Lucene search
+L

70 matches found

NVD
NVD
added 2026/07/21 10:18 p.m.4 views

CVE-2026-60778

Vulnerability in the Oracle Payments product of Oracle E-Business Suite component: File Transmission. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Payments. Successful...

8.1CVSS0.00337EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2026/07/01 12:0 a.m.10 views

The vulnerability of the File Transmission component in the Oracle Payments payment module of the Oracle E-Business Suite allows a perpetrator to gain full control over the application.

The vulnerability of the File Transmission component in the Oracle Payments module of the Oracle E-Business Suite lies in the insecure management of privileges. Exploiting this vulnerability could allow a malicious actor to gain full control over the application through the HTTP network protocol...

10CVSS5.8AI score0.13309EPSS
SaveExploits2References6Affected Software1
VulnCheck KEV
VulnCheck KEV
added 2026/06/29 12:0 a.m.30 views

VulnCheck KEV: CVE-2026-46817

Vulnerability in the Oracle Payments product of Oracle E-Business Suite component: File Transmission. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Payments. Successful...

9.8CVSS5.8AI score0.13309EPSS
SaveIn wildExploits2References8
OSV
OSV
added 2026/06/12 8:16 p.m.14 views

DEBIAN-CVE-2026-54055

Kitty is a cross-platform GPU based terminal. In versions prior to 0.47.2, a local privilege escalation vulnerability exists in kitty's file transmission protocol where a child process running in the terminal can write to arbitrary files on the filesystem by exploiting a TOCTOU...

5CVSS5.5AI score0.00072EPSS
SaveExploits0References1
OSV
OSV
added 2026/06/12 8:16 p.m.13 views

UBUNTU-CVE-2026-54055

Kitty is a cross-platform GPU based terminal. In versions prior to 0.47.2, a local privilege escalation vulnerability exists in kitty's file transmission protocol where a child process running in the terminal can write to arbitrary files on the filesystem by exploiting a TOCTOU...

5CVSS5.5AI score0.00072EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2026/06/12 8:3 p.m.6 views

CVE-2026-54055 Kitty has an Arbitrary File Write via Symlink Race Condition in File Transmission Protocol

Kitty is a cross-platform GPU based terminal. In versions prior to 0.47.2, a local privilege escalation vulnerability exists in kitty's file transmission protocol where a child process running in the terminal can write to arbitrary files on the filesystem by exploiting a TOCTOU...

5CVSS5.5AI score0.00072EPSS
SaveExploits0References1
CVE
CVE
added 2026/06/12 8:3 p.m.38 views

CVE-2026-54055

Kitty (cross‑platform GPU terminal) contains a local privilege escalation vulnerability in its file transmission protocol prior to 0.47.2. A TOCTOU race between symlink validation and file creation allows a child process in the terminal to cause an attack to write to arbitrary files because os.op...

5CVSS5.5AI score0.00072EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2026/06/12 8:3 p.m.35 views

CVE-2026-54055 Kitty has an Arbitrary File Write via Symlink Race Condition in File Transmission Protocol

Kitty is a cross-platform GPU based terminal. In versions prior to 0.47.2, a local privilege escalation vulnerability exists in kitty's file transmission protocol where a child process running in the terminal can write to arbitrary files on the filesystem by exploiting a TOCTOU...

5CVSS0.00072EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/06/12 8:3 p.m.12 views

EUVD-2026-36556

Kitty is a cross-platform GPU based terminal. In versions prior to 0.47.2, a local privilege escalation vulnerability exists in kitty's file transmission protocol where a child process running in the terminal can write to arbitrary files on the filesystem by exploiting a TOCTOU...

5CVSS5.5AI score0.00072EPSS
SaveExploits0References1
AlpineLinux
AlpineLinux
added 2026/06/12 8:3 p.m.12 views

CVE-2026-54055

Kitty is a cross-platform GPU based terminal. In versions prior to 0.47.2, a local privilege escalation vulnerability exists in kitty's file transmission protocol where a child process running in the terminal can write to arbitrary files on the filesystem by exploiting a TOCTOU...

5CVSS5.6AI score0.00072EPSS
SaveExploits0References1
OSV
OSV
added 2026/06/12 8:3 p.m.7 views

CVE-2026-54055 Kitty has an Arbitrary File Write via Symlink Race Condition in File Transmission Protocol

Kitty is a cross-platform GPU based terminal. In versions prior to 0.47.2, a local privilege escalation vulnerability exists in kitty's file transmission protocol where a child process running in the terminal can write to arbitrary files on the filesystem by exploiting a TOCTOU...

5CVSS6AI score0.00072EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/06/12 12:0 a.m.22 views

PT-2026-48969

Name of the Vulnerable Software and Affected Versions Kitty versions prior to 0.47.2 Description A local privilege escalation exists in the file transmission protocol. A child process running in the terminal can write to arbitrary files on the filesystem by exploiting a TOCTOU...

5CVSS5.4AI score0.00072EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2026/06/05 7:15 p.m.11 views

CVE-2026-46818

Vulnerability in the Oracle Payments product of Oracle E-Business Suite component: File Transmission. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Payments. Successful...

7.4CVSS5.5AI score0.00261EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/06/05 7:15 p.m.13 views

CVE-2026-46817

Vulnerability in the Oracle Payments product of Oracle E-Business Suite component: File Transmission. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Payments. Successful...

9.8CVSS5.5AI score0.13309EPSS
SaveExploits2References1
NVD
NVD
added 2026/05/28 9:16 p.m.20 views

CVE-2026-46817

Vulnerability in the Oracle Payments product of Oracle E-Business Suite component: File Transmission. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Payments. Successful...

9.8CVSS0.13309EPSS
SaveExploits2References2
NVD
NVD
added 2026/05/28 9:16 p.m.79 views

CVE-2026-46818

Vulnerability in the Oracle Payments product of Oracle E-Business Suite component: File Transmission. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Payments. Successful...

7.4CVSS0.00261EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/05/28 8:17 p.m.9 views

CVE-2026-46818

Vulnerability in the Oracle Payments product of Oracle E-Business Suite component: File Transmission. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Payments. Successful...

7.4CVSS5.8AI score0.00261EPSS
SaveExploits0References2Affected Software1
EUVD
EUVD
added 2026/05/28 8:17 p.m.15 views

EUVD-2026-33041

Vulnerability in the Oracle Payments product of Oracle E-Business Suite component: File Transmission. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Payments. Successful...

7.4CVSS5.8AI score0.00261EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/05/28 8:17 p.m.10 views

CVE-2026-46817

Vulnerability in the Oracle Payments product of Oracle E-Business Suite component: File Transmission. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Payments. Successful...

9.8CVSS5.8AI score0.13309EPSS
SaveExploits2References2Affected Software1
Positive Technologies
Positive Technologies
added 2026/05/28 12:0 a.m.19 views

PT-2026-44514

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Payments versions 12.2.3 through 12.2.15 Description An issue exists in the File Transmission component of Oracle Payments. An unauthenticated attacker with network access via HTTPS can compromise the system...

7.4CVSS5.8AI score0.00261EPSS
SaveExploits0References3
Rows per page
Query Builder