CVE-2026-86509

creationtimestamp| type| source ---|---|--- 2026-09-07 18:50:27+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117231257148545867 2026-09-08 01:30:26+00:00| seen| https://infosec.exchange/users/offseq/statuses/117232830106027040 2026-09-08 01:30:29+00:00| seen|...

CVE-2026-18903

A vulnerability was determined in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. This issue affects some unknown processing of the file src/main/java/com/yeqifu/sys/controller/FileController.java. This manipulation of the argument path causes path traversal. It is possible to...

CVE-2026-62445

CVE-2026-62445 affects Oracle E-Business Suite’s Oracle Order Management (component: Product Diagnostic Tools). Affected versions are 12.2.4–12.2.15. The vulnerability is exploitable over the network with a low-privilege account via HTTP and can lead to unauthorized creation, deletion, or modific...

CVE-2026-61250

...

CVE-2026-60783

...

CVE-2026-60744

...

CVE-2026-60710

The CVE-2026-60710 entry concerns Oracle EDI Gateway (Oracle E-Business Suite) in the Internal Operations component, affected in versions 12.2.3–12.2.15. The vulnerability is exploitable over a network via HTTP by a low-privileged attacker, leading to unauthorized creation, deletion, or modificat...

CVE-2026-60704

...

CVE-2026-60403

CVE-2026-60403 affects Oracle TimesTen In-Memory Database (Kubernetes Operator component) with vulnerable version 26.1.1.1.0. An attacker with network access over HTTPS and low privileges can cause the database to hang or crash (DoS). CVSS 3.1 base score 6.5 (A:H; AV:N; AC:L; PR:L). No explicit e...

CVE-2026-60286

...

CVE-2026-47021

...

PT-2026-55869

A weakness has been identified in imhamzaazam ecommerceFlask up to cb7d9e24c30a99379651b7493b32048126ef402b. The affected element is an unknown function. This manipulation causes cross-site request forgery. The attack may be initiated remotely. The exploit has been made available to the public an...

CVE-2026-35288

Technical details about CVE-2026-35288 are not publicly available in the provided documents. Monitor for updates from Oracle and CVE lists for affected products, impact and remediation once disclosed.

CVE-2026-35259

...

CVE-2026-11474

A security flaw has been discovered in Kushan2k student-management-system up to f16a4ceaddd6729c4b306ed4641cda3176c1ef2a. Affected is an unknown function of the file service/RegisterService.php of the component Registration Endpoint. Performing a manipulation of the argument stimg results in...

CVE-2026-10226

A flaw has been found in raisulislamg4 studentmanagementsystembyphp up to 310d950e09013d5133c6b9210aff9444382d16d1. Impacted is an unknown function of the file delete.php. Executing a manipulation of the argument userid/courseid/teacherid/studentid/applicationid can lead to sql injection. The...

CVE-2026-10153

A flaw has been found in westboy CicadasCMS up to 2431154dac8d0735e04f1fd2a3c3556668fc8dab. Impacted is the function Search of the file org/springframework/cache/support/AbstractCacheManager.java. This manipulation of the argument s causes cross site scripting. Remote exploitation of the attack i...

PT-2026-45138

A flaw has been found in westboy CicadasCMS up to 2431154dac8d0735e04f1fd2a3c3556668fc8dab. Impacted is the function Search of the file org/springframework/cache/support/AbstractCacheManager.java. This manipulation of the argument s causes cross site scripting. Remote exploitation of the attack i...

CVE-2026-9469

A weakness has been identified in yashpokharna2555 StudentManagementSystem cb2f558ddf8d19396de0f92abf2d224d46a0a203. The impacted element is an unknown function of the file /success.php. This manipulation of the argument User causes sql injection. It is possible to initiate the attack remotely. T...

CVE-2026-8755

A flaw has been found in fishaudio Bert-VITS2 up to 8f7fbd8c4770965225d258db548da27dc8dd934c. The affected element is the function getallmodels of the file hiyoriUI.py of the component Model Handler. This manipulation causes path traversal. The attack can be initiated remotely. The exploit has be...