183887 matches found
PT-2026-77668
Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware component: Security and Authentication. The supported version that is affected is 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Report...
PT-2026-77659
Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware component: Security and Authentication. The supported version that is affected is 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Report...
PT-2026-77634
Name of the Vulnerable Software and Affected Versions Oracle Reports Developer version 12.2.1.19.0 Description A security and authentication issue exists in the Oracle Reports Developer product of Oracle Fusion Middleware. A low privileged attacker with network access via CORBA Common Object...
PT-2026-77640
Name of the Vulnerable Software and Affected Versions Oracle Reports Developer version 12.2.1.19.0 Description An issue exists in the Security and Authentication component of Oracle Reports Developer. An unauthenticated attacker with network access via HTTP can exploit this flaw to compromise the...
EUVD-2021-34863
An Authentication Bypass vulnerability exists in EPSON EH-TW5350 EPSON 150075647YWWV110, which could let a remote malicious user cause a Denial of Service via specially crafted series of HTTP...
Security Bulletin: NVIDIA Cumulus Linux and NVOS - August 2026
NVIDIA has released a software update for NVIDIA® Cumulus Linux and NVOS. To protect your system, download and install the latest NVIDIA components from the NVIDIA Enterprise Support Portal. Go to NVIDIA Product Security. Details The following table summarizes the potential vulnerabilities that...
CVE-2021-43717
The Epson EH-TW5350 projector, specifically within the iProjection.apk v3.2.6 application, is vulnerable to the use of hard-coded credentials . An attacker who identifies a projector with the iProjection function enabled can use these embedded authentication details to gain unauthorized access. O...
PT-2026-77123
Subscriber Broken Authentication in User Registration = 5.2.6 versions...
PT-2026-77666
Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware component: Security and Authentication. The supported version that is affected is 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via IIOP to compromise Oracle Report...
PT-2026-77310
Name of the Vulnerable Software and Affected Versions Keycloak affected versions not specified Description A flaw exists in the legacy client-initiated account-linking endpoint of Keycloak. The protection mechanism for the account-linking process uses a predictable hash, which a malicious OpenID...
PT-2026-77282
Lemur manages TLS certificate creation. Prior to 1.9.3, GET /api/1/destinations and GET /api/1/destinations/ relied only on authentication while sibling write handlers required admin permission. DestinationOutputSchema returned raw options and copied them into pluginOptions without redacting...
ROS-20260818-73-0033
The vulnerability in Mariadb is related to the incorrect assignment of privileges. Exploiting this vulnerability can allow attackers to enhance their privileges...
PT-2026-77116
Name of the Vulnerable Software and Affected Versions MWB HubSpot for WooCommerce versions prior to 1.6.8 Description The software contains a broken authentication mechanism that allows users with Subscriber privileges to bypass authentication requirements. Recommendations Update MWB HubSpot for...
CVE-2026-62632: Improper Access Control
Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware component: Security and Authentication. The supported version that is affected is 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Report...
CVE-2026-62627: Improper Access Control
Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware component: Security and Authentication. The supported version that is affected is 12.2.1.19.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...
CVE-2026-62619: Improper Access Control
Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware component: Security and Authentication. The supported version that is affected is 12.2.1.19.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Repor...
CVE-2026-62612: Improper Access Control
Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware component: Security and Authentication. The supported version that is affected is 12.2.1.19.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Report...
CVE-2026-62621: Improper Access Control
Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware component: Security and Authentication. The supported version that is affected is 12.2.1.19.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Report...
CVE-2026-62609: Improper Access Control
Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware component: Security and Authentication. The supported version that is affected is 12.2.1.19.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Report...
CVE-2026-75627: Authentication Bypass Using an Alternate Path or Channel
Bastillion fails to properly validate request URI paths in its controller dispatcher, allowing unauthenticated attackers to bypass authentication filters by prefixing requests with arbitrary path segments. Attackers can access administrative controllers to read user listings, create manager...