Lucene search
+L

46027 matches found

Cvelist
Cvelist
•added 2026/07/21 4:03 p.m.•62 views

CVE-2026-44907

A denial of service vulnerability could be triggered by sending specially crafted HTTP requests to server function endpoints, this could lead to excessive CPU usage; affecting the following packages: react-server-dom-webpack, react-server-dom-parcel, react-server-dom-turbopack versions 19.0.0...

7.5CVSS0.006EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/07/21 4:03 p.m.•18 views

CVE-2026-44907

A denial of service vulnerability could be triggered by sending specially crafted HTTP requests to server function endpoints, this could lead to excessive CPU usage; affecting the following packages: react-server-dom-webpack, react-server-dom-parcel, react-server-dom-turbopack versions 19.0.0...

7.5CVSS5.8AI score0.006EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
•added 2026/07/21 1:17 p.m.•17 views

SUSE CVE-2026-16208

A flaw has been found in django-tastypie up to 0.15.1. The affected element is the function CacheThrottle/CacheDBThrottle of the file tastypie/throttle.py. This manipulation causes race condition. The attack may be initiated remotely. The complexity of an attack is rather high. The exploitability...

5CVSS4.7AI score0.00264EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/07/21 1:08 p.m.•18 views

SUSE CVE-2026-50185

RustCrypto CMOV provides conditional move CPU intrinsics which are guaranteed on major platforms to execute in constant-time and not be rewritten as branches by the compiler. From 0.1.1 until 0.5.4, the aarch64 implementations of Cmov and CmovEq in cmov/src/backends/aarch64.rs assume high bits ar...

2CVSS6.2AI score0.00161EPSS
SaveExploits1References3
SUSE CVE
SUSE CVE
•added 2026/07/21 12:59 p.m.•19 views

SUSE CVE-2026-64123

In the Linux kernel, the following vulnerability has been resolved: net: hsr: defer node table free until after RCU readers HSR node-list and node-status generic-netlink operations run under rcureadlock. They walk hsr-nodedb through hsrgetnextnode and hsrgetnodedata, but RTMDELLINK teardown remov...

7.8CVSS6.4AI score0.00126EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/07/21 12:00 a.m.•28 views

PT-2026-63149

Vulnerability in the Oracle EDI Gateway product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle EDI Gateway executes...

1.9CVSS6.9AI score0.00139EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/07/21 12:00 a.m.•22 views

PT-2026-62862

Vulnerability in the Oracle Shipping Execution product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.12-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Shipping...

7.2CVSS7.2AI score0.00486EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/07/21 12:00 a.m.•21 views

PT-2026-62830

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Order Management versions 12.2.3 through 12.2.15 Description A flaw exists in the Product Diagnostic Tools component of Oracle Order Management. A high privileged attacker with network access via HTTP can exploit...

6.8CVSS7.1AI score0.00396EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/21 12:00 a.m.•6 views

CVE-2026-46954: Improper Access Control

Vulnerability in the Oracle Human Resources product of Oracle E-Business Suite component: Data Removal Tool. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Human Resources...

7.2CVSS5.7AI score0.00486EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/21 12:00 a.m.•8 views

CVE-2026-60396: Missing Authentication for Critical Function

Vulnerability in Oracle GoldenGate component: Distribution Server executable. Supported versions that are affected are 21.3-21.21 and 23.4-23.26.1. Easily exploitable vulnerability allows high privileged attacker with network access via HTTPS to compromise Oracle GoldenGate. Successful attacks of...

7.2CVSS5.7AI score0.00486EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/21 12:00 a.m.•5 views

CVE-2026-60938: Improper Privilege Management

Vulnerability in the Oracle Labor Distribution product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Labor...

4.1CVSS5.7AI score0.00132EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/21 12:00 a.m.•7 views

CVE-2026-61079: Improper Input Validation

Vulnerability in Oracle GoldenGate component: Libraries. Supported versions that are affected are 19.1.0.0.0-19.30.0.0, 21.3-21.21 and 23.4-23.26.2. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle GoldenGate executes to compromise...

5.8CVSS5.6AI score0.00109EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/07/21 12:00 a.m.•23 views

PT-2026-62954

Name of the Vulnerable Software and Affected Versions Oracle Access Manager versions 12.2.1.4.0 Oracle Access Manager versions 14.1.2.1.0 Description An issue exists in the Authentication Engine component of Oracle Access Manager. An unauthenticated attacker with network access via HTTP can explo...

9.8CVSS7.1AI score0.00508EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/07/21 12:00 a.m.•23 views

PT-2026-62378

Name of the Vulnerable Software and Affected Versions Oracle Coherence versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0 Description An issue in the Core component of Oracle Coherence allows an unauthenticated attacker with network access via TCP to compromise the system. Successful...

9.8CVSS7.1AI score0.00508EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/07/21 12:00 a.m.•31 views

PT-2026-62605

Name of the Vulnerable Software and Affected Versions Oracle WebCenter Portal version 12.2.1.4.0 Oracle WebCenter Portal version 14.1.2.0.0 Description A flaw in the Runtime Tools component of Oracle Fusion Middleware allows a low privileged attacker with network access via HTTP to compromise the...

8.8CVSS7.1AI score0.00432EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/07/21 12:00 a.m.•30 views

PT-2026-63056

Name of the Vulnerable Software and Affected Versions Oracle Agile PLM version 9.3.6 Description An issue in the Security component of the Oracle Agile PLM product allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful exploitation can lead to...

9.1CVSS7.2AI score0.00425EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/07/21 12:00 a.m.•32 views

PT-2026-62909

Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware component: Rest Service. The supported version that is affected is 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Data Integrator...

9.8CVSS7.3AI score0.00508EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/07/21 12:00 a.m.•19 views

PT-2026-62620

Vulnerability in the Oracle Enterprise Command Center Framework product of Oracle E-Business Suite component: Core. The supported version that is affected is V16. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Enterprise Command...

7.6CVSS7.1AI score0.00337EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/07/21 12:00 a.m.•50 views

PT-2026-62488

Name of the Vulnerable Software and Affected Versions Oracle TimesTen In-Memory Database version 26.1.1.1.0 Description A flaw in the Kubernetes Operator component allows a high-privileged attacker with access to the infrastructure where the database executes to compromise the system. Successful...

6.7CVSS7.2AI score0.00181EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/07/21 12:00 a.m.•25 views

PT-2026-63226

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Applications Framework versions 12.2.8 through 12.2.15 Description A flaw in the Web Utilities component of the Oracle Applications Framework allows a high privileged attacker with network access via HTTP to...

9.1CVSS7AI score0.00486EPSS
SaveExploits0References3
Rows per page
Query Builder