Oracle APEX Sample Applications (Brookstrut) (CVE-2026-21931)

The remote host is affected by a vulnerability in the Oracle APEX Sample Applications product of Oracle APEX component: Brookstrut Sample App as referenced in the January 2026 Oracle Critical Patch Update CPU advisory. - Vulnerability in the Oracle APEX Sample Applications product of Oracle APEX...

CVE-2026-21931

Vulnerability in the Oracle APEX Sample Applications product of Oracle APEX component: Brookstrut Sample App. Supported versions that are affected are 23.2.0, 23.2.1, 24.1.0, 24.2.0 and 24.2.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

Oracle APEX security vulnerabilities

Oracle APEX is a low-code development platform provided by Oracle, a company based in the United States. There are security vulnerabilities in the Oracle APEX Sample Applications versions 23.2.0, 23.2.1, 24.1.0, 24.2.0, and 24.2.1. These vulnerabilities allow attackers with low privileges to acce...

CVE-2025-2161

Pega Platform versions 7.2.1 to Infinity 24.2.1 are affected by an XSS issue with Mashup...

CVE-2025-2160

Pega Platform versions 8.4.3 to Infinity 24.2.1 are affected by an XSS issue with Mashup...

CVE-2025-2160

Pega Platform versions 8.4.3 through Infinity 24.2.1 are affected by a Mashup-related XSS vulnerability (CVE-2025-2160). The issue arises from improper neutralization of input during web page generation, enabling cross-site scripting. Affected component: Mashup functionality within Pega Platform;...

PT-2025-16243 · Pegasystems · Pega Platform

Name of the Vulnerable Software and Affected Versions: Pega Platform versions 8.4.3 through Infinity 24.2.1 Description: The issue is related to an XSS problem with Mashup, which is caused by improper neutralization of input during web page generation, also known as cross-site scripting. This is...

Pegasystem Pega Platform 安全漏洞

Pegasystem Pega Platform is a suite of application development platforms from the American company Pegasystem. The platform is used to develop applications such as BPM Business Process Management, Case Management, Real-Time Decision Making and CRM Customer Relationship Management. A security...

CVE-2024-50704

Unauthenticated remote code execution vulnerability in Uniguest Tripleplay before 24.2.1 allows remote attackers to execute arbitrary code via a specially crafted HTTP POST request...

CVE-2024-50707

Unauthenticated remote code execution vulnerability in Uniguest Tripleplay before 24.2.1 allows remote attackers to execute arbitrary code via the X-Forwarded-For header in an HTTP GET request...

CVE-2024-50705

Unauthenticated reflected cross-site scripting XSS vulnerability in Uniguest Tripleplay before 24.2.1 allows remote attackers to execute arbitrary scripts via the page parameter...

Uniguest Tripleplay 代码注入漏洞

Uniguest Tripleplay is a multimedia player from Uniguest. A security vulnerability exists in Uniguest Tripleplay versions prior to 24.2.1 that originates from unauthorized remote code execution...

Uniguest Tripleplay 跨站请求伪造漏洞

Uniguest Tripleplay is a multimedia player from Uniguest. A security vulnerability exists in Uniguest Tripleplay versions prior to 24.2.1 that stems from reflective cross-site scripting...

Uniguest Tripleplay SQL注入漏洞

Uniguest Tripleplay is a multimedia player from Uniguest. A SQL injection vulnerability exists in Uniguest Tripleplay versions prior to 24.2.1 that stems from SQL injection...

Uniguest Tripleplay 代码注入漏洞

Uniguest Tripleplay is a multimedia player from Uniguest. A security vulnerability exists in Uniguest Tripleplay versions prior to 24.2.1 that originates from unauthorized remote code execution...

Adobe Media Encoder 安全漏洞

Adobe Media Encoder is an audio and video encoding application from Adobe USA. A security vulnerability exists in Adobe Media Encoder versions 24.2.1, 23.6.4, which stems from susceptibility to a stack-based buffer overflow vulnerability that could lead to the execution of arbitrary code in the...

Adobe Premiere Pro Multiple Vulnerabilities (APSB24-12) - Windows

The Adobe Premiere Pro device is missing a security update announced via the apsb24-12 advisory. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-onl...