141623 matches found
CVE-2026-61029
...
CVE-2026-61007
Oracle WebCenter Sites versions 12.2.1.4.0 and 14.1.2.0.0 are affected by an unauthenticated, network-accessible vulnerability (CVSS 7.5 HIGH) allowing unauthorized access to all site data. Oracle's August 2026 security advisory provides patch details; no exploitation evidence is provided in the ...
CVE-2026-60980
Affected versions are Oracle WebCenter Content Content Server 12.2.1.4.0 and 14.1.2.0.0. An unauthenticated remote attacker via HTTP can compromise data integrity and confidentiality with scope change. Oracle's August 2026 CPU patch resolves this; apply immediately. No in-the-wild exploitation re...
CVE-2026-60944
...
CVE-2026-60928
...
CVE-2026-60909
Oracle WebCenter Content (component: Content Server) versions 12.2.1.4.0 and 14.1.2.0.0 are affected by a HIGH-severity (CVSS 7.6) flaw allowing a low-privileged attacker via HTTP to read all accessible data and modify some data, with scope change impacting additional products. No exploitation de...
CVE-2026-60909
...
CVE-2026-60865
Oracle Fusion Middleware's Service Delivery Platform Messaging Enabler component (versions 14.1.2.0.0 and 12.2.1.4.0) is vulnerable to network-based HTTP attacks by high-privileged attackers, allowing unauthorized access to critical data with scope-change impact across additional products. CVSS 3...
CVE-2026-60849
Oracle Unified Directory (OUD Core) versions 12.2.1.4.0 and 14.1.2.1.0 have a HIGH-severity (CVSS 8.5) LDAP network vulnerability exploitable by low-privileged attackers, enabling full product takeover with scope change; Oracle's August 2026 CPU advisory is the primary remediation source.
CVE-2026-60822
CVE-2026-60822 affects Oracle Enterprise Manager for Systems Infrastructure versions 13.5 and 24.1 (Agent component). A low-privileged local attacker can exploit it (CVSS 7.8 HIGH) to fully compromise the product. No exploitation details or patch version are provided in the documents; refer to Or...
CVE-2026-60779
...
CVE-2026-60731
...
CVE-2026-60722
CVE-2026-60722 affects Oracle Identity Manager's OIM Legacy UI in versions 12.2.1.4.0 and 14.1.2.1.0. A low-privileged attacker can exploit T3/IIOP network access to fully compromise the application (CVSS 8.8, HIGH). No exploitation evidence or patch version is provided; monitor Oracle's August 2...
CVE-2026-60698
...
CVE-2026-60589
...
CVE-2026-60590
...
CVE-2026-60391
An unauthenticated, network-accessible attacker can exploit Oracle Hyperion Financial Reporting Server (version 11.2.25.0.000) via HTTP to gain unauthorized access to critical data, with no user interaction required (CVSS 7.5, HIGH). No exploitation or patch details are provided in the documents.
CVE-2026-63640
creationtimestamp| type| source ---|---|--- 2026-08-18 20:35:11+00:00| published-proof-of-concept| https://github.com/MagicMirrorOrg/MagicMirror/security/advisories/GHSA-q4gh-4ffp-5cg8...
CVE-2026-68922
creationtimestamp| type| source ---|---|--- 2026-08-18 20:35:06+00:00| published-proof-of-concept| https://github.com/MobSF/Mobile-Security-Framework-MobSF/security/advisories/GHSA-8j49-mmcx-4mp5...