43 matches found
CVE-2026-83368
CVE-2026-83368 affects the Compiler component of Oracle GraalVM for JDK , Oracle GraalVM Enterprise Edition , and Oracle GraalVM (Oracle Java SE). Affected versions include Oracle GraalVM for JDK 17 (23.0.13.1), Oracle GraalVM for JDK 21 (23.1.12.1), Oracle GraalVM Enterprise Edition (21.3.19.1),...
CVE-2026-83408
CVE-2026-83408 affects the Compiler component of Oracle GraalVM for JDK and Oracle GraalVM (part of Oracle Java SE). Affected supported versions are GraalVM for JDK 17: 23.0.13.1, GraalVM for JDK 21: 23.1.12.1, and GraalVM: 25.0.4.1. The vulnerability allows an unauthenticated attacker with netwo...
CVE-2026-87237
This vulnerability affects the Security component of Oracle Hyperion Financial Management version 11.2.26.0.000 . A low-privileged attacker with network access via HTTP can exploit it, though the attack is rated difficult to exploit (high complexity, no user interaction required). Successful expl...
EUVD-2026-79858
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion component: Security. The supported version that is affected is 11.2.26.0.000. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial...
EUVD-2026-79763
Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite component: MWA Terminal Server. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle...
EUVD-2026-79716
Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracl...
EUVD-2026-79648
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics component: BI Search. Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to...
CVE-2026-83246
CVE-2026-83246 affects the Forge component of Oracle Commerce Guided Search / Oracle Commerce Experience Manager , version 11.4.0 . The vulnerability allows an unauthenticated attacker with network access via HTTP to achieve full takeover of the product, resulting in high impact to confidentialit...
CVE-2026-83227
Oracle Siebel CRM Integration (component EAI ) contains a vulnerability affecting supported versions 17.0 through 26.7 . A low-privileged attacker with network access via HTTP can exploit this vulnerability, though it is rated as difficult to exploit . Successful exploitation results in takeover ...
EUVD-2026-79579
Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM component: EAI. Supported versions that are affected are 17.0-26.7. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel CRM Integration. Successful attacks of...
CVE-2026-83192
Oracle Siebel CRM End User (component: Open UI ) is affected by a vulnerability in supported versions 17.0 through 26.7 . The flaw allows an unauthenticated attacker with network access via HTTP to compromise the product, with a high complexity requirement (described as "difficult to exploit"). S...
EUVD-2026-61525
Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion component: Common Events. The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperio...
EUVD-2026-60035
A weakness has been identified in Azuriom CMS up to 1.2.12. This issue affects the function transferMoney of the file app/Http/Controllers/ProfileController.php of the component Money Transfer Handler. This manipulation causes time-of-check time-of-use. The attack may be initiated remotely. A hig...
EUVD-2026-45409
A vulnerability was detected in Sipeed PicoClaw up to 0.2.9. The impacted element is an unknown function of the file web/backend/middleware/accesscontrol.go of the component First Run Setup. Performing a manipulation of the argument allowedcidrs results in authentication bypass using alternate...
CVE-2026-4242 BabyChakra Pregnancy & Parenting App app.babychakra.babychakra Configuration.java credentials storage
A security flaw has been discovered in BabyChakra Pregnancy & Parenting App up to 5.4.3.0 on Android. This affects an unknown function of the file file app/babychakra/babychakra/Configuration.java of the component app.babychakra.babychakra. Performing a manipulation of the argument SEGMENTWRITEKE...
CVE-2025-15083
A vulnerability was determined in TOZED ZLT M30s up to 1.47. The affected element is an unknown function of the component UART Interface. Executing manipulation can lead to on-chip debug and test interface with improper access control. The physical device can be targeted for the attack. Attacks o...
CVE-2025-15083
TOZED ZLT M30s devices (
CVE-2025-12915
A vulnerability was found in 70mai X200 up to 20251019. This issue affects some unknown processing of the component Init Script Handler. The manipulation results in file inclusion. The attack requires a local approach. A high complexity level is associated with this attack. The exploitability is...