9621 matches found
CVE-2026-60711
Summary: CVE-2026-60711 affects Oracle Siebel CRM Cloud Applications (Siebel Cloud Manager) with affected versions 22.3–26.5. The issue allows a low-privilege attacker over a network via HTTP to compromise the product, potentially taking over Siebel CRM Cloud Applications; impacts include confide...
CVE-2026-60663
...
CVE-2026-60363
CVE-2026-60363 affects Oracle HTTP Server (Apache Plugin) in Oracle Fusion Middleware. Affected: 12.2.1.4.0 and 14.1.2.0.0. The flaw allows unauthenticated, network-based HTTP access that can lead to takeover of Oracle HTTP Server (CVSS 3.1 base score 9.8). Connected sources confirm vulnerable co...
CVE-2026-47013
...
MINI-5G5H-3CCC-6RVQ
Bulletin has no description...
MINI-W2Q7-47XR-F7V5
Bulletin has no description...
MINI-W9XM-99W5-JGC3
Bulletin has no description...
PT-2026-63301
Name of the Vulnerable Software and Affected Versions Gitea version 1.25.5 Description An insufficient authorization issue exists in the LFS server where the system uses the UserID embedded in an LFS JWT to make cross-repository authorization decisions via the LFSObjectAccessible function. When a...
Ruoyi-Scan
Ruoyi-Scan — RuoYi-specific vulnerability scanning tool 2...
PT-2026-61466
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the dma map resource function where a sanity check using pfn valid incorrectly identifies certain Memory-Mapped I/O MMIO addresses as RAM. On ARM64 systems using...
MINI-3MXW-VPW8-2P4G
Bulletin has no description...
MINI-F7J7-X33J-PR56
Bulletin has no description...
CVE-2026-13713
creationtimestamp| type| source ---|---|--- 2026-07-17 01:13:59+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mqsl4r6v742u...
MINI-7W27-9PHV-74J6
Bulletin has no description...
MINI-HGJ3-QVP6-8PQG
Bulletin has no description...
MINI-55HP-3W67-PXVW
Bulletin has no description...
CVE-2026-55954
Authentication Bypass by Spoofing vulnerability in ueberauth ueberauthapple allows account takeover via unvalidated ID token claims. The Ueberauth.Strategy.Apple.Token.payload/2 function verifies the JWT signature of the callback idtoken against Apple's JWKS but does not validate any registered...
pip has an interpretation conflict due to handling both concatenated tar and ZIP files as ZIP files
pip handles concatenated tar and ZIP files as ZIP files regardless of filename or whether a file is both a tar and ZIP file. This behavior could result in confusing installation behavior, such as installing "incorrect" files according to the filename of the archive. New behavior only proceeds wit...
PYSEC-2026-2875 pip has an interpretation conflict due to handling both concatenated tar and ZIP files as ZIP files
pip handles concatenated tar and ZIP files as ZIP files regardless of filename or whether a file is both a tar and ZIP file. This behavior could result in confusing installation behavior, such as installing "incorrect" files according to the filename of the archive. New behavior only proceeds wit...