CVE-2026-60734

Vulnerability in the Oracle Trading Community product of Oracle E-Business Suite component: Party Search UI. Supported versions that are affected are 12.2.3-12.2.12. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Trading Communit...

CVE-2026-60617

Vulnerability in the PeopleSoft Enterprise CS Campus Community product of Oracle PeopleSoft component: Security. The supported version that is affected is 9.2.38. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise CS...

CVE-2026-60616

Vulnerability in the PeopleSoft Enterprise CS Campus Community product of Oracle PeopleSoft component: Security. The supported version that is affected is 9.2.38. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise CS...

CVE-2026-60609

Vulnerability in the PeopleSoft Enterprise CS Campus Community product of Oracle PeopleSoft component: Communication. The supported version that is affected is 9.2.38. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise PeopleSoft Enterprise...

CVE-2026-60611

Vulnerability in the PeopleSoft Enterprise CS Campus Community product of Oracle PeopleSoft component: Security. The supported version that is affected is 9.2.38. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise CS...

CVE-2026-60615

Vulnerability in the PeopleSoft Enterprise CS Campus Community product of Oracle PeopleSoft component: Security. The supported version that is affected is 9.2.38. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise CS...

CVE-2026-60610

Vulnerability in the PeopleSoft Enterprise CS Campus Community product of Oracle PeopleSoft component: Security. The supported version that is affected is 9.2.38. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise PeopleSoft Enterprise C...

CVE-2026-60614

Vulnerability in the PeopleSoft Enterprise CS Campus Community product of Oracle PeopleSoft component: Person Data. The supported version that is affected is 9.2.38. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise ...

CVE-2026-60604

Vulnerability in the PeopleSoft Enterprise CS Campus Community product of Oracle PeopleSoft component: Security. The supported version that is affected is 9.2.38. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise CS...

CVE-2026-60594

Vulnerability in the PeopleSoft Enterprise CS Campus Community product of Oracle PeopleSoft component: Integration and Interfaces. The supported version that is affected is 9.2.38. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSof...

CVE-2026-47237 Kubeflow Community Distribution: Overly Permissive Istio Permissions Allows Kubeflow Authorization Token Stealing

Kubeflow Community Distribution helps users to install Kubeflow Platform in popular Kubernetes clusters. Prior to version 26.03-rc.1, a Kubeflow setup based on the official manifests or most other packaged Kubeflow distributions is vulnerable to authorization token stealing from any user of the...

GHSA-23HP-3JRH-7FPW vulnerabilities

Vulnerabilities for packages: kibana, pulumi, wazuh-dashboard-fips, gitlab-rails-ce-fips, code-server, graalvm, opensearch-dashboards, saf, sqlpad, wazuh-dashboard, homepage, prism, npm, lerna, opensearch-dashboards-fips, actions-runner, gitlab-rails-ce, kubeflow-centraldashboard...

GHSA-XV26-6W52-CPH6 vulnerabilities

Vulnerabilities for packages: arangodb, gitlab-rails-ce-fips, gitlab-rails-ce...

PT-2026-62748

Name of the Vulnerable Software and Affected Versions Oracle Trading Community versions 12.2.3 through 12.2.12 Description An issue exists in the Party Search UI component of the Oracle Trading Community product within Oracle E-Business Suite. A high privileged attacker with network access via HT...

PT-2026-62654

Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft PeopleSoft Enterprise CS Campus Community version 9.2.38 Description A security flaw in the Security component allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful exploitation...

PT-2026-62649

Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft PeopleSoft Enterprise CS Campus Community version 9.2.38 Description A security flaw in the Security component allows an unauthenticated attacker with network access via HTTP to compromise the system. This can lead to...

PT-2026-62632

Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft PeopleSoft Enterprise CS Campus Community version 9.2.38 Description A flaw exists in the Integration and Interfaces component of the PeopleSoft Enterprise CS Campus Community product. A low privileged attacker with network...

PT-2026-62778

Name of the Vulnerable Software and Affected Versions Oracle Trading Community versions 12.2.3 through 12.2.15 Description An issue exists in the Party Search UI component of the Oracle Trading Community product. A low privileged attacker with network access via HTTP can exploit this flaw to...

📄 WordPress Community Events 1.5.1 Unauthenticated Blind SQL Injection

WordPress Community Events plugin version 1.5.1 contains an unauthenticated time-based blind SQL injection vulnerability. A remote attacker can inject SQL through the vulnerable parameter and infer database contents through response timing. This proof of concept exploit demonstrates the vulnerabl...

PT-2026-62991

Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft PeopleSoft Enterprise CS Campus Community version 9.2.38 Description A security flaw exists in the Security component that allows an unauthenticated attacker with access to the physical communication segment attached to the...