32370 matches found
CVE-2026-3182
Zohocorp ManageEngine Endpoint Central versions before 11.4.2528.34 are affected by cleartext transmission of sensitive information vulnerability...
webkit2gtk3 security update
An update is available for webkit2gtk3. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list WebKitGTK is the port of the portable web rendering engine WebKit to the...
CVE-2026-3182
Zohocorp ManageEngine Endpoint Central versions before 11.4.2528.34 are affected by cleartext transmission of sensitive information vulnerability...
EUVD-2026-46154
Zohocorp ManageEngine Endpoint Central versions before 11.4.2528.34 are affected by cleartext transmission of sensitive information vulnerability...
CVE-2026-3182
CVE-2026-3182 affects Zohocorp ManageEngine Endpoint Central versions before 11.4.2528.34, with a vulnerability described as cleartext transmission of sensitive information. The CVSS v3.1 base score is 4.3 (Medium), and the issue is network-based with low privileges required and no user interacti...
CVE-2026-3182 Sensitive Data Exposure
Zohocorp ManageEngine Endpoint Central versions before 11.4.2528.34 are affected by cleartext transmission of sensitive information vulnerability...
CVE-2026-3182 Sensitive Data Exposure
Zohocorp ManageEngine Endpoint Central versions before 11.4.2528.34 are affected by cleartext transmission of sensitive information vulnerability...
PT-2026-63174
Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Order Management versions 12.2.4 through 12.2.15 Description A flaw in the Product Diagnostic Tools component allows a low privileged attacker with network access via HTTP to compromise the system. This can lead ...
PT-2026-62635
Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft Enterprise FIN Cash Management version 9.2 Description An issue in the Cash Management component allows an unauthenticated attacker with network access via HTTP to compromise the system. Although the flaw is located within...
PT-2026-62633
Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft Enterprise FIN Pay/Bill Management version 9.2 Description A flaw in the Paybill Management component allows a low-privileged attacker with access to the infrastructure where the software executes to compromise the system. Th...
PT-2026-62974
Vulnerability in the PeopleSoft Enterprise SCM Order Management product of Oracle PeopleSoft component: Security. The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise PeopleSoft Enterprise SCM...
CVE-2026-50755
An issue in DayuanJiang next-ai-draw-io 0.4.13 allows a remote attacker to obtain sensitive information via the X-Forwarded-For header value...
PT-2026-63261
Name of the Vulnerable Software and Affected Versions Kibana affected versions not specified Description Missing authorization allows a user with limited feature privileges to access workflow execution outputs within their Kibana space. This occurs because the documented API does not properly...
PT-2026-62082
Name of the Vulnerable Software and Affected Versions DayuanJiang next-ai-draw-io version 0.4.13 Description A remote attacker can obtain sensitive information through the x-ai-provider component. Recommendations At the moment, there is no information about a newer version that contains a fix for...
PT-2026-62039
Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description An authenticated non-admin user can exploit a SQL injection flaw in the ticketing REST API to access sensitive data stored in the appliance database. SQL injecti...
PT-2026-62089
An issue in aiflowy = 2.1.2 allows a remote attacker to obtain sensitive information via the JobUtil.java file...
ROS-20260721-73-0041
The vulnerability of the Autofill function in Google Chrome and Microsoft Edge browsers is related to a lack of mechanisms for verifying the source of the data. Exploiting this vulnerability can allow attackers to disclose sensitive information remotely...
CVE-2026-52475
Cross Site Scripting vulnerability in aiflowy = 2.1.2 allows a remote attacker to obtain sensitive information via the UploadController.java file...
PT-2026-62961
Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft PeopleSoft Enterprise FIN Common Objects Brazil version 9.1 Description A flaw in the Purchasing component allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful exploitation can...