ShortCode Addons - Unauthenticated Options Update

WordPress plugin Shortcode Addons = 3.0.2 contains an unauthenticated arbitrary option update caused by insufficient access controls in the plugin, letting attackers modify options without authentication. id: CVE-2022-34487 info: name: ShortCode Addons - Unauthenticated Options Update author:...

NVIDIA Triton Inference Server <= 26.02 - Authentication Bypass

NVIDIA Triton Inference Server contains an authentication bypass vulnerability, letting attackers bypass authentication and potentially execute code, escalate privileges, tamper data, cause denial of service, or disclose information, exploit requires no special conditions. id: CVE-2026-24207 info...

CVE-2023-6360

CVE-2023-6360 Analysis Report Overview CVE-2023-6360 is an SQL injection vulnerability found in a specific WordPress plugin, allowing an attacker to exploit security weaknesses in the web application to inject malicious SQL code into the database. This can lead to serious security issues such as...

EUVD-2026-79931

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.16. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle V...

CVE-2026-87278

Oracle VM VirtualBox 7.2.16 (component: Core ) is affected by a local vulnerability allowing an unauthenticated attacker with logon to the host to trigger a complete denial of service (hang or repeatable crash) and unauthorized modification of accessible data. The attack requires user interaction...

EUVD-2026-79906

Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain component: Application Server. The supported version that is affected is 9.3.6. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where...

CVE-2026-87234

Oracle Hyperion Financial Management version 11.2.26.0.000 contains a vulnerability in its Security component. A low-privileged attacker with network access via HTTP can exploit this without user interaction to gain unauthorized creation, deletion, or modification of critical data and unauthorize...

EUVD-2026-79878

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion component: Security. The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Financial...

EUVD-2026-79756

Vulnerability in the Oracle Demand Signal Repository product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Demand...

CVE-2026-83448

A vulnerability in Oracle Bills of Material (component: Internal Operations ) within Oracle E-Business Suite affects supported versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit it with low complexity and no user interaction. Successful exploitati...

CVE-2026-83428

CVE-2026-83428 affects the Oracle Demand Signal Repository component (Internal Operations) within Oracle E-Business Suite , versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability without user interaction. Successful exploitation res...

CVE-2026-83314

CVE-2026-83314 affects the Web Service API component of Oracle BI Publisher (part of Oracle Analytics), versions 8.2.0.0.0 , 12.2.1.4.0 , and 26.01.0.0.0 . A low-privileged attacker with network access via SOAP can exploit this vulnerability with low complexity to achieve unauthorized creation, d...

EUVD-2026-79659

Vulnerability in the Oracle BI Publisher product of Oracle Analytics component: BI Platform Security. Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle B...

EUVD-2026-79637

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics component: BI Search. The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Business...

CVE-2026-83201

CVE-2026-83201 affects Oracle Siebel CRM Deployment (component: Server Infrastructure), versions 17.0 through 26.7 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability to achieve unauthorized creation, deletion, modification, or read access to critical data. T...

EUVD-2026-79472

Vulnerability in the Siebel Apps - Customer Order Management product of Oracle Siebel CRM component: Order Management. Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel Apps -...

CVE-2026-83097

Oracle Forms (component: Forms Services, C/S, Charmode) within Oracle Fusion Middleware is affected in versions 12.2.1.19.0 and 14.1.2.0.0 . A high-privileged attacker with network access via HTTP can exploit this with low complexity to cause unauthorized creation, deletion, or modification of cr...

CVE-2026-83073

Oracle Siebel CRM Cloud Applications (component: Siebel Cloud Manager ) versions 22.3 through 26.7 are affected by a vulnerability allowing an unauthenticated attacker with access to the adjacent physical communication segment to compromise the application. The attack requires low complexity and ...

EUVD-2026-79316

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware component: Authentication Engine. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle...

CVE-2022-3689

CVE-2022-3689 Analysis Report Overview CVE-2022-3689 is an SQL injection vulnerability found in a specific WordPress plugin, which allows an attacker to exploit security vulnerabilities in web applications to insert malicious SQL code into the database. This can lead to serious security issues su...