CVE-2025-14603: Undefined Security Weakness

The application component processes user-supplied parameters insecurely, passing them into SQL queries. This can enable blind SQL injection, potentially exposing database contents or causing the application to become unresponsive. Apply patch from vendor https://vsdesk.ru/ . Versions 14.0101 and...

PT-2026-78792

Name of the Vulnerable Software and Affected Versions Splunk SOAR versions prior to 8.6.0 Description A user with the Automation Engineer role can execute arbitrary Structured Query Language SQL statements against the database. This occurs during custom list retrieval within a playbook, enabling...

PT-2026-78532

Name of the Vulnerable Software and Affected Versions The product name cannot be determined versions prior to 14.0101 Description An application component insecurely processes user-supplied parameters by passing them into SQL queries. This flaw allows for blind SQL injection, a technique used to...

Oracle Database Server (August 2026 CSPU)

The versions of Oracle Database Server installed on the remote host are affected by multiple vulnerabilities as referenced in the August 2026 CSPU advisory. - Vulnerability in the Portable Clusterware component of Oracle Database Server. Supported versions that are affected are 19.3-19.32,...

PT-2026-78345

Name of the Vulnerable Software and Affected Versions Nikstore Core versions prior to 1.6 Description An unauthenticated SQL Injection exists in the software. SQL Injection is a type of vulnerability that allows an attacker to interfere with the queries that an application makes to its database,...

PT-2026-78294

Name of the Vulnerable Software and Affected Versions WP Maps versions prior to 4.9.8 Description An issue exists in an AJAX action where the software fails to perform a capability check and does not validate a nonce a unique token used to prevent replay attacks. This allows users with a Subscrib...

PT-2026-78736

Name of the Vulnerable Software and Affected Versions Splunk Enterprise versions prior to 10.4.2 Splunk Enterprise versions prior to 10.2.6 Splunk Enterprise versions prior to 10.0.9 Splunk Enterprise versions prior to 9.4.14 Description A low-privileged user without admin or power roles can...

PT-2026-80637

Impact If the replication protocol is enabled by using the primary or deprecated master role for a server instance, then the +changelog URL route can be used to read the complete database content including password hashes, and the ids and salts of tokens from devpi-tokens by using a trivially...

Oracle Linux 10 : mysql8.4 (ELSA-2026-56007)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-56007 advisory. 8.4.11-1 - Rebase to 8.4.11 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus...

Linux Distros Unpatched Vulnerability : CVE-2026-18690

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in MongoDB Server could allow an authenticated user with a limited database-scoped role to perform an action against protected system collections that...

PT-2026-78522

A vulnerability in the web-based management interface of Cisco Unified Intelligence Center could allow an authenticated, local attacker to perform a blind SQL injection attack against an affected device. This vulnerability is due to insufficient validation of user-supplied input. An attacker coul...

PT-2026-78790

Name of the Vulnerable Software and Affected Versions Splunk SOAR versions prior to 8.6.0 Description A user with the Automation Engineer role can execute arbitrary Structured Query Language SQL statements against the database. This allows for the creation, reading, updating, or deletion of all...

PT-2026-78791

Name of the Vulnerable Software and Affected Versions Splunk SOAR versions prior to 8.6.0 Description A user with the Automation Engineer role can execute arbitrary Structured Query Language SQL statements against the database via custom function results. This occurs because the system constructs...

CVE-2026-54347

creationtimestamp| type| source ---|---|--- 2026-08-18 22:35:28+00:00| published-proof-of-concept| https://github.com/froxlor/froxlor/security/advisories/GHSA-43gm-9rr3-cx7g...

CVE-2026-54348

creationtimestamp| type| source ---|---|--- 2026-08-18 22:35:25+00:00| published-proof-of-concept| https://github.com/froxlor/froxlor/security/advisories/GHSA-w27m-rmmf-g5w4 2026-08-19 13:32:06+00:00| seen| https://gist.github.com/alon710/af2c8d3762565eaa4715277e9dc15159...

CVE-2026-71102

creationtimestamp| type| source ---|---|--- 2026-08-18 22:27:11+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtfb6v5mzg25 2026-08-19 09:10:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtgf4gaap22j 2026-08-19 13:35:24+00:00| seen|...

CVE-2026-70689

creationtimestamp| type| source ---|---|--- 2026-08-18 22:20:16+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtfasjluqe2f 2026-08-19 06:00:46+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtg2jwn6li2p 2026-08-19 06:10:04+00:00| seen|...

CVE-2026-71102

Vulnerability in the Portable Clusterware component of Oracle Database Server. Supported versions that are affected are 19.3-19.32, 21.3-21.23 and 23.4.0-23.26.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Portable Clusterware...

CVE-2026-71100

Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 19.3-19.32, 21.3-21.23 and 23.4.0-23.26.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via Oracle Net to compromise RDBMS. Successful attacks of this...

CVE-2026-71062

Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 23.4.0-23.26.3. Difficult to exploit vulnerability allows low privileged attacker having Authenticated User privilege with network access via Oracle Net to compromise RDBMS. While the...