CVE-2026-61100

...

CVE-2026-60925

...

CVE-2026-60678

The CVE-2026-60678 affects Oracle E-Business Suite, Oracle General Ledger (Internal Operations) in supported 12.2.3–12.2.15 releases. The vulnerability allows a low-privilege attacker with network access via SOAP to compromise Oracle General Ledger, with potential takeover and impact to confident...

CVE-2026-60601

...

CVE-2026-60525

...

CVE-2026-60499

CVE-2026-60499 affects Oracle JD Edwards EnterpriseOne Solution Advisor (component: Solution Advisor) in the 9.2 line. The vulnerability allows a low-privilege, network-accessible attacker (via HTTP) to take over the JD Edwards EnterpriseOne Solution Advisor; CVSS 3.1 base score 8.8 (C/H/I/H). Th...

CVE-2026-60458

...

CVE-2026-60327

...

CVE-2026-60323

CVE-2026-60323 affects Oracle Identity Manager (OIM Legacy UI) in Oracle Fusion Middleware, with affected versions 12.2.1.4.0 and 14.1.2.1.0. The vulnerability is exploitable over HTTP by a low-privileged, network-accessible attacker, enabling unauthorized creation, deletion or modification of da...

CVE-2026-60287

...

CVE-2026-60274

...

CVE-2026-60265

CVE-2026-60265 affects the Oracle Coherence component (Core) within Oracle Fusion Middleware. Affected supported versions are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, 15.1.1.0.0 . The vulnerability allows a high-privilege attacker with local logon to compromise Oracle Coherence, with potential broader...

CVE-2026-47057

...

CVE-2026-47047

CVE-2026-47047 affects Oracle VM VirtualBox Core in version 7.2.12. Local, low-privilege attacker with logon can compromise and take over VirtualBox (CVSS 3.1 base 7.8). Exploitation status and specific remediation are not provided in the included documents; refer to the Oracle July 2026 CPU advi...

CVE-2026-46981

...

CVE-2026-46954

...

EUVD-2026-46394

Unsanitized user-supplied input in report filtering parameters is concatenated directly into SQL queries without proper escaping or parameterized queries, enabling blind SQL injection and unauthorized database read access...

CVE-2026-63903

A flaw was found in the Linux kernel's belkinsa USB serial driver. The driver's interrupt handling routine fails to validate the length of incoming status reports. This oversight allows a local attacker, by connecting a specially crafted USB device, to trigger an out-of-bounds read. The primary...

CVE-2026-64880

Unsanitized user-supplied input in report filtering parameters is concatenated directly into SQL queries without proper escaping or parameterized queries, enabling blind SQL injection and unauthorized database read access...

CVE-2026-64880 Blind SQL Injection

Unsanitized user-supplied input in report filtering parameters is concatenated directly into SQL queries without proper escaping or parameterized queries, enabling blind SQL injection and unauthorized database read access...