95176 matches found
PT-2026-78345
Name of the Vulnerable Software and Affected Versions Nikstore Core versions prior to 1.6 Description An unauthenticated SQL Injection exists in the software. SQL Injection is a type of vulnerability that allows an attacker to interfere with the queries that an application makes to its database,...
CVE-2026-75920: Insecure Temporary File
phpMyFAQ before v4.1.6 writes content backup ZIP archives to the web-accessible document root at content.zip, exposing sensitive files including database credentials. Unauthenticated attackers can race concurrent requests to download the temporary ZIP file before deletion, or exploit XSS in admin...
CVE-2026-75919: Missing Authentication for Critical Function
phpMyFAQ before 4.1.7 contains an authentication bypass vulnerability in SetupController that allows unauthenticated attackers to run database migrations and create configuration backups when maintenance mode is enabled. Attackers can call POST /api/setup/update-database and POST /api/setup/backu...
Linux Distros Unpatched Vulnerability : CVE-2026-18690
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in MongoDB Server could allow an authenticated user with a limited database-scoped role to perform an action against protected system collections that...
Oracle Database Server (August 2026 CSPU)
The versions of Oracle Database Server installed on the remote host are affected by multiple vulnerabilities as referenced in the August 2026 CSPU advisory. - Vulnerability in the Portable Clusterware component of Oracle Database Server. Supported versions that are affected are 19.3-19.32,...
CVE-2026-54347
creationtimestamp| type| source ---|---|--- 2026-08-18 22:35:28+00:00| published-proof-of-concept| https://github.com/froxlor/froxlor/security/advisories/GHSA-43gm-9rr3-cx7g...
CVE-2026-54348
creationtimestamp| type| source ---|---|--- 2026-08-18 22:35:25+00:00| published-proof-of-concept| https://github.com/froxlor/froxlor/security/advisories/GHSA-w27m-rmmf-g5w4 2026-08-19 13:32:06+00:00| seen| https://gist.github.com/alon710/af2c8d3762565eaa4715277e9dc15159...
CVE-2026-71102
creationtimestamp| type| source ---|---|--- 2026-08-18 22:27:11+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtfb6v5mzg25 2026-08-19 09:10:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtgf4gaap22j 2026-08-19 13:35:24+00:00| seen|...
CVE-2026-70689
creationtimestamp| type| source ---|---|--- 2026-08-18 22:20:16+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtfasjluqe2f 2026-08-19 06:00:46+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtg2jwn6li2p 2026-08-19 06:10:04+00:00| seen|...
CVE-2026-71100
Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 19.3-19.32, 21.3-21.23 and 23.4.0-23.26.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via Oracle Net to compromise RDBMS. Successful attacks of this...
CVE-2026-71102
Vulnerability in the Portable Clusterware component of Oracle Database Server. Supported versions that are affected are 19.3-19.32, 21.3-21.23 and 23.4.0-23.26.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Portable Clusterware...
CVE-2026-71063
Vulnerability in the Portable Clusterware component of Oracle Database Server. Supported versions that are affected are 19.3-19.32, 21.3-21.23 and 23.4.0-23.26.3. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the...
CVE-2026-71062
Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 23.4.0-23.26.3. Difficult to exploit vulnerability allows low privileged attacker having Authenticated User privilege with network access via Oracle Net to compromise RDBMS. While the...
CVE-2026-71064
Vulnerability in the Portable Clusterware component of Oracle Database Server. Supported versions that are affected are 19.3-19.32, 21.3-21.23 and 23.4.0-23.26.3. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the...
CVE-2026-53759
linuxfabrik-lib provides Python modules for database access, caching, shell execution, and API integrations. Prior to version 4.2.0, dbsqlite.py created SQLite databases at predictable paths in the shared /tmp directory and followed attacker-created symbolic links at those paths. An attacker who...
CVE-2026-73873
...
CVE-2026-71116
Oracle VM VirtualBox 7.2.14 Core component has a HIGH-severity local vulnerability (CVSS 7.5) exploitable by a high-privilege attacker logged into the host, potentially compromising the hypervisor and additional products (scope change). No fix version is specified in the provided documents. Monit...
EUVD-2026-62045
Vulnerability in the Portable Clusterware component of Oracle Database Server. Supported versions that are affected are 19.3-19.32, 21.3-21.23 and 23.4.0-23.26.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Portable Clusterware...
EUVD-2026-62043
Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 19.3-19.32, 21.3-21.23 and 23.4.0-23.26.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via Oracle Net to compromise RDBMS. Successful attacks of this...
