EUVD-2026-46518

Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM component: Redwood UI. Supported versions that are affected are 24.4-26.3. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Siebel CRM End User. Successful attacks...

PT-2026-62193

Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM component: Redwood UI. Supported versions that are affected are 24.4-26.3. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Siebel CRM End User. Successful attacks...

CVE-2026-57029 Junos OS Evolved: QFX Series: When sFlow collector reachability changes evo-pfemand process can crash

A Missing Synchronization vulnerability in the flow collector handler of Juniper Networks Junos OS Evolved on QFX Series allows an adjacent, unauthenticated attacker to cause a Denial-of-Service DoS. When the reachability of an sFlow collector changes, the corresponding next-hop entry is...

CVE-2026-57029

CVE-2026-57029 describes a missing synchronization vulnerability in the flow collector handler of Junos OS Evolved on QFX Series. When the reachability of an sFlow collector changes, updating the next-hop entry can race with the sFlow thread accessing the same data, causing the evo-pfemand proces...

PT-2026-56983

Name of the Vulnerable Software and Affected Versions Junos OS Evolved on QFX Series versions 23.2 Junos OS Evolved on QFX Series versions prior to 23.4R2-S7-EVO Junos OS Evolved on QFX Series versions prior to 24.2R2-S5-EVO Junos OS Evolved on QFX Series versions prior to 24.4R2-S3-EVO Junos OS...

CVE-2026-33785

A Missing Authorization vulnerability in the CLI of Juniper Networks Junos OS on MX Series allows a local, authenticated user with low privileges to execute specific commands which will lead to a complete compromise of managed devices. Any user logged in, without requiring specific privileges, ca...

EUVD-2025-198222

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in opentext uCMDB allows Stored XSS. The vulnerability could allow an attacker has high level access to UCMDB to create or update data with malicious scripts This issue affects uCMDB: 24.4...

PT-2025-47533

Name of the Vulnerable Software and Affected Versions opentext uCMDB version 24.4 Description A flaw exists in opentext uCMDB that allows for Stored Cross-site Scripting XSS. An attacker with high-level access to uCMDB can create or update data containing malicious scripts. The vulnerability aris...

CVE-2025-11884: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in opentext uCMDB allows Stored XSS. The vulnerability could allow an attacker has high level access to UCMDB to create or update data with malicious scripts This issue affects uCMDB: 24.4...

CVE-2025-60006

Multiple instances of an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in the CLI of Juniper Networks Junos OS Evolved could be used to elevate privileges and/or execute unauthorized commands. When an attacker executes crafted CLI commands,...

CVE-2025-60006 Junos OS Evolved: OS command injection vulnerabilities fixed

Multiple instances of an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in the CLI of Juniper Networks Junos OS Evolved could be used to elevate privileges and/or execute unauthorized commands. When an attacker executes crafted CLI commands,...

CVE-2025-59964

A Use of Uninitialized Resource vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS on SRX4700 devices allows an unauthenticated, network-based attacker to cause a Denial of Service DoS. When forwarding-options sampling is enabled, receipt of any traffic destined to the...

Juniper Networks Junos OS SRX 安全漏洞

Juniper Networks Junos OS SRX is a Juniper Networks USA network operating system dedicated to the company's hardware devices. The operating system provides a secure programming interface and the Junos SDK. A security vulnerability exists in Juniper Networks Junos OS SRX version 24.4 up to and...

EUVD-2025-13929

Malicious code in bioql PyPI...

CVE-2025-3476

CVE-2025-3476 targets OpenText Operations Bridge Manager with an Incorrect Authorization flaw that could allow privilege escalation by authenticated users. Affected versions include 2023.05, 23.4, 24.2, and 24.4. Root cause and impact: improper authorization controls enable elevated access for an...

CVE-2025-3272: Incorrect Authorization

Incorrect Authorization vulnerability in OpenText™ Operations Bridge Manager. The vulnerability could allow authenticated users to change their password without providing their old password. This issue affects Operations Bridge Manager: 24.2, 24.4...

OpenText Operations Bridge Manager 安全漏洞

OpenText Operations Bridge Manager is an enterprise activity and performance management software from OpenText Canada. A security vulnerability exists in OpenText Operations Bridge Manager versions 24.2 and 24.4, which stems from improper authorization and could result in an authenticated user...

OpenText Digital Asset Management SQL注入漏洞

OpenText Digital Asset Management is a Digital Asset Management DAM solution from OpenText Canada that helps organizations centrally manage, organize and distribute digital assets. An SQL injection vulnerability exists in OpenText Digital Asset Management version 24.4 and earlier, which stems fro...

OpenText Content Server 安全漏洞

OpenText Content Server is an enterprise content management software from OpenText Canada. A security vulnerability exists in OpenText Content Server versions 20.2 through 24.4, which stems from improper authorization of the REST API and could result in an unprivileged user deleting external...

PT-2025-3697 · Opentext · Opentext Content Management

Name of the Vulnerable Software and Affected Versions: OpenText Content Management Extended ECM versions 10.0 through 24.4 Description: The issue is related to improper validation of specified input types, allowing parameter injection. An actor with necessary privileges could exploit this to carr...