Lucene search
+L

16031 matches found

Positive Technologies
Positive Technologies
•added 2026/05/28 12:00 a.m.•35 views

PT-2026-44525

Name of the Vulnerable Software and Affected Versions Oracle REST Data Services versions 24.2.0 through 26.1.0 Description An issue in the Mongoapi component allows an unauthenticated attacker with network access via HTTPS to compromise the system. Successful exploitation can lead to unauthorized...

5.3CVSS5.7AI score0.00337EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/05/28 12:00 a.m.•49 views

PT-2026-44508

Name of the Vulnerable Software and Affected Versions Oracle REST Data Services versions 24.2.0 through 26.1.0 Description An issue in the Core component allows a low privileged attacker with network access via HTTPS to compromise the system. Successful exploitation can lead to unauthorized acces...

8.1CVSS5.4AI score0.00362EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/05/28 12:00 a.m.•27 views

PT-2026-44534

Name of the Vulnerable Software and Affected Versions Oracle REST Data Services versions 24.2.0 through 26.1.0 Description An issue in the Core component allows an unauthenticated attacker with network access via HTTPS to compromise the system. Successful exploitation can result in a partial deni...

5.3CVSS5.7AI score0.00411EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2026/05/28 12:00 a.m.•26 views

Oracle REST Data Services 安全漏洞

Oracle REST Data Services is a middleware tool provided by Oracle Corporation in the United States, which exposes features of the Oracle database to applications through RESTful APIs. Versions 24.2.0 to 26.1.0 of Oracle REST Data Services have security vulnerabilities. These vulnerabilities stem...

5.3CVSS5.8AI score0.00411EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/05/28 12:00 a.m.•25 views

Oracle REST Data Services 安全漏洞

Oracle REST Data Services is a middleware tool provided by Oracle Corporation in the United States, which exposes features of the Oracle database to applications through RESTful APIs. Versions 24.2.0 to 26.1.0 of Oracle REST Data Services have security vulnerabilities. These vulnerabilities stem...

8.1CVSS5.8AI score0.00362EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/05/28 12:00 a.m.•31 views

Oracle REST Data Services 安全漏洞

Oracle REST Data Services is a middleware tool provided by Oracle, Inc., in the United States, that exposes features of the Oracle database to applications through RESTful APIs. Versions 24.2.0 to 26.1.0 of Oracle REST Data Services have security vulnerabilities. These vulnerabilities stem from...

9.9CVSS5.8AI score0.00432EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/05/28 12:00 a.m.•25 views

Oracle REST Data Services 安全漏洞

Oracle REST Data Services is a middleware tool provided by Oracle Corporation in the United States, which exposes features of the Oracle database to applications through RESTful APIs. Versions 24.2.0 to 26.1.0 of Oracle REST Data Services have security vulnerabilities. These vulnerabilities stem...

5.3CVSS5.8AI score0.00337EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/05/28 12:00 a.m.•34 views

PT-2026-44530

Name of the Vulnerable Software and Affected Versions Oracle REST Data Services versions 24.2.0 through 26.1.0 Description An issue in the Core component allows a low privileged attacker with network access via HTTPS to compromise the system. Successful exploitation can result in a complete...

9.9CVSS5.7AI score0.00432EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2026/05/28 12:00 a.m.•45 views

PT-2026-44533

Name of the Vulnerable Software and Affected Versions Oracle REST Data Services versions 24.2.0 through 26.1.0 Description An issue in the Core component allows an unauthenticated attacker with network access via HTTPS to compromise the system. Successful exploitation can lead to unauthorized...

5.3CVSS5.7AI score0.003EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/05/28 12:00 a.m.•46 views

PT-2026-44512

Name of the Vulnerable Software and Affected Versions Oracle REST Data Services versions 24.2.0 through 26.1.0 Description A flaw in the Core component allows a low privileged attacker with network access via HTTPS to compromise the system. Successful exploitation can lead to a full takeover of t...

9.9CVSS5.7AI score0.00432EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2026/05/28 12:00 a.m.•32 views

Oracle REST Data Services 安全漏洞

Oracle REST Data Services is a middleware tool provided by Oracle Corporation in the United States, which exposes features of the Oracle database to applications through RESTful APIs. There are security vulnerabilities in versions 24.2.0 to 26.1.0 of Oracle REST Data Services. These vulnerabiliti...

10CVSS5.8AI score0.00508EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/28 12:00 a.m.•12 views

CVE-2026-46843: Uncontrolled Resource Consumption

Vulnerability in Oracle REST Data Services component: Core. Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle REST Data Services. Successful attacks of this vulnerability can...

5.3CVSS5.7AI score0.00411EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/05/28 12:00 a.m.•39 views

PT-2026-44532

Vulnerability in Oracle REST Data Services component: General. Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle REST Data Services. Successful attacks of this vulnerability c...

5.3CVSS5.8AI score0.00337EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/28 12:00 a.m.•8 views

CVE-2026-46841: Exposure of Sensitive Information to an Unauthorized Actor

Vulnerability in Oracle REST Data Services component: General. Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle REST Data Services. Successful attacks of this vulnerability c...

5.3CVSS5.7AI score0.00337EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/28 12:00 a.m.•11 views

CVE-2026-46842: Improper Access Control

Vulnerability in Oracle REST Data Services component: Core. Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle REST Data Services. Successful attacks of this vulnerability can...

5.3CVSS5.7AI score0.003EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/28 12:00 a.m.•7 views

CVE-2026-46830: Exposure of Sensitive Information to an Unauthorized Actor

Vulnerability in Oracle REST Data Services component: Mongoapi. Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle REST Data Services. Successful attacks of this vulnerability...

5.3CVSS5.7AI score0.00337EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/05/28 12:00 a.m.•34 views

WordPress plugin 3D Viewer – 3D Model Viewer – Augmented Reality – Virtual Try On 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There ar...

4.3CVSS5.8AI score0.00403EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/28 12:00 a.m.•5 views

CVE-2026-44794: Missing Authorization

Nautobot is a Network Source of Truth and Network Automation Platform. Prior to 2.4.33 and 3.1.2, in the case of inter-object references via GenericForeignKey a pattern allowing an object to reference another object that may belong to one of several different "content types" or database tables,...

5.4CVSS5.8AI score0.00304EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/28 12:00 a.m.•10 views

CVE-2026-35266: Uncontrolled Resource Consumption

Vulnerability in Oracle REST Data Services component: Core. Supported versions that are affected are 24.2.0-26.1.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle REST Data Services. Successful attacks require human interaction...

7.9CVSS5.6AI score0.00148EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/05/28 12:00 a.m.•30 views

PT-2026-44531

Name of the Vulnerable Software and Affected Versions Oracle REST Data Services versions 24.2.0 through 26.1.0 Description An issue exists in the Backend-as-a-Service component of Oracle REST Data Services. An unauthenticated attacker with network access via HTTPS can exploit this flaw to...

10CVSS5.5AI score0.00508EPSS
SaveExploits1References13
Rows per page
Query Builder