CVE-2026-93595

ArcadeDB before 26.9.1 contains an access control bypass vulnerability in the querydatabase tool exposed through the AI chat endpoints. The tool executes queries without binding the authenticated principal to DatabaseContext, causing per-type and per-bucket ACL checks to silently no-op and allowi...

EUVD-2026-82890

ArcadeDB before 26.9.1 contains an access control bypass vulnerability in the querydatabase tool exposed through the AI chat endpoints. The tool executes queries without binding the authenticated principal to DatabaseContext, causing per-type and per-bucket ACL checks to silently no-op and allowi...

CVE-2024-27123

A cross-site scripting XSS vulnerability has been reported to affect QcalAgent. The local attackers can then exploit the vulnerability to bypass security mechanisms or read application data. We have already fixed the vulnerability in the following version: QcalAgent 1.1.9 and later...

CVE-2024-27123

CVE-2024-27123 is a cross-site scripting (XSS) vulnerability in QcalAgent , a QNAP component. Local attackers with active user interaction can exploit it to bypass security mechanisms or read application data , resulting in high confidentiality impact and low integrity impact on the vulnerable sy...

CVE-2024-27123 QcalAgent

A cross-site scripting XSS vulnerability has been reported to affect QcalAgent. The local attackers can then exploit the vulnerability to bypass security mechanisms or read application data. We have already fixed the vulnerability in the following version: QcalAgent 1.1.9 and later...

CVE-2024-27123: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability has been reported to affect QcalAgent. The local attackers can then exploit the vulnerability to bypass security mechanisms or read application data. We have already fixed the vulnerability in the following version: QcalAgent 1.1.9 and later...

CVE-2026-87275

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.16. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle ...

CVE-2026-87275

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.16. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle ...

CVE-2026-83346

Vulnerability in the Oracle Fusion Middleware Control product of Oracle Fusion Middleware component: Framework. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

CVE-2026-83251

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Forge. The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracl...

EUVD-2026-79927

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.16. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle ...

CVE-2026-87275

Oracle VM VirtualBox (Oracle Virtualization), component Core , version 7.2.16 is affected by a vulnerability rated CVSS 3.1 4.6 (Medium) . A high-privileged local attacker with logon to the infrastructure can exploit it with low complexity, resulting in unauthorized read access to a subset of Vir...

CVE-2026-87275

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.16. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle ...

CVE-2026-87169

Oracle Contract Lifecycle Management for Public Sector (a module of Oracle E-Business Suite) has a vulnerability in the Wage Determination Online component affecting versions 12.2.3 through 12.2.15 . The flaw is easily exploitable by an unauthenticated attacker with network access via HTTP , thou...

CVE-2026-83431

Oracle Product Workbench (component: WebUI ) in Oracle E-Business Suite versions 12.2.3 through 12.2.15 is affected by a medium-severity vulnerability (CVSS 3.1: 5.4 ). A low-privileged attacker with network access via HTTP can exploit the flaw, but user interaction from a third party is required...

CVE-2026-83419

Oracle Communications Cloud Native Core Security Edge Protection Proxy (SEPP) in versions 26.1.200 and 25.2.201 contains a vulnerability that allows a low-privileged attacker with network access via HTTP to compromise the product. Successful exploitation results in unauthorized read access to a s...

EUVD-2026-79603

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Forge. The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracl...

EUVD-2026-79600

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Forge. The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2026-83230

This vulnerability affects Oracle Siebel CRM (component: Siebel Management Console ) in supported versions 17.0 through 26.7 . An easily exploitable, low-privileged attacker with network access via HTTP can compromise the Siebel CRM Deployment component. Successful exploitation results in unautho...

CVE-2026-83077

CVE-2026-83077 affects the Siebel Cloud Manager component of Oracle Siebel CRM Cloud Applications , versions 22.3 through 26.7 . The vulnerability is exploitable over network access via HTTP by a low-privileged attacker without user interaction. The scope is changed , meaning attacks originating ...