PT-2026-61959

HCL IEM was affected with X-Content-Type-Options Header Missing. It may enable attackers to perform SSL stripping or man-in-the-middle attacks and intercept sensitive data...

CVE-2026-60406: Improper Privilege Management

Vulnerability in the TimesTen In-Memory Database product of Oracle TimesTen In-Memory Database component: Kubernetes Operator. The supported version that is affected is 26.1.1.1.0. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where TimesTen...

CVE-2026-60891: Exposure of Sensitive Information to an Unauthorized Actor

Vulnerability in the Oracle Work in Process product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Work in Process...

CVE-2026-46681: Improperly Controlled Modification of Object Prototype Attributes

@nevware21/ts-utils is a comprehensive TypeScript/JavaScript utility library. Prior to version 0.14.0, the copyProps function in lib/src/object/copy.ts uses for...in to iterate over source object properties without an Object.hasOwnProperty check, and does not filter dangerous keys proto,...

PT-2026-61939

Name of the Vulnerable Software and Affected Versions libssh affected versions not specified Description Incorrect AES-GCM finalization checks in builds using the OpenSSL backend can remove integrity protection. This allows an in-path attacker to modify plaintext during transmission without...

PT-2026-62156

Name of the Vulnerable Software and Affected Versions Oracle Enterprise Manager Base Platform version 13.5 Oracle Enterprise Manager Base Platform version 24.1 Description An issue exists in the Enterprise Config Management component of the Oracle Enterprise Manager Base Platform. A low privilege...

CVE-2026-62451: Improper Access Control

Vulnerability in the Oracle Work in Process product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.14-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Work in Proces...

CVE-2026-60401: Improper Access Control

Vulnerability in the TimesTen In-Memory Database product of Oracle TimesTen In-Memory Database component: Kubernetes Operator. The supported version that is affected is 26.1.1.1.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where TimesTen...

PT-2026-62842

Name of the Vulnerable Software and Affected Versions Oracle Work in Process versions 12.2.3 through 12.2.15 Description An issue exists in the Internal Operations component of the Oracle Work in Process product within Oracle E-Business Suite. A low privileged attacker with network access via HTT...

CVE-2026-16317: Improper Validation of Integrity Check Value

Missing validation of the outer contenttype byte on TLS 1.3 encrypted records in s2n-tls allows an active man-in-the-middle to silently discard individual application data records without either endpoint detecting the modification. RFC 8446 Section 5.2 requires that the outer contenttype of all...

CVE-2026-56586: Undefined Security Weakness

HCL IEM was affected with X-Content-Type-Options Header Missing. It may enable attackers to perform SSL stripping or man-in-the-middle attacks and intercept sensitive data...

PT-2026-67410

Name of the Vulnerable Software and Affected Versions Grav CMS versions 2.0.7 through 2.0.10 Description Insufficient validation of fully-qualified static method calls Class::method in blueprint dynamic-field directives occurs because the Blueprint::isSafeDynamicCall function only applies its...

CVE-2026-59847: Incorrect Check of Function Return Value

A flaw was found in libssh. Incorrect AES-GCM finalization checks in builds using the OpenSSL backend can effectively remove integrity protection, allowing an in-path attacker to modify plaintext on the wire without detection...

CVE-2026-60404: Uncontrolled Resource Consumption

Vulnerability in the TimesTen In-Memory Database product of Oracle TimesTen In-Memory Database component: Kubernetes Operator. The supported version that is affected is 26.1.1.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise TimesTen...

PT-2026-63236

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Work in Process versions 12.2.5 through 12.2.15 Description A flaw in the Internal Operations component allows a low privileged attacker with network access via HTTP to compromise the system. Successful...

PT-2026-62841

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Work in Process versions 12.2.3 through 12.2.15 Description A flaw in the Internal Operations component allows a low privileged attacker with network access via HTTP to compromise the system. Exploitation require...

PT-2026-63176

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Work in Process versions 12.2.14 through 12.2.15 Description An issue exists in the Internal Operations component of the Oracle Work in Process product. A low privileged attacker with network access via HTTP can...

PT-2026-62458

Name of the Vulnerable Software and Affected Versions Oracle Weblogic Server Proxy Plug-in version 12.2.1.4.0 Oracle Weblogic Server Proxy Plug-in version 14.1.2.0.0 Description An unauthenticated attacker with network access via HTTP can compromise the Oracle Weblogic Server Proxy Plug-in. This...

CVE-2026-60403: Uncontrolled Resource Consumption

Vulnerability in the TimesTen In-Memory Database product of Oracle TimesTen In-Memory Database component: Kubernetes Operator. The supported version that is affected is 26.1.1.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise TimesTen...

PT-2026-63088

Vulnerability in the PeopleSoft In-Memory Project Discovery product of Oracle PeopleSoft component: Project Discovery. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft In-Memory...