CVE-2021-2003

Vulnerability in the Business Intelligence Enterprise Edition product of Oracle Fusion Middleware component: Analytics Web Dashboards. Supported versions that are affected are 5.5.0.0.0, 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with...

CVE-2022-0842

A blind SQL injection vulnerability in McAfee Enterprise ePolicy Orchestrator ePO prior to 5.10 Update 13 allows a remote authenticated attacker to potentially obtain information from the ePO database. The data obtained is dependent on the privileges the attacker has and to obtain sensitive data...

CVE-2024-41681

A vulnerability has been identified in Location Intelligence family All versions V4.4. The web server of affected products is configured to support weak ciphers by default. This could allow an unauthenticated attacker in an on-path position to to read and modify any data passed over the connectio...

CVE-2021-2106

Vulnerability in the Oracle Customer Interaction History product of Oracle E-Business Suite component: Outcome-Result. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

EUVD-2026-0905

QOCA aim AI Medical Cloud Platform developed by Quanta Computer has a SQL Injection vulnerability, allowing authenticated remote attackers to inject arbitrary SQL commands to read database contents...

SAP NetWeaver Application Server Java Authentication Bypass Read Data

The vulnerability of the SAP NetWeaver Application Server Java server is related to deficiencies in the authentication process. Exploiting this vulnerability can allow a malicious actor to gain read access to data remotely...

CVE-2025-9110

An exposure of sensitive system information to an unauthorized control sphere vulnerability has been reported to affect several QNAP operating system versions. The remote attackers can then exploit the vulnerability to read application data. We have already fixed the vulnerability in the followin...

CVE-2025-9110

CVE-2025-9110 affects QNAP QTS and QuTS hero where an exposure of sensitive system information to an unauthorized control sphere allows remote reading of application data. Affected versions include QTS 5.2.8.3332 build 20251128 and later, QuTS hero h5.2.8.3321 build 20251117 and later, and QuTS h...

CVE-2025-9110 QTS, QuTS hero

An exposure of sensitive system information to an unauthorized control sphere vulnerability has been reported to affect several QNAP operating system versions. The remote attackers can then exploit the vulnerability to read application data. We have already fixed the vulnerability in the followin...

CVE-2025-62857

A cross-site scripting XSS vulnerability has been reported to affect QuMagie. The remote attackers can then exploit the vulnerability to bypass security mechanisms or read application data. We have already fixed the vulnerability in the following version: QuMagie 2.8.1 and later...

PT-2026-34076

Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 8u481, 8u481-b50, 8u481-perf, 11.0.30, 17.0.18, 21.0.10, 25.0.2, 26 Oracle GraalVM for JDK versions 17.0.18, 21.0.10 Oracle GraalVM Enterprise Edition version 21.3.17 Description An issue in the Security component allow...

Nagios Log Server Data Access Modification

The vulnerability of the Nagios Log Server software monitoring and analysis interface is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain access to read and modify data...

PIA Core Technology Data Access

The vulnerability of the PIA Core Technology component in the Oracle PeopleSoft Enterprise PeopleTools business application suite is related to a breach of the buffer’s initial boundary. Exploiting this vulnerability could allow an attacker operating remotely to gain read, modify, and delete acce...

CVE-2025-9454 PRT File Parsing Out-of-Bounds Read Vulnerability

A maliciously crafted PRT file, when parsed through certain Autodesk products, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process...

Oracle Database Server Functional Index Read Disclosure

The vulnerability of the RDBMS Functional Index component in the Oracle Database Server management system is related to the violation of the buffer’s initial limit. Exploiting this vulnerability can allow an attacker, operating remotely, to gain read access to data...

Web Runtime SEC Resource Management

The vulnerability of the Web Runtime SEC component of the JD Edwards EnterpriseOne Tools system for resource management involves deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain read, modify, and delete access to data...

Workflow Notification Mailer Oracle Workflow Data Access

The vulnerability of the Workflow Notification Mailer component of the Oracle Workflow process management system is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain access to read, modify, and delete data...

Oracle Applications Manager Application Logging Interfaces Data Access

The vulnerability of the Application Logging Interfaces component in the Oracle Applications Manager management tool is related to lack of access control mechanisms. Exploiting this vulnerability could allow an attacker to gain read, modify, and delete privileges on data...

Portable Clusterware Oracle Database Server Information Disclosure

The vulnerability of the Portable Clusterware component of the Oracle Database Server management system is related to the lack of protection for operational data. Exploiting this vulnerability can allow an attacker operating remotely to gain access to and read data...

EUVD-2025-201851

Due to a Missing Authorization Check vulnerability in SAP S/4 HANA Private Cloud Financials General Ledger, an authenticated attacker with authorization limited to a single company code could read sensitive data and post or modify documents across all company codes. Successful exploitation could...