30250

A stored cross-site scripting flaw in the user documentation field of Beta Systems ANOW! Automate v3.3.1.90 allows an unauthenticated remote attacker to inject arbitrary script (CVSS 6.1, MEDIUM). CISA flags it as a PoC-level issue; no patch version or mitigation is provided in the documents.

PT-2026-77361

Name of the Vulnerable Software and Affected Versions Oracle Identity Manager versions 12.2.1.4.0 Oracle Identity Manager versions 14.1.2.1.0 Description A flaw in the OIM Legacy UI component of Oracle Fusion Middleware allows a low privileged attacker with network access via HTTP to compromise t...

PT-2026-76887

A vulnerability was found in itsourcecode Hospital Management System 1.0. This affects an unknown function of the file /viewdepartment.php. Performing a manipulation of the argument delid results in sql injection. The attack can be initiated remotely. The exploit has been made public and could be...

PT-2026-77323

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 151.0.7922.169 Description A buffer overflow exists in Dawn, which allows a remote attacker to execute arbitrary code outside the sandbox by inducing the user to visit a specially crafted HTML page. A...

CVE-2026-71676

Buffer Overflow vulnerability in Open5GS v.2.7.0 allows a remote attacker to cause a denial of service via the NAS 5GS decoder chain, triggered when the message type byte of a NAS PDU is mutated...

PT-2026-77248

Missing authentication in initial setup functionality left exposed until first reboot in GBIF Integrated Publishing Toolkit versions before 3.3.4 allows remote authenticated attackers to gain administrative control via authentication bypass...

PT-2026-78051

Name of the Vulnerable Software and Affected Versions Oracle Database Server versions 23.4.0 through 23.26.3 Description A flaw exists in the RDBMS component of the Oracle Database Server. A low-privileged attacker with Authenticated User privileges and network access via Oracle Net can compromis...

PT-2026-77940

Name of the Vulnerable Software and Affected Versions Oracle Siebel CRM versions 17.0 through 26.6 Description A flaw in the Server Infrastructure component of the Siebel CRM Deployment product allows a low privileged attacker with network access via HTTP to compromise the system. Successful...

CVE-2026-71676

CVE-2026-71676 is a buffer overflow in Open5GS v.2.7.0 , specifically in the NAS 5GS decoder chain . A remote, unauthenticated attacker can trigger a denial of service by mutating the message type byte of a NAS PDU. The CVSS 3.1 score is 7.5 (HIGH) with a network vector and no privileges required...

Linux Distros Unpatched Vulnerability : CVE-2026-19999

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A security vulnerability has been detected in Open Asset Import Library Assimp Assimp 17c12da. The affected element is the function...

CVE-2026-75081

Webkul Bagisto up to 2.4.4 is vulnerable at /customer/account/rma/store; manipulating rma_qty, resolution_type, and rma_reason_id allows remote enforcement of RMA behavioral workflow. CVSS 3.1 scores 4.3 (MEDIUM). Vendor confirms some issues already fixed; remaining slated for upcoming releases. ...

CVE-2026-75080 SourceCodester Class and Exam Timetabling System edit_subject1.php sql injection

A security vulnerability has been detected in SourceCodester Class and Exam Timetabling System 1.0. This issue affects some unknown processing of the file /editsubject1.php. The manipulation of the argument ID leads to sql injection. The attack is possible to be carried out remotely. The exploit...

CVE-2026-75080

A security vulnerability has been detected in SourceCodester Class and Exam Timetabling System 1.0. This issue affects some unknown processing of the file /editsubject1.php. The manipulation of the argument ID leads to sql injection. The attack is possible to be carried out remotely. The exploit...

CVE-2026-75080

SourceCodester Class and Exam Timetabling System 1.0 contains a SQL injection vulnerability in the file /edit_subject1.php , triggered by manipulation of the ID parameter. The flaw allows remote, unauthenticated attackers to inject arbitrary SQL queries, potentially compromising confidentiality, ...