276978 matches found
CVE-2026-60669
The CVE-2026-60669 entry concerns Oracle PeopleSoft Enterprise HCM Global Payroll Mexico (component: Global Payroll for Mexico) with affected version 9.2. A low-privilege, network-accessible (via HTTP) attacker can access and modify data, potentially causing unauthorized data changes and a partia...
CVE-2026-60548
The CVE concerns Oracle Fusion Middleware’s Oracle SOA Suite (Integration Business Insight) with affected versions 12.2.1.4.0 and 14.1.2.0.0. The issue is exploitable over HTTP with network access by a low-privileged attacker, potentially leading to unauthorized access to critical data or full ac...
CVE-2026-60423
Affected product: Oracle Unified Directory (OUD Core) within Oracle Fusion Middleware. Vulnerable versions: 12.2.1.4.0 and 14.1.2.1.0. Impact: Low-privilege attacker with network access via LDAP can compromise OUD and potentially take over the directory. Severity: CVSS v3.1 base score 8.8 (HIGH) ...
CVE-2026-60312
CVE-2026-60312 affects Oracle WebLogic Server (Fusion Middleware Core). Affected versions: 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, 15.1.1.0.0. The vulnerability allows an unauthenticated attacker with network access via T3 or IIOP to compromise the server and potentially takeover the Oracle WebLogic ...
CVE-2026-60230
CVE-2026-60230 affects Oracle Coherence (Core) within Oracle Fusion Middleware. Affects versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. The vulnerability allows an unauthenticated attacker with network access via TCP to compromise Oracle Coherence, potentially taking over the service....
CVE-2026-47058
CVE-2026-47058 affects Oracle Java SE (Scripting) on 8u491, 8u491-perf, and 11.0.31. The vulnerability enables an unauthenticated attacker over network protocols to compromise data confidentiality and integrity, potentially leading to unauthorized creation, deletion, or modification of data. The ...
CVE-2026-46988
The vulnerability affects Oracle Enterprise Manager Base Platform (Connector Framework) with affected versions 13.5 and 24.1. The root cause is not explicitly detailed in the provided documents, but the issue enables a high-privilege attacker who can reach the service over HTTPS to compromise the...
CVE-2026-46981
The CVE-2026-46981 entry affects Oracle Utilities Network Management System (Mobile component) with affected versions 2.5.0.1.0–2.5.0.1.17, 2.5.0.2.0–2.5.0.2.11, 2.6.0.1.0–2.6.0.1.12, 2.6.0.2.0–2.6.0.2.8, and 25.12.0.0.0–25.12.0.0.2. It is an unauthenticated, network-accessible vulnerability expl...
GHSA-8Q5V-6PQQ-X66H vulnerabilities
Vulnerabilities for packages: dotnet, powershell, dotnet-sdk...
CVE-2026-16454
CVE-2026-16454 affects Eclipse hawkBit (DDI Controller)
bind: bind9: Unnecessary validation of DNSSEC signed records
The issue is a resource exhaustion vulnerability associated with DNSSEC validation. BIND always validates all RRSIG records in an answer, even if they are not strictly needed. A query to an authoritative server/zone which returns many valid but superfluous RRSIG records causes the validator to...
EUVD-2026-46273
HCL IEM was affected with the Information disclosure nginx server. It may enable attackers to identify outdated software versions and target known vulnerabilities or publicly available exploits...
CVE-2026-56584 HCL IEM was affected with the Information disclosure nginx server
HCL IEM was affected with the Information disclosure nginx server. It may enable attackers to identify outdated software versions and target known vulnerabilities or publicly available exploits...
CVE-2026-52870 vulnerabilities
Vulnerabilities for packages: litellm...
CVE-2026-8285
Improper restriction of excessive authentication attempts vulnerability in Universal Software Inc. FlexCity allows Excessive Allocation. This issue affects FlexCity: from 5.536.0 through 11052026...
SUSE CVE-2026-64022
In the Linux kernel, the following vulnerability has been resolved: gpio: aggregator: remove the software node when deactivating the aggregator The dynamic software node we create for the aggregator platform device when using configfs is leaked when the device is deactivated. Destroy it as the la...
CVE-2026-6792
Technical details about CVE-2026-6792 are not publicly available in the provided documents. Monitor for updates from official advisories; the available sources only reiterate a Missing Authorization issue affecting FlexCity versions 5.536.0–11052026.
EUVD-2026-46188
Missing Authorization vulnerability in Universal Software Inc. FlexCity allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects FlexCity: from 5.536.0 through 11052026...
CVE-2026-8285 OTP Bypass in Universal Sotware's FlexCity
Improper restriction of excessive authentication attempts vulnerability in Universal Software Inc. FlexCity allows Excessive Allocation. This issue affects FlexCity: from 5.536.0 through 11052026...