Lucene search
+L

190311 matches found

Positive Technologies
Positive Technologies
•added 2026/10/20 12:00 a.m.•15 views

PT-2026-118703

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 156.0.8078.47 Description An out of bounds read occurs in Navigation, which could allow a remote attacker to potentially execute arbitrary code inside the sandbox by using a crafted HTML page. An out of bounds...

9.6CVSS7AI score0.0051EPSS
SaveExploits0References364
Positive Technologies
Positive Technologies
•added 2026/10/20 12:00 a.m.•10 views

PT-2026-118287

A path traversal vulnerability could allow an authenticated attacker to read arbitrary files on the system...

8.2CVSS6.1AI score0.00428EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/10/20 12:00 a.m.•14 views

PT-2026-119478

Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite component: Diagnostics. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Applications...

3.3CVSS6.8AI score0.00256EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/20 12:00 a.m.•20 views

PT-2026-119902

Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM component: Siebel Cloud Manager. Supported versions that are affected are 22.3-26.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM Cloud...

5.8CVSS7AI score0.00323EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/20 12:00 a.m.•16 views

PT-2026-120040

Vulnerability in the Oracle BI Publisher product of Oracle Analytics component: BI Platform Security. The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle BI Publisher. Successful...

4.3CVSS6.9AI score0.00215EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/20 12:00 a.m.•10 views

Google Chrome Vulnerability: CVE-2026-113070

Out of bounds read in GetUserMedia in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

6.5CVSS6.1AI score0.00362EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/20 12:00 a.m.•10 views

Google Chrome Vulnerability: CVE-2026-113341

Memory corruption in Skia in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. Chromium security severity: Critical...

6.5CVSS6.4AI score0.00455EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/20 12:00 a.m.•12 views

Oracle E-Business Suite: CVE-2026-83390: Critical Patch Update

Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite component: Diagnostics. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Applications...

4.2CVSS6.9AI score0.00252EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/20 12:00 a.m.•10 views

Google Chrome Vulnerability: CVE-2026-113026

Memory corruption in PDF in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

6.5CVSS6.4AI score0.00422EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/10/20 12:00 a.m.•16 views

PT-2026-119731

Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft PeopleSoft Enterprise PeopleTools versions 8.61 through 8.63 Description An issue exists in the Report Distribution component that allows an unauthenticated attacker with network access via HTTP to compromise the system...

3.7CVSS7.2AI score0.00263EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/10/20 12:00 a.m.•14 views

PT-2026-119658

Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM component: REST. Supported versions that are affected are 17.0-26.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM Integration. Successful attacks...

3.1CVSS7AI score0.00233EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/20 12:00 a.m.•15 views

PT-2026-118349

Missing authorization in the configuration cascade operations of the Collaboration Server in Unblu inc. Unblu Spark 7.0 through 8.36.1-hotfix.0, on on-premises and cloud deployments, allows an authenticated remote attacker to read and change configuration properties of entities they aren't...

9.3CVSS5.8AI score0.00359EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/20 12:00 a.m.•15 views

PT-2026-120308

Summary The uploadfs library's local storage backend does not validate or sanitize user-supplied paths. The prefixPath helper only strips double slashes // and the backend performs direct string concatenation uploadsPath + path. An attacker can inject ../ sequences to escape the intended uploads...

3.3CVSS6.3AI score
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/20 12:00 a.m.•9 views

Google Chrome Vulnerability: CVE-2026-113102

Out of bounds read in FileSystem in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

6.5CVSS6AI score0.00359EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/10/20 12:00 a.m.•15 views

PT-2026-119085

Name of the Vulnerable Software and Affected Versions Oracle Siebel CRM Siebel Apps - Marketing versions 17.0 through 26.9 Description A flaw in the Marketing component allows a high privileged attacker with network access via HTTP to compromise the system. Successful exploitation can lead to...

2.2CVSS7.1AI score0.00275EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/20 12:00 a.m.•9 views

Google Chrome Vulnerability: CVE-2026-113054

Out of bounds read in SiteIsolation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

6.5CVSS6.1AI score0.0032EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/10/20 12:00 a.m.•17 views

PT-2026-119266

Vulnerability in the Helidon product of Oracle Fusion Middleware component: helidon-webclient. Supported versions that are affected are 4.0.0-4.5.5 and 27.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks o...

5.3CVSS7AI score0.0024EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/20 12:00 a.m.•29 views

PT-2026-120133

IBM QRadar SIEM 7.6.0.0 through 7.6.0.4, and 7.5.0 through 7.5.0 Update Package 16 Interim Fix 001 could allow a remote attacker to cause a denial of service or obtain sensitive information due to an out-of-bounds read...

8.2CVSS5.8AI score0.00415EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/10/20 12:00 a.m.•16 views

PT-2026-119053

Vulnerability in Oracle REST Data Services component: Database Actions. Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle REST Data Services. Successful attacks of this...

4.7CVSS7AI score0.00291EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/10/20 12:00 a.m.•11 views

Linux Distros Unpatched Vulnerability : CVE-2026-112279

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rdesktop through 1.9.0 contains a heap out-of-bounds read vulnerability in processbmpcache2 in orders.c that allows malicious RDP servers to crash clients via...

7.1CVSS6.2AI score0.00306EPSS
SaveExploits0References3
Rows per page
Query Builder