CVE-2026-60405: Exposure of Sensitive Information to an Unauthorized Actor

Vulnerability in the TimesTen In-Memory Database product of Oracle TimesTen In-Memory Database component: Kubernetes Operator. The supported version that is affected is 26.1.1.1.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where TimesTen...

PT-2026-62489

Name of the Vulnerable Software and Affected Versions Oracle TimesTen In-Memory Database version 26.1.1.1.0 Description A flaw in the Kubernetes Operator component allows a low-privileged attacker with access to the infrastructure where the database executes to compromise the system. This issue c...

📄 WordPress Ads by WPQuads / Quick AdSense Reloaded 2.0.87 Unauthenticated SQL Injection

WordPress Ads by WPQuads / Quick AdSense Reloaded plugin version 2.0.87 contains an unauthenticated SQL injection vulnerability. A remote attacker can inject arbitrary SQL into database queries handled by the affected component. This proof of concept exploit demonstrates the vulnerable request fl...

PT-2026-62488

Name of the Vulnerable Software and Affected Versions Oracle TimesTen In-Memory Database version 26.1.1.1.0 Description A flaw in the Kubernetes Operator component allows a high-privileged attacker with access to the infrastructure where the database executes to compromise the system. Successful...

PT-2026-62205

Name of the Vulnerable Software and Affected Versions Oracle Database Server versions 19.3 through 19.31 Oracle Database Server versions 21.3 through 21.22 Oracle Database Server versions 23.4.0 through 23.26.2 Description A flaw exists in the JDBC component of the Oracle Database Server. A high...

CVE-2026-60408: Exposure of Sensitive Information to an Unauthorized Actor

Vulnerability in the TimesTen In-Memory Database product of Oracle TimesTen In-Memory Database component: Kubernetes Operator. The supported version that is affected is 26.1.1.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise TimesTen...

CVE-2026-60407: Improper Access Control

Vulnerability in the TimesTen In-Memory Database product of Oracle TimesTen In-Memory Database component: Kubernetes Operator. The supported version that is affected is 26.1.1.1.0. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where TimesTen...

PT-2026-62104

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description Unsanitized user-supplied input in report filtering parameters is concatenated directly into SQL queries without proper escaping or parameterized queries. This...

PT-2026-62487

Name of the Vulnerable Software and Affected Versions Oracle TimesTen In-Memory Database version 26.1.1.1.0 Description A flaw in the Kubernetes Operator component allows a low-privileged attacker with access to the infrastructure where the database executes to compromise the system. This issue c...

CVE-2026-64880: Improper Neutralization of Special Elements used in an SQL Command

Unsanitized user-supplied input in report filtering parameters is concatenated directly into SQL queries without proper escaping or parameterized queries, enabling blind SQL injection and unauthorized database read access...

CVE-2026-47045: URL Redirection to Untrusted Site

Vulnerability in the JDBC component of Oracle Database Server. Supported versions that are affected are 19.3-19.31, 21.3-21.22 and 23.4.0-23.26.2. Easily exploitable vulnerability allows high privileged attacker having None privilege with network access via Oracle Net to compromise JDBC. Successf...

PT-2026-62220

Name of the Vulnerable Software and Affected Versions Oracle Database Server versions 19.3 through 19.31 Oracle Database Server versions 21.3 through 21.22 Oracle Database Server versions 23.4.0 through 23.26.2 Description A flaw in the JDBC component allows an unauthenticated attacker with netwo...

CVE-2026-47046: Uncontrolled Resource Consumption

Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 23.4.0-23.26.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via Oracle Net to compromise RDBMS. Successful attacks of this vulnerability can result in...

PT-2026-68327

Name of the Vulnerable Software and Affected Versions Gitea versions prior to 1.27.0 Description Authenticated attackers can bypass server-side request forgery SSRF protections by exploiting HTTP fetch operations in migration and OAuth avatar code paths. The issue occurs because the application...

Amazon Linux 2 : krb5, --advisory ALAS2-2026-3798 (ALAS-2026-3798)

It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3798 advisory. An integer underflow vulnerability was found in MIT krb5 in the berval2tldata function in plugins/kdb/ldap/libkdbldap/ldapprincipal2.c. The function performs an unsigned subtraction bvlen - 2 without a...

Oracle Linux 10 : perl-DBI (ELSA-2026-38513)

The remote Oracle Linux 10 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-38513 advisory. - Fix CVE-2026-9698: stack overflow and buffer overflow in DBI.xs Tenable has extracted the preceding description block directly from the Oracle Linux securit...

SUSE SLES15 Security Update : shibboleth-sp (SUSE-SU-2026:3123-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:3123-1 advisory. This update for shibboleth-sp fixes the following issue: - CVE-2025-9943: SQL injection in the 'ID' attribute of the SAML response when the...

PT-2026-61957

A vulnerability was determined in zsadmin2025 ZS-Admin up to b52e14536d59fda11e56e2536a1c32e82a38cead. The impacted element is the function OrderItem.asc/OrderItem.desc of the file /api/system/sys/dept/page of the component com.zs.sys.dept.controller.SysDeptController. This manipulation of the...

CVE-2026-47255

AgenticMail gives AI agents real email addresses and phone numbers. @agenticmail/api prior to version 0.9.32 and @agenticmail/core prior to version 0.9.10 had weakness related to validation and and binding of inactive-agent hour filtering; storage SQL identifier validation; metadata-backed...

EUVD-2026-46121

AgenticMail gives AI agents real email addresses and phone numbers. @agenticmail/api prior to version 0.9.32 and @agenticmail/core prior to version 0.9.10 had weakness related to validation and and binding of inactive-agent hour filtering; storage SQL identifier validation; metadata-backed...