Lucene search
+L

68482 matches found

Positive Technologies
Positive Technologies
added 2026/08/18 12:00 a.m.12 views

PT-2026-77456

Name of the Vulnerable Software and Affected Versions Oracle Web Services Manager version 12.2.1.4.0 Oracle Web Services Manager version 14.1.2.0.0 Description A flaw in the Web Services Security component of Oracle Fusion Middleware allows a low privileged attacker with network access via HTTP t...

9.6CVSS5.2AI score0.00344EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/08/18 12:00 a.m.12 views

PT-2026-78022

Name of the Vulnerable Software and Affected Versions Oracle Commerce Guided Search / Oracle Commerce Experience Manager version 11.4.0 Description An issue exists in the Endeca Application Controller component that allows an unauthenticated attacker with network access via HTTP to compromise the...

6.1CVSS5.4AI score0.00172EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/08/18 12:00 a.m.12 views

PT-2026-77587

Name of the Vulnerable Software and Affected Versions Oracle Hyperion Infrastructure Technology version 11.2.25.0.000 Description An issue exists in the Installation and Configuration component that allows an unauthenticated attacker with network access via HTTP to compromise the system. Successf...

7.5CVSS5.9AI score0.00414EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/08/18 12:00 a.m.15 views

PT-2026-78198

Vulnerability in the Helidon product of Oracle Fusion Middleware component: Imperative Web Server. The supported version that is affected is 3.2.19. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this...

5.9CVSS5.2AI score0.00261EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/08/18 12:00 a.m.10 views

PT-2026-77951

Name of the Vulnerable Software and Affected Versions Oracle Hyperion Financial Management version 11.2.25.0.000 Description A security flaw in the Security component allows a low-privileged attacker with network access via HTTP to compromise the system. Exploitation requires human interaction fr...

7.6CVSS5.2AI score0.00254EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/08/18 12:00 a.m.11 views

PT-2026-77046

Unauthenticated Sensitive Data Exposure in Duitku Payment Gateway = 2.11.14 versions...

7.5CVSS5.2AI score0.00303EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/08/18 12:00 a.m.15 views

PT-2026-77166

CodeWhale versions before 0.8.64 contain an environment variable exposure vulnerability in the js execution tool that fails to scrub parent process environment variables before spawning Node.js. Attackers can craft malicious JavaScript code executed by the tool to read process.env and leak API...

8.7CVSS5.7AI score0.00504EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/08/18 12:00 a.m.11 views

PT-2026-77446

Name of the Vulnerable Software and Affected Versions Oracle WebCenter Content version 14.1.2.0.0 Oracle WebCenter Content version 12.2.1.4.0 Description A flaw in the Content Server component of Oracle Fusion Middleware allows a low privileged attacker with network access via HTTP to compromise...

8.7CVSS5.1AI score0.00326EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/08/18 12:00 a.m.12 views

PT-2026-77767

Vulnerability in the Oracle Warehouse Management product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Warehouse...

7.5CVSS5.2AI score0.00414EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/08/18 12:00 a.m.9 views

PT-2026-78144

Name of the Vulnerable Software and Affected Versions Oracle Helidon version 3.2.18 Description An issue in the Imperative Web Server component of Oracle Fusion Middleware allows an unauthenticated attacker with network access via HTTP to compromise the system. This can lead to unauthorized acces...

7.5CVSS5.2AI score0.00396EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/08/18 12:00 a.m.10 views

PT-2026-77912

Name of the Vulnerable Software and Affected Versions Oracle Hyperion Financial Management version 11.2.25.0.000 Description A security flaw in the Security component allows an unauthenticated attacker with network access via TLS to compromise the system. Successful exploitation can lead to...

10CVSS5.2AI score0.00425EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/08/18 12:00 a.m.6 views

PT-2026-78002

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Experience Manager. The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

6.1CVSS5.2AI score0.00179EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/08/18 12:00 a.m.6 views

PT-2026-78065

Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain component: CAX Client. The supported version that is affected is 3.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Agile PLM MCAD Connector...

5.3CVSS5.1AI score0.00306EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/08/18 12:00 a.m.10 views

PT-2026-77188

Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to 1.0.8.4, Vvveb backend comment operations allow a low-privileged Author to manage comments under another Author's posts. The admin/controller/content/comment.php and...

7.6CVSS5.4AI score0.00298EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/08/18 12:00 a.m.8 views

PT-2026-77489

Name of the Vulnerable Software and Affected Versions Oracle WebCenter Portal version 12.2.1.4.0 Oracle WebCenter Portal version 14.1.2.0.0 Description A flaw in the Runtime Tools component allows a low privileged attacker with network access via HTTP to compromise the system. Successful...

8.7CVSS5.2AI score0.00326EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/08/18 12:00 a.m.11 views

PT-2026-78187

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware Helidon version 4.5.0 Description A flaw in the Imperative Web Server component allows an unauthenticated attacker with network access via HTTP to compromise the system. Exploitation requires human interaction and can...

6.1CVSS5.2AI score0.00231EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/08/18 12:00 a.m.11 views

Linux Distros Unpatched Vulnerability : CVE-2026-68517

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Glances is an open-source system cross-platform monitoring tool. Prior to 4.5.6, the corsorigins guard in glances/outputs/glancesrestfulapi.py uses exact list...

6.5CVSS5.5AI score0.00256EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/08/18 12:00 a.m.13 views

PT-2026-78207

Vulnerability in the Helidon product of Oracle Fusion Middleware component: Imperative Web Server. The supported version that is affected is 4.5.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this...

7.3CVSS5.2AI score0.00294EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/08/18 12:00 a.m.11 views

Linux Distros Unpatched Vulnerability : CVE-2026-72049

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ieee802154: admin-gate legacy LLSEC dump operations In net/ieee802154/netlink.c, the legacy IEEE802154NL family ops table builds the LLSEC dump entries...

7.1CVSS5.9AI score0.0016EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/08/18 12:00 a.m.9 views

PT-2026-77291

An issue in SJRC F11 SJ-GPS-PRO firmware build 2019-09-17 allows a remote attacker to obtain sensitive information via the inetd service...

5.3AI score0.00222EPSS
SaveExploits1References2
Rows per page
Query Builder