319462 matches found
CVE-2025-44089
An issue in NCH Software ExpressZip v11.29 allows attackers to execute arbitrary code via downloading and executing a crafted archive file...
CVE-2026-2406: Authorization Bypass Through User-Controlled Key
Authorization bypass through User-Controlled key vulnerability in Universe Software Computer Marketing Trade and Industry Inc. Online Registration and Workflow Management System allows Exploiting Trust in Client. This issue affects Online Registration and Workflow Management System: through...
CVE-2026-56844: Improper Limitation of a Pathname to a Restricted Directory
A vulnerability in the Veeam Updater component of the Veeam Software Appliance that could allow a local user to elevate their privileges and gain root-level access to the underlying operating system...
CVE-2026-16607: Improper Privilege Management
A vulnerability in Fujitsu Software Linux openFT and Fujitsu Software Oracle Solaris openFT before version 12.1D00 allows for local privilege escalation to root of an already authenticated user on GNU/Linux or Oracle Solaris. The Fsas Technologies PSIRT obtained that intelligence internally and...
CVE-2026-16606: Improper Control of Generation of Code
A vulnerability in Fujitsu Software Linux openFT and Fujitsu Software Oracle Solaris openFT before version 12.1D00 allows for unauthenticated remote code execution pre-auth RCE on GNU/Linux or Oracle Solaris. The Fsas Technologies PSIRT obtained that intelligence internally and covers the CVE...
CVE-2025-44089
An issue in NCH Software ExpressZip v11.29 allows attackers to execute arbitrary code via downloading and executing a crafted archive file...
CVE-2026-61271
Vulnerability in the Oracle Document Management and Collaboration product of Oracle E-Business Suite component: Attachments. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...
CVE-2026-61053
Vulnerability in the Oracle Communications BRM - Elastic Charging Engine product of Oracle Communications component: Diameter Gateway and SDK. Supported versions that are affected are 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0 and 15.2.0.0.0. Easily exploitable vulnerability allows low privileged attacke...
CVE-2026-43945
FUXA is a web-based Process Visualization SCADA/HMI/Dashboard software. Versions 1.2.11 until 1.3.1 allow an unauthenticated remote attacker to achieve Full Remote Code Execution RCE as root. The exploit succeeds even when the platform is configured in its most secure state Secure Mode Enabled an...
CVE-2026-62490
...
CVE-2026-62480
...
CVE-2026-62482
...
CVE-2026-62453
CVE-2026-62453 affects Oracle HRMS (UK) within Oracle E-Business Suite, component Internal Operations. Affected versions are 12.2.3–12.2.15. The vulnerability allows a low-privileged, network-attacker with HTTP access to perform unauthorized updates/inserts/deletes and read access, with a partial...
CVE-2026-62451
CVE-2026-62451 affects Oracle Work in Process within Oracle E-Business Suite (Internal Operations). Affected versions are 12.2.14–12.2.15. The vulnerability allows a low-privileged attacker with network access via HTTP to compromise Oracle Work in Process, leading to unauthorized creation, deleti...
CVE-2026-61169
...
CVE-2026-61161
...
CVE-2026-61117
...
CVE-2026-61096
...