Siebel Approval Manager Data Compromise

The vulnerability of the Siebel Approval Manager component, a tool for configuring, customizing, and integrating CRM systems, is related to insecure privilege management. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...

Oracle Retail Integration Bus RIB Kernal Full Control

The vulnerability of the RIB Kernal component in the XML-based asynchronous messaging integration platform of Oracle Retail Integration Bus is related to improper code generation management. Exploiting this vulnerability can allow an attacker to gain full control over the application using the HT...

Bill Issues Component Full Control

The vulnerability of the Bill Issues component in the Oracle Materials Management module, which handles material specifications, product composition, and technological processes, is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain full contr...

CVE-2026-62750

Partial string comparison in Windows HTTP Protocol Stack allows an unauthorized attacker to perform tampering over an adjacent network...

EUVD-2026-56372

Partial string comparison in Windows HTTP Protocol Stack allows an unauthorized attacker to perform tampering over an adjacent network...

CVE-2026-62750

CVE-2026-62750 affects Windows HTTP Protocol Stack (http.sys). A partial string comparison vulnerability in the stack enables an unauthenticated attacker on an adjacent network to perform tampering. The CVSS vector (AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N) indicates adjacent access with no privileges...

CVE-2026-62750 Windows HTTP Protocol Stack Tampering Vulnerability

...

CVE-2026-62750 Windows HTTP Protocol Stack Tampering Vulnerability

...

Windows HTTP Protocol Stack Tampering Vulnerability

Partial string comparison in Windows HTTP Protocol Stack allows an unauthorized attacker to perform tampering over an adjacent network...

PT-2026-70510

Name of the Vulnerable Software and Affected Versions Windows HTTP Protocol Stack affected versions not specified Description A partial string comparison issue in the Windows HTTP Protocol Stack allows an unauthorized attacker to perform tampering over an adjacent network, which can affect the...

CVE-2026-62750: Partial String Comparison

Partial string comparison in Windows HTTP Protocol Stack allows an unauthorized attacker to perform tampering over an adjacent network...

Malicious code in mangomind-agent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6512bd1cea27977e679186d569d524555fdf0ed5ea9e4b965aa640b1ae8326cb src/index.js opens a persistent WebSocket to a hardcoded default relay at wss://relay.mangomindbd.com and dispatches on message types received from...

org.apache.httpcomponents.core5/httpcore5-h2: Apache HttpComponents Core: Denial of Service via oversized HTTP/2 HPACK header blocks

A flaw was found in Apache HttpComponents Core. This vulnerability, located in the HTTP/2 HPACK decoder, allows a remote attacker to cause a denial of service. By sending oversized compressed header blocks, an attacker can exhaust memory resources before the system's configured header list size...

Oracle WebCenter Content Full Control

The vulnerability of the Content Server component of the Oracle WebCenter Content user interaction platform lies in the lack of authentication for a critical function. Exploiting this vulnerability could allow an attacker to gain full control over the application using the HTTP network protocol...

CVE-2026-65325 Apache Traffic Server: HTTP/2 multiplexed origin sessions are reused without certificate re-verification

Apache Traffic Server reuses multiplexed HTTP/2 origin connections without verifying the server certificate covers the new request hostname. This issue affects Apache Traffic Server: from 9.0.0 through 9.2.14, from 10.0.0 through 10.1.3. Users are recommended to upgrade to version 9.2.15 or 10.1....

CVE-2026-58150

Summary: Apache Traffic Server is vulnerable to HTTP/2 downgrade request smuggling because it does not reject Transfer-Encoding in HTTP/2 requests. Affected versions: 8.0.0–8.1.9, 9.0.0–9.2.14, 10.0.0–10.1.3. Impact: Verified issue exists; CVSS metrics indicate HIGH severity with network attack v...

PT-2026-65435

Name of the Vulnerable Software and Affected Versions cowlib versions 2.0.0 through 2.18.x Description An unauthenticated remote HTTP/2 or HTTP/3 peer can cause a denial of service by exhausting memory on a server or client. The issue exists in the HPACK and QPACK prefixed-integer decoder cow hpa...

Core Oracle WebLogic Server Privilege Escalation

Уязвимость компонента Core сервера приложений Oracle WebLogic Server связана с недостатками процедуры аутентификации. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, получить полный контроль над приложением с использованием сетевого HTTP-протокола...

Tenable Security Center Multiple Vulnerabilities (TNS-2026-19)

According to its self-reported version, the Tenable Security Center running on the remote host is between 6.6.0 and 6.8.0. It is, therefore, affected by multiple vulnerabilities as referenced in the TNS-2026-19 advisory. - Tenable Security Center is affected by a SQL injection vulnerability...

CVE-2026-56819 Netty: HTTP/2 decompression leaks ByteBuf reference count when the decompressor channel is already closed (Direct memory leak / OOM DoS)

Netty is a network application framework for development of protocol servers and clients. In versions 4.2.0.Final through 4.2.15.Final and 4.1.0.Final through 4.1.135.Final, a remote unauthenticated peer can leak one direct ByteBuf per HTTP/2 DATA frame in applications that enable HTTP/2 content...