CVE-2026-111066

The AIOHTTP asynchronous HTTP client/server framework for Python and asyncio is vulnerable to file descriptor exhaustion in versions 2.0.0 through 3.14.4. The root cause lies in multipart request processing , which can retain an unbounded number of open file descriptors. An unauthenticated attack...

EUVD-2026-103186

LoopX serve-status permissive CORS policy exposes control-plane state and private Markdown files...

Oracle iSupport security vulnerabilities

Oracle iSupport versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Service Requests component. Attackers with low privileges and access to the network via HTTP may be able to unauthorizedly create, delete, or modify critical data or all...

IBM i Authorization Issues Vulnerabilities

Versions of IBM i 7.3, 7.4, 7.5, and 7.6 have authorization-related vulnerabilities. These vulnerabilities stem from improper access control. Unauthenticated remote attackers can send specially crafted HTTP requests to any URL within the Navigator application before authentication is completed...

ASUS Router buffer error vulnerability

The ASUS Router ASUSWRT 3.0.0.4386 series and ASUSWRT 3.0.0.4388 series versions have a buffer error vulnerability. This vulnerability arises from the lack of checking input size before buffer copying, which may allow adjacent authenticated users to manipulate device operations by submitting...

Oracle Helidon security vulnerabilities

Oracle Helidon versions 3.2.21, 4.0.0 to 4.5.5, and 27.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the helidon-security-providers-http-auth component. Unauthorized attackers may gain access through HTTP network requests, potentially leading to unauthorized acces...

TOTOLINK X2000R encryption vulnerability

The TOTOLINK X2000R has an encryption vulnerability. This vulnerability arises from the boa firmware update feature, which does not verify the firmware signature. Attackers can upload specially crafted firmware binary files through authenticated HTTP requests, resulting in arbitrary firmware...

Oracle Document Management and Collaboration security vulnerabilities

Oracle Document Management and Collaboration versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Attachments component. They may allow low-privilege attackers to access critical data through HTTP network requests without user interaction. This...

TOTOLINK X2000R Command Injection Vulnerability

The TOTOLINK X2000R has a command injection vulnerability. This vulnerability stems from the batchupg function, which allows for OS command injections. Attackers can trigger this vulnerability through specially crafted HTTP requests that have been authenticated, potentially leading to arbitrary...

TOTOLINK X2000R Buffer Error Vulnerability

The TOTOLINK X2000R has a buffer overflow vulnerability. This vulnerability stems from a stack buffer overflow in the batchupg function. Custom HTTP requests can lead to arbitrary code execution. Attackers can exploit this vulnerability through authenticated HTTP requests...

Oracle Agile Engineering Data Management security vulnerabilities

Oracle Agile Engineering Data Management version 6.2.1 has a security vulnerability. This vulnerability stems from issues with the Engineering Communication Interface component. It may allow low-privilege attackers to access data through network HTTP requests, enabling unauthorized updates,...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

A security vulnerability exists in Oracle PeopleSoft Enterprise PeopleTools versions 8.61 through 8.63. This vulnerability stems from issues in the Portal component and may allow low-privilege attackers to access certain accessible data via HTTP requests while interacting with users, thereby...

Oracle Concurrent Processing security vulnerability

Oracle Concurrent Processing versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Concurrent Requests component, which may allow low-privilege attackers to access certain accessible data via the HTTP network, leading to unauthorized access to...

TOTOLINK X2000R Buffer Error Vulnerability

The TOTOLINK X2000R has a buffer overflow vulnerability. This vulnerability stems from an issue with the staticdns2 parameter in the boa formIpv6Setup static network configuration function. It may allow authenticated attackers to execute arbitrary code through specially crafted HTTP requests...

Oracle iSupport security vulnerabilities

Oracle iSupport versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Service Requests component. Unauthorized attackers with low privileges may gain network access via HTTP, allowing them to access critical data or all accessible data...

Oracle Agile PLM security vulnerabilities

Oracle Agile PLM 9.3.6 has a security vulnerability. This vulnerability stems from issues with the Folders, Files & Attachments component. It may allow low-privilege attackers to access critical data through HTTP network requests, potentially leading to unauthorized access to key information or...

TOTOLINK X2000R Buffer Error Vulnerability

The TOTOLINK X2000R has a buffer overflow vulnerability, which stems from an stack buffer overflow in the MCLI function. This vulnerability could allow attackers to execute arbitrary code through specially crafted HTTP requests...

Oracle Outside In Technology security vulnerability

Version 8.5.8 of Oracle Outside In Technology contains a security vulnerability stemming from issues within the Outside In Clean Content SDK component. This vulnerability may allow low-privilege attackers to send HTTP requests over the network, thereby taking control of Oracle Outside In Technolo...

Oracle Identity Manager Connector security vulnerabilities

The Oracle Identity Manager Connector versions 12.2.1.4.0 and 14.1.2.1.0 have security vulnerabilities. These vulnerabilities stem from issues with the Generic REST component. Unauthorized attackers may gain access through HTTP network requests, allowing them to access critical data or fully acce...

Oracle WebCenter Sites security vulnerabilities

Oracle WebCenter Sites versions 12.2.1.4.0 and 14.1.2.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the WebCenter Sites component, which may allow unauthorized attackers to access critical data through HTTP network requests, as well as access all accessible data...