12850 matches found
CVE-2026-21978
...
CVE-2026-21971
...
CVE-2026-21962
...
CVE-2026-21960
CVE-2026-21960 affects Oracle E-Business Suite Applications DBA (Java utils) for versions 12.2.3–12.2.15. The vulnerability enables a high-privileged, network-accessible attacker (via HTTP) to compromise Oracle Applications DBA, potentially causing unauthorized creation/deletion/modification of d...
CVE-2026-21946
...
CVE-2026-21944
...
CVE-2026-21937
...
CVE-2026-21938
CVE-2026-21938 covers a vulnerability in Oracle PeopleSoft Enterprise PeopleTools (Portal component). Affected are Oracle PeopleSoft PeopleTools versions 8.60, 8.61, and 8.62. The flaw allows an unauthenticated attacker with network access over HTTP to compromise the system, with user interaction...
CVE-2026-21928
...
CVE-2026-21926
CVE-2026-21926 affects Oracle Siebel CRM Deployment (Server Infrastructure) for Siebel CRM versions 17.0–25.2. An unauthenticated attacker with network access via TLS can exploit this to cause a hang or a frequent crash (complete DOS), as described in multiple sources. CVSS v3.1 base score is 7.5...
CVE-2026-21636
A flaw in Node.js's permission model allows Unix Domain Socket UDS connections to bypass network restrictions when --permission is enabled. Even without --allow-net, attacker-controlled inputs such as URLs or socketPath options can connect to arbitrary local sockets via net, tls, or undici/fetch...
AZL-74988 CVE-2025-55130 affecting package nodejs for versions less than 20.14.0-13
A flaw in Node.js’s Permissions model allows attackers to bypass --allow-fs-read and --allow-fs-write restrictions using crafted relative symlink paths. By chaining directories and symlinks, a script granted access only to the current directory can escape the allowed path and read sensitive files...
ALPINE-CVE-2025-55130
A flaw in Node.js’s Permissions model allows attackers to bypass --allow-fs-read and --allow-fs-write restrictions using crafted relative symlink paths. By chaining directories and symlinks, a script granted access only to the current directory can escape the allowed path and read sensitive files...
EUVD-2026-3329
HackerOne community member Faraz Ahmed PakCyberbot has reported a format string injection in the Revive Adserver settings. When specific character combinations are used in a setting, the admin user console could be disabled due to a fatal PHP error...
CVE-2026-21636
A flaw in Node.js's permission model allows Unix Domain Socket UDS connections to bypass network restrictions when --permission is enabled. Even without --allow-net, attacker-controlled inputs such as URLs or socketPath options can connect to arbitrary local sockets via net, tls, or undici/fetch...
CVE-2025-55130
A flaw in Node.js’s Permissions model allows attackers to bypass --allow-fs-read and --allow-fs-write restrictions using crafted relative symlink paths. By chaining directories and symlinks, a script granted access only to the current directory can escape the allowed path and read sensitive files...
CVE-2025-55130
A flaw in Node.js’s Permissions model allows attackers to bypass --allow-fs-read and --allow-fs-write restrictions using crafted relative symlink paths. By chaining directories and symlinks, a script granted access only to the current directory can escape the allowed path and read sensitive files...
CVE-2025-49370
creationtimestamp| type| source ---|---|--- 2026-01-20 20:20:39+00:00| seen| Telegram/mSPlEBL-a29z-WQm9y89cGC0YWGO8jZk7j10EPmUhtgK4...