3457 matches found
CVE-2026-101782
A vulnerability exists in the Oracle Diagnostics Interfaces component of the Oracle Applications Manager product within Oracle E-Business Suite (versions 12.2.3-12.2.15 ). An attacker with low privileges and network access via HTTP can exploit this easily to compromise the manager. Successful exp...
CVE-2026-101551
A vulnerability exists in the Oracle Applications Manager product of Oracle E-Business Suite , specifically affecting the Oracle Diagnostics Interfaces component. Affected versions are 12.2.3-12.2.15 . An unauthenticated attacker with network access via HTTP can easily exploit this flaw to compro...
CVE-2026-108089
UNSUPPORTED WHEN ASSIGNED Exposure of sensitive system information to an unauthorized control sphere vulnerability in Apache Cocoon. An unauthenticated user could gain access to diagnostic interfaces, including triggering of cache, exposure of verbose debug logging and profile information. This...
CVE-2026-108089
Apache Cocoon (all versions ) is vulnerable to an exposure of sensitive system information to an unauthorized control sphere. An unauthenticated user can gain access to diagnostic interfaces, which allows for triggering the cache, exposing verbose debug logging, and viewing profile information. B...
CVE-2026-108089 Apache Cocoon: Unauthenticated access to diagnostic interfaces
UNSUPPORTED WHEN ASSIGNED Exposure of sensitive system information to an unauthorized control sphere vulnerability in Apache Cocoon. An unauthenticated user could gain access to diagnostic interfaces, including triggering of cache, exposure of verbose debug logging and profile information. This...
EUVD-2026-104914
UNSUPPORTED WHEN ASSIGNED Exposure of sensitive system information to an unauthorized control sphere vulnerability in Apache Cocoon. An unauthenticated user could gain access to diagnostic interfaces, including triggering of cache, exposure of verbose debug logging and profile information. This...
PT-2026-119233
Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite component: Oracle Diagnostics Interfaces. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...
PT-2026-118327
UNSUPPORTED WHEN ASSIGNED Exposure of sensitive system information to an unauthorized control sphere vulnerability in Apache Cocoon. An unauthenticated user could gain access to diagnostic interfaces, including triggering of cache, exposure of verbose debug logging and profile information. This...
Oracle E-Business Suite: CVE-2026-101551: Critical Patch Update
Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite component: Oracle Diagnostics Interfaces. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...
Oracle E-Business Suite: CVE-2026-101782: Critical Patch Update
Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite component: Oracle Diagnostics Interfaces. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...
gdbfuzz
GDBFuzz: Debugger-Driven Fuzzing This is the companion code for the paper: 'Fuzzing Embedded Systems using Debugger Interfaces'. A preprint of the paper can be found here https://publications.cispa.saarland/3950/. The code allows the users to reproduce and extend the results reported in the paper...
Linux Kernel Security Vulnerabilities
The Linux kernel version 5.7 contains a security vulnerability. This vulnerability arises from the fact that ieee802118023xmit does not set info-band from the channel context on non-MLD interfaces. As a result, ieee80211gettxrates uses the wrong frequency band for these frames...
EUVD-2026-42393
Wasmtime: WASI hard links bypass wasmtime-wasi's FilePerms for destination...
CVE-2026-15575
Active debug code vulnerability in SFM Software Technologies Inc. Costifier allows Exploit Non-Production Interfaces. This issue affects Costifier: through 2026-10-16. NOTE: The vendor was contacted early about this disclosure but did not respond in any way...
EUVD-2026-102828
Active debug code vulnerability in SFM Software Technologies Inc. Costifier allows Exploit Non-Production Interfaces. This issue affects Costifier: through 2026-10-16. NOTE: The vendor was contacted early about this disclosure but did not respond in any way...
CVE-2026-15575 Sensitive Information Disclosure Due to Enabled Debug Mode in Production in SFM Software's Costifier
Active debug code vulnerability in SFM Software Technologies Inc. Costifier allows Exploit Non-Production Interfaces. This issue affects Costifier: through 2026-10-16. NOTE: The vendor was contacted early about this disclosure but did not respond in any way...
CVE-2026-15575: Active Debug Code
Active debug code vulnerability in SFM Software Technologies Inc. Costifier allows Exploit Non-Production Interfaces. This issue affects Costifier: through 2026-10-16. NOTE: The vendor was contacted early about this disclosure but did not respond in any way...
CVE-2026-111220
pfSense CE through 2.9.0 contains a crontab injection vulnerability in interfacespppsedit.php that allows authenticated users to execute commands as root by injecting newlines into the ptpid or reset hour/minute fields. Attackers holding the 'WebCfg - Interfaces: PPPs: Edit' privilege can submit...
EUVD-2026-102332
pfSense CE through 2.9.0 contains a crontab injection vulnerability in interfacespppsedit.php that allows authenticated users to execute commands as root by injecting newlines into the ptpid or reset hour/minute fields. Attackers holding the 'WebCfg - Interfaces: PPPs: Edit' privilege can submit...
Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: media: imon: fix access to invalid resources for the second interface The imon driver probes two USB interfaces. When probing the second interface, the driver assumes blindly that the first interface was bound to the same imon...