CVE-disclosures

CVE-2026-3171 与 CVE-2026-3170 – Archana M 由 Archana M 发布的官方漏洞披露。 🔹 CVE-2026-3171 产品： SourceCodester / Patrick Mvuma 患者候诊区排队管理系统 1.0 漏洞类型： 跨站脚本（CWE-79） 受影响文件： /queue.php 攻击向量： 远程 用户交互： 需要 CVSS v3.1： 3.5（AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N） 状态： 已公开披露 描述 对用户输入（firstname / lastname）的中和不当，导致跨站脚本（XSS）漏...

CVE-2025-60656

CVE-2025-60656 - 首页存储型跨站脚本（XSS）漏洞 | ---|--- 研究人员| DotAdrien 严重程度| 8.5 高危 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N 软件| Script Pag 描述 首页的“Recent Ads”（最新广告）模块存在存储型跨站脚本（XSS）漏洞。图片 URL 字段未能对双引号（"）进行过滤。攻击者可注入类似 https://google.com/image.png" 的载荷，当任何用户访问首页时便会触发。...

CVE-2015-3073

CVE-2015-3073 この脆弱性により、リモート攻撃者はAdobe Readerの脆弱なインストール環境においてAPI制限を回避することが可能です。この脆弱性を悪用するにはユーザーの操作が必要であり、標的となるユーザーが悪意のあるページにアクセスするか、悪意のあるファイルを開く必要があります。 具体的な欠陥はAFParseDateに存在します。特定のJavaScript命令を含む特別に細工されたPDFを作成することで、JavaScript APIの制限を回避することが可能です。リモート攻撃者はこの脆弱性を悪用して任意のコードを実行する可能性があります。...

CVE-2026-87137

Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion component: Access and security. The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

CVE-2026-83247

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Forge. The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle...

CVE-2026-83206

Vulnerability in the Oracle Banking Corporate Lending Process Management product of Oracle Financial Services Applications component: Base. Supported versions that are affected are 14.5.0.0.0-14.9.0.0.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTT...

CVE-2026-83190

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM component: Server Infrastructure. Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Siebel CRM Deployment executes to...

CVE-2026-83143

Vulnerability in the Siebel Apps - Life Sciences product of Oracle Siebel CRM component: eDetailing. Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel Apps - Life Sciences...

EUVD-2026-79932

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.16. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle ...

EUVD-2026-79838

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion component: Security. The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Hyperion Financial...

CVE-2026-83294

CVE-2026-83294 affects Oracle Business Intelligence Enterprise Edition (component: Platform Security ) in Oracle Analytics. Supported versions 8.2.0.0.0 , 12.2.1.4.0 , and 26.01.0.0.0 are impacted. The vulnerability is easily exploitable by an unauthenticated attacker with local logon to the infr...

CVE-2026-83253

CVE-2026-83253 affects the Endeca Application Controller component within Oracle Commerce Guided Search / Oracle Commerce Experience Manager (version 11.4.0 ). This easily exploitable vulnerability allows an unauthenticated attacker with local access to the infrastructure where the product execut...

EUVD-2026-79558

Vulnerability in the Oracle Banking Corporate Lending Process Management product of Oracle Financial Services Applications component: Base. Supported versions that are affected are 14.5.0.0.0-14.9.0.0.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTT...

CVE-2026-83185

CVE-2026-83185 affects the CRM User Management Framework component of Oracle E-Business Suite , specifically supported versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability, though user interaction is required. Successful exploitat...

EUVD-2026-79486

Vulnerability in the Applications DBA product of Oracle E-Business Suite component: ADPatch. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Applications DBA executes to compromise...

CVE-2026-83150

CVE-2026-83150 affects Oracle Application Testing Suite version 13.3.0.1 . The vulnerability allows an unauthenticated attacker with local access to the infrastructure where the suite executes to achieve full takeover of the application, impacting confidentiality, integrity, and availability. Exp...

EUVD-2026-79408

Vulnerability in the Oracle Banking Branch product of Oracle Financial Services Applications component: Reports. Supported versions that are affected are 14.5.0.0.0-14.9.0.0.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

EUVD-2026-79368

Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware component: Portlet Services. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via SOAP to compromise Oracle...

CVE-2026-83004

Oracle WebCenter Enterprise Capture (Oracle Fusion Middleware), component Client Bundle , is affected in versions 12.2.1.4.0 and 14.1.2.0.0 . This difficult-to-exploit vulnerability allows a low-privileged attacker with local logon to compromise the product, with high complexity and required user...

CVE-2026-92176

pdfforge PDF Architect App Object Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of pdfforge PDF Architect. User interaction is required to exploit this vulnerability in that the target must...