BELL-CVE-2026-63864 CVE-2026-63864 does not affect BellSoft software

Bulletin has no description...

BELL-CVE-2026-53395 CVE-2026-53395 does not affect BellSoft software

Bulletin has no description...

BELL-CVE-2026-53378 CVE-2026-53378 does not affect BellSoft software

Bulletin has no description...

BELL-CVE-2026-53373 CVE-2026-53373 does not affect BellSoft software

Bulletin has no description...

BELL-CVE-2026-53396 CVE-2026-53396 does not affect BellSoft software

Bulletin has no description...

CVE-2026-56844

A vulnerability in the Veeam Updater component of the Veeam Software Appliance that could allow a local user to elevate their privileges and gain root-level access to the underlying operating system...

CVE-2026-56844

A vulnerability in the Veeam Updater component of the Veeam Software Appliance that could allow a local user to elevate their privileges and gain root-level access to the underlying operating system...

CVE-2026-56844

The CVE concerns the Veeam Updater component within the Veeam Software Appliance. It describes a local privilege escalation that could allow a local user to gain root-level access on the underlying OS. The connected documents confirm the affected component and the impact (elevated privileges to r...

EUVD-2026-47595

A vulnerability in the Veeam Updater component of the Veeam Software Appliance that could allow a local user to elevate their privileges and gain root-level access to the underlying operating system...

CVE-2026-56844

A vulnerability in the Veeam Updater component of the Veeam Software Appliance that could allow a local user to elevate their privileges and gain root-level access to the underlying operating system...

EUVD-2026-46735

Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware component: Patchset Assistant. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Dat...

Missing Authorization

Overview Affected versions of this package are vulnerable to Missing Authorization in the modules/activate dialog handler, which returns the full plaintext commercial license key to any authenticated user with the access.system permission. An attacker can obtain sensitive license information by...

PT-2026-63332

Authorization bypass through User-Controlled key vulnerability in Universe Software Computer Marketing Trade and Industry Inc. Online Registration and Workflow Management System allows Exploiting Trust in Client. This issue affects Online Registration and Workflow Management System: through...

CVE-2025-44089

An issue in NCH Software ExpressZip v11.29 allows attackers to execute arbitrary code via downloading and executing a crafted archive file...

PT-2026-63274

A vulnerability in the Veeam Updater component of the Veeam Software Appliance that could allow a local user to elevate their privileges and gain root-level access to the underlying operating system...

CVE-2026-61271

Vulnerability in the Oracle Document Management and Collaboration product of Oracle E-Business Suite component: Attachments. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2026-61053

Vulnerability in the Oracle Communications BRM - Elastic Charging Engine product of Oracle Communications component: Diameter Gateway and SDK. Supported versions that are affected are 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0 and 15.2.0.0.0. Easily exploitable vulnerability allows low privileged attacke...

CVE-2026-43945

FUXA is a web-based Process Visualization SCADA/HMI/Dashboard software. Versions 1.2.11 until 1.3.1 allow an unauthenticated remote attacker to achieve Full Remote Code Execution RCE as root. The exploit succeeds even when the platform is configured in its most secure state Secure Mode Enabled an...

CVE-2026-62480

...

CVE-2026-62453

CVE-2026-62453 affects Oracle HRMS (UK) within Oracle E-Business Suite, component Internal Operations. Affected versions are 12.2.3–12.2.15. The vulnerability allows a low-privileged, network-attacker with HTTP access to perform unauthorized updates/inserts/deletes and read access, with a partial...