1455 matches found
CVE-2026-21938
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Portal. Supported versions that are affected are 8.60, 8.61 and 8.62. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise...
CVE-2026-21938
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Portal. Supported versions that are affected are 8.60, 8.61 and 8.62. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise...
CVE-2026-21931
Vulnerability in the Oracle APEX Sample Applications product of Oracle APEX component: Brookstrut Sample App. Supported versions that are affected are 23.2.0, 23.2.1, 24.1.0, 24.2.0 and 24.2.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...
CVE-2026-21923
Vulnerability in the Oracle Life Sciences Central Designer product of Oracle Health Sciences Applications component: Platform. The supported version that is affected is 7.0.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Life...
CVE-2026-21946
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards component: Web Runtime SEC. Supported versions that are affected are 9.2.0.0-9.2.26.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD Edwards...
PT-2026-3708
Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft Enterprise HCM Human Resources version 9.2 Description A flaw exists in the PeopleSoft Enterprise HCM Human Resources component, specifically within Company Dir / Org Chart Viewer and Employee Snapshot. This issue allows a...
CVE-2026-22907
An attacker may gain unauthorized access to the host filesystem, potentially allowing them to read and modify system data...
CVE-2026-1019
CVE-2026-1019 is associated with a Missing Authentication vulnerability in the Police Statistics Database System developed by Gotac. The core issue, as described in connected sources, is unauthenticated remote access enabling attackers to read, modify, and delete database contents via a specific ...
PT-2026-3206
Police Statistics Database System developed by Gotac has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to read, modify, and delete database contents by using a specific functionality...
CVE-2026-22907
An attacker may gain unauthorized access to the host filesystem, potentially allowing them to read and modify system data...
CVE-2026-22907
An attacker may gain unauthorized access to the host filesystem, potentially allowing them to read and modify system data...
EUVD-2026-2821
An attacker may gain unauthorized access to the host filesystem, potentially allowing them to read and modify system data...
CVE-2026-22907
An attacker may gain unauthorized access to the host filesystem, potentially allowing them to read and modify system data...
CVE-2026-22907
CVE-2026-22907 : The included sources describe an unauthorized host filesystem access risk with read/modify data implications. The materials do not provide concrete mappings to a specific affected product/vendor/version nor explicit root cause details. CVSS data indicates a critical impact on con...
CVE-2026-22907
An attacker may gain unauthorized access to the host filesystem, potentially allowing them to read and modify system data...
PT-2026-2988
Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description An attacker may gain unauthorized access to the host filesystem, potentially allowing them to read and modify system data. The issue could allow an attacker to...
CVE-2026-22196 GestSup < 3.2.60 SQL Injection in Ticket Creation
GestSup versions prior to 3.2.60 contain a SQL injection vulnerability in ticket creation functionality. User-controlled input provided during ticket creation is incorporated into SQL queries without sufficient neutralization, allowing an authenticated attacker to manipulate database queries...
WordPress plugin aBlocks has security vulnerabilities
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...
Financials General Ledger SAP S/4HANA Data Read Modify
The vulnerability of the Financials General Ledger component of the SAP S/4HANA software platform is related to uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to read and modify data...