Oracle iPlanet Web Server 7.0.x - Image Injection

Oracle iPlanet Web Server 7.0.x allows image injection in the Administration console via the productNameSrc parameter to an admingui URI. This issue exists because of an incomplete fix for CVE-2012-0516. id: CVE-2020-9314 info: name: Oracle iPlanet Web Server 7.0.x - Image Injection author:...

MINI-MFW8-RMW4-5X6M

Bulletin has no description...

CVE-2026-68900

creationtimestamp| type| source ---|---|--- 2026-08-19 21:01:09+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mthmtw75wv2t...

MINI-VJP2-7R8P-H44C

Bulletin has no description...

MINI-RX9W-QJHQ-52RW

Bulletin has no description...

MINI-79RC-2XHX-37P4

Bulletin has no description...

CVE-2026-50768

creationtimestamp| type| source ---|---|--- 2026-08-17 22:07:23+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtcpmk7xkz25 2026-08-17 22:10:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtcpreb54m24...

MINI-M7F2-6VH6-28F6

Bulletin has no description...

MINI-5FRG-MFG5-4HGC

Bulletin has no description...

MINI-HFHP-X6JV-934X

Bulletin has no description...

MINI-QJR9-H2HC-QHG5

Bulletin has no description...

MINI-R4VW-F4P3-72X9

Bulletin has no description...

MINI-W6XQ-22RW-R8G8

Bulletin has no description...

MINI-QG3P-37FM-FQ9Q

Bulletin has no description...

CVE-2026-15341

creationtimestamp| type| source ---|---|--- 2026-08-15 03:00:23+00:00| seen| https://infosec.exchange/users/offseq/statuses/117097288379770973 2026-08-15 03:00:25+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mt3olr7vcm2a 2026-08-15 03:20:04+00:00| seen|...

MINI-6XG7-H9HP-373C

Bulletin has no description...

MINI-5WPJ-9C28-26WJ

Bulletin has no description...

CVE-2026-33818

creationtimestamp| type| source ---|---|--- 2026-08-14 12:01:01+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mt24djqyvn2y 2026-08-22 12:01:12+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mtoa366zvb2r...

ECHO-930D-AB3A-F99C

Bulletin has no description...

CVE-2026-16066

CVE-2026-16066 affects the Welcart e-Commerce WordPress plugin prior to version 2.11.34. The root cause is failure to sanitize or escape a product field before it is output on product pages, which enables users with the Author role and above to inject arbitrary web scripts that execute in visitor...