EUVD-2026-61145

Cross-Site Request Forgery CSRF vulnerability exists in Halo CMS versions up to 2.25.4 via the CorsConfigurer.java and the CsrfConfigurer.java components. This allows a remote attacker to execute arbitrary code...

PT-2026-78063

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware Helidon version 3.2.18 Description A flaw in the Imperative Web Server component allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful exploitation can lead to a full...

PT-2026-76927

Grav before 2.0.15 contains an arbitrary file write vulnerability in the Blueprint dynamic-data bare-function validation that uses an incomplete denylist instead of a positive allowlist. Attackers with page-edit or blueprint-config access can invoke the error log function through a data directive...

PT-2026-77550

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Work in Process versions 12.2.3 through 12.2.15 Description A flaw in the Internal Operations component allows a low privileged attacker with network access via HTTP to compromise the system. Successful...

PT-2026-77102

Unauthenticated PHP Object Injection in Easy Google Maps = 1.13.0 versions...

PT-2026-77583

Name of the Vulnerable Software and Affected Versions Oracle Hyperion Infrastructure Technology version 11.2.25.0.000 Description An issue exists in the Installation and Configuration component of Oracle Hyperion Infrastructure Technology. An unauthenticated attacker with network access via HTTP...

CVE-2026-52608

reportico-web versions up to 8.1.0 have an incorrect access control flaw allowing unauthenticated attackers to inject arbitrary PHP into any report's PreExecuteCode attribute, bypassing safe_mode, leading to remote code execution. No patch version or in-the-wild exploitation details are provided ...

PT-2026-77476

Name of the Vulnerable Software and Affected Versions Oracle WebCenter Sites version 12.2.1.4.0 Oracle WebCenter Sites version 14.1.2.0.0 Description A flaw in the Oracle WebCenter Sites component of Oracle Fusion Middleware allows a low privileged attacker with network access via HTTP to...

KLA91226 Multiple vulnerabilities in Mozilla Firefox

Multiple vulnerabilities were found in Mozilla Firefox. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, obtain sensitive information, spoof user interface. Below is a complete list of vulnerabilities: 1. Security...

KLA91227 Multiple vulnerabilities in Mozilla Firefox ESR

Multiple vulnerabilities were found in Mozilla Firefox ESR. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, obtain sensitive information. Below is a complete list of vulnerabilities: 1. Security vulnerability can ...

KLA91229 Multiple vulnerabilities in Mozilla Thunderbird

Multiple vulnerabilities were found in Mozilla Thunderbird. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, obtain sensitive information. Below is a complete list of vulnerabilities: 1. Security vulnerability in t...

KLA91232 Multiple vulnerabilities in Mozilla Thunderbird ESR

Multiple vulnerabilities were found in Mozilla Thunderbird ESR. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, obtain sensitive information. Below is a complete list of vulnerabilities: 1. Security vulnerability...

Zoom Workplace < 7.1.5 Vulnerability (ZSB-26017)

The version of Zoom Workplace installed on the remote host is prior to 7.1.5. It is, therefore, affected by a vulnerability as referenced in the ZSB-26017 advisory. - Use after Free in the annotator function of Zoom Clients may allow a meeting participant to achieve remote code execution of anoth...

Mozilla Firefox ESR < 153.1

The version of Firefox ESR installed on the remote macOS or Mac OS X host is prior to 153.1. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-77 advisory. - Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 154, Firefox E...

Mozilla Firefox ESR < 140.14

The version of Firefox ESR installed on the remote Windows host is prior to 140.14. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-76 advisory. - Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14...

Mozilla Firefox < 154.0

The version of Firefox installed on the remote Windows host is prior to 154.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-74 advisory. - Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14,...

EUVD-2026-61091

An incorrect access control vulnerability in reportico-web = 8.1.0 allows an unauthenticated attacker to inject arbitrary php code into the PreExecuteCode attribute of any report regardless of the safemode setting leading to remote code execution...

PT-2026-77332

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.169 Description A use after free issue exists in WebGL, which allows a remote attacker to execute arbitrary code within the sandbox by inducing the victim to visit a specially crafted HTML page. Use...

PT-2026-77619

Name of the Vulnerable Software and Affected Versions Oracle Siebel CRM versions 25.12 through 26.6 Description An issue exists in the Open Integration component of the Siebel CRM Integration product. An unauthenticated attacker with network access via HTTP can exploit this flaw to compromise the...

PT-2026-77360

Name of the Vulnerable Software and Affected Versions Oracle Identity Manager versions 12.2.1.4.0 Oracle Identity Manager versions 14.1.2.1.0 Description A flaw in the OIM Legacy UI component of Oracle Fusion Middleware allows a low privileged attacker with network access via T3 and IIOP Internet...