75333 matches found
CVE-2026-46954
CVE-2026-46954 affects Oracle E-Business Suite Human Resources, Data Removal Tool (versions 12.2.3–12.2.15). The vulnerability allows a high-privilege attacker with network access via HTTP to take over Oracle HR; CVSSv3.1 base score 7.2 (C/H/I/A). The provided documents do not describe the exact ...
CVE-2026-46924
CVE-2026-46924 affects Oracle Application Testing Suite (ATS) 13.3.0.1. The vulnerability allows an unauthenticated attacker with network access via TCP to compromise ATS, enabling takeover with high impact on confidentiality, integrity, and availability. The CVSS 3.1 base score is 9.8 (CRITICAL)...
CVE-2026-46941
...
CVE-2026-46924
...
CVE-2026-46941
Oracle E-Business Suite Cost Management's Cost Maintenance component is affected (CVE-2026-46941) in versions 12.2.3–12.2.15. A low-privilege attacker with network access via HTTP can compromise Oracle Cost Management, potentially taking full control (CVSS 7.5). The vulnerability details, impact ...
CVE-2026-46876
CVE-2026-46876 affects Oracle Application Testing Suite, specifically version 13.3.0.1. The vulnerability is described as easily exploitable with unauthenticated network access via Oracle Net, allowing takeover of Oracle Application Testing Suite and carrying a CVSS v3.1 base score of 9.8 (C/H/I/...
CVE-2026-46917
...
CVE-2026-46917
...
CVE-2026-35287
...
CVE-2026-35290
...
CVE-2026-34316
...
CVE-2026-21954
...
CVE-2026-21953
...
CVE-2026-21953
...
CVE-2026-47697
Shelf is a platform for tracking physical assets. Shelf is multi-tenant; data is isolated per organization workspace. Prior to version 1.20.2, several endpoints accepted entity IDs from request input and connect-ed / read / updated them without verifying the IDs belonged to the caller's...
CVE-2026-46579
creationtimestamp| type| source ---|---|--- 2026-07-21 21:12:01+00:00| seen| https://bsky.app/profile/smit-artem.bsky.social/post/3mr6pwovtyj2u 2026-08-02 14:02:28+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3ms45jn2yky22...
CVE-2026-64879
creationtimestamp| type| source ---|---|--- 2026-07-21 21:06:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6pm2rbos24 2026-07-21 23:32:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr6xsbr2z722 2026-08-13 08:46:00+00:00| seen|...
CVE-2026-16394
creationtimestamp| type| source ---|---|--- 2026-07-21 20:56:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6p2bgfsq2q 2026-07-22 04:47:20+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260722 2026-07-23 05:37:06+00:00| see...
GHSA-PGQF-926R-548M Gitea: Cross-repository label-ID enumeration oracle via unscoped DeleteIssueLabel API
Summary The API endpoint DELETE /repos/owner/repo/issues/index/labels/id loads the label by ID with a global, unscoped lookup and never verifies the label belongs to the URL's repository or its owning organization. Because the response status differs by whether the label ID exists anywhere on the...
