Lucene search
+L

39 matches found

NVD
NVD
•added 2026/09/15 8:18 p.m.•13 views

CVE-2026-83410

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to...

8.8CVSS0.00432EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/15 8:18 p.m.•12 views

CVE-2026-83263

Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain component: Installation Issues. The supported version that is affected is 3.6.1. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Product...

7.5CVSS0.00323EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/15 8:05 p.m.•31 views

CVE-2026-83410

A vulnerability in Oracle Coherence (component: Core ), part of Oracle Fusion Middleware, affects versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0 . A low-privileged attacker with network access via multiple protocols can exploit this vulnerability with low complexity and no user inter...

8.8CVSS5.6AI score0.00432EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2026/09/15 8:04 p.m.•18 views

CVE-2026-83227

Oracle Siebel CRM Integration (component EAI ) contains a vulnerability affecting supported versions 17.0 through 26.7 . A low-privileged attacker with network access via HTTP can exploit this vulnerability, though it is rated as difficult to exploit . Successful exploitation results in takeover ...

7.5CVSS5.6AI score0.00323EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/15 8:03 p.m.•20 views

CVE-2026-83037

A critical vulnerability (CVSS 3.1 9.8 ) in Oracle WebCenter Sites (Oracle Fusion Middleware, component: WebCenter Sites) allows an unauthenticated attacker with network access via HTTP and low attack complexity to achieve full takeover of the affected system, impacting confidentiality, integrity...

9.8CVSS5.6AI score0.00508EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2026/09/15 8:02 p.m.•17 views

CVE-2026-73958

Oracle Access Manager (Oracle Fusion Middleware), specifically the Authentication Engine component, is affected by a vulnerability in supported versions 12.2.1.4.0 and 14.1.2.0.0 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability, though it is rated as diffi...

8.1CVSS5.6AI score0.00392EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2026/09/15 12:00 a.m.•17 views

PT-2026-92509

Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware component: ADF Faces. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle JDeveloper...

9.8CVSS5.6AI score0.00483EPSS
SaveExploits0References2
NVD
NVD
•added 2026/09/12 6:16 a.m.•17 views

CVE-2026-77752

The Temporary Login Without Password WordPress plugin before 1.9.9 does not verify that the user requesting a temporary login holds network super admin rights before granting the new account those rights, allowing an administrator of a single site on a multisite network to take over the whole...

7.2CVSS0.00462EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/12 12:00 a.m.•1 views

CVE-2026-77752: Improper Privilege Management

The Temporary Login Without Password WordPress plugin before 1.9.9 does not verify that the user requesting a temporary login holds network super admin rights before granting the new account those rights, allowing an administrator of a single site on a multisite network to take over the whole...

7.2CVSS5.6AI score0.00462EPSS
SaveExploits0References2
NVD
NVD
•added 2026/08/18 9:16 p.m.•13 views

CVE-2026-60765

Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM component: Marketing. Supported versions that are affected are 17.0-26.6. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel Apps - Marketing. Successful...

7.5CVSS0.00182EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/08/09 6:00 a.m.•16 views

CVE-2026-15038

The InfiniteWP Client WordPress plugin before 1.13.6 does not properly verify the site-connection state and the authenticity of requests to its remote-management endpoint on WordPress Multisite installations, allowing unauthenticated attackers to bind their own key, hijack an administrator sessio...

5.7AI score0.00759EPSS
SaveExploits1References1
EUVD
EUVD
•added 2026/08/09 6:00 a.m.•20 views

EUVD-2026-54882

The InfiniteWP Client WordPress plugin before 1.13.6 does not properly verify the site-connection state and the authenticity of requests to its remote-management endpoint on WordPress Multisite installations, allowing unauthenticated attackers to bind their own key, hijack an administrator sessio...

5.7AI score0.00759EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
•added 2026/07/27 12:00 a.m.•14 views

Linux Distros Unpatched Vulnerability : CVE-2026-61094

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Replication. Supported versions that are affected are MySQL Server:...

7.2CVSS7.1AI score0.00486EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/07/22 12:32 a.m.•16 views

EUVD-2026-47385

Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain component: Installation. The supported version that is affected is 6.2.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Agi...

9.8CVSS7.2AI score0.00508EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/07/22 12:31 a.m.•14 views

EUVD-2026-46669

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle...

9.8CVSS7.2AI score0.00508EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/07/22 12:31 a.m.•13 views

EUVD-2026-46633

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle...

9.8CVSS7.2AI score0.00508EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/07/21 12:00 a.m.•15 views

PT-2026-62294

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle...

9.8CVSS7.2AI score0.00508EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/07/21 12:00 a.m.•24 views

PT-2026-62622

Name of the Vulnerable Software and Affected Versions Oracle Enterprise Command Center Framework version V16 Description An issue exists in the Core component of the Oracle Enterprise Command Center Framework. An unauthenticated attacker with access to the physical communication segment attached ...

8.8CVSS7.1AI score0.00418EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/07/21 12:00 a.m.•24 views

PT-2026-62536

Name of the Vulnerable Software and Affected Versions Oracle WebCenter Content version 12.2.1.4.0 Oracle WebCenter Content version 14.1.2.0.0 Description An issue exists in the Content Server component of Oracle Fusion Middleware. This flaw allows an unauthenticated attacker with network access v...

8.1CVSS7.1AI score0.00392EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2026/01/09 8:52 a.m.•14 views

CVE-2021-2064

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core Components. The supported version that is affected is 12.1.3.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via IIOP, T3 to compromise Oracle WebLogic Server...

9.8CVSS7.5AI score0.03728EPSS
SaveExploits0References1
Rows per page
Query Builder