5945 matches found
CVE-2026-61124
The Runtime Tools component of Oracle WebCenter Portal (versions 12.2.1.4.0 and 14.1.2.0.0) has a network-reachable, easily exploitable flaw requiring only human interaction. An unauthenticated attacker can achieve high-integrity data modification or deletion and partial denial of service. No exp...
CVE-2026-61118
...
CVE-2026-61029
Oracle WebCenter Sites (component: WebCenter Sites) in Fusion Middleware versions 12.2.1.4.0 and 14.1.2.0.0 is vulnerable to a network-based attack. An unauthenticated remote attacker can compromise the application, potentially impacting additional products (scope change), with CVSS 9.0 critical ...
CVE-2026-61022
...
CVE-2026-60983
A high-severity (CVSS 7.7) vulnerability in Oracle WebCenter Content's Content Server component (versions 14.1.2.0.0 and 12.2.1.4.0) allows a low-privileged attacker with network HTTP access to read critical data. No public exploit code or active exploitation details are provided in the documents...
CVE-2026-60958
...
CVE-2026-60853
CVE-2026-60853 affects Helidon (Oracle Fusion Middleware), specifically the Imperative Web Server component, in supported version 3.2.20 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability, though it is rated as difficult to exploit (high attack complexity). ...
CVE-2026-60849
Oracle Unified Directory (OUD Core) versions 12.2.1.4.0 and 14.1.2.1.0 have a HIGH-severity (CVSS 8.5) LDAP network vulnerability exploitable by low-privileged attackers, enabling full product takeover with scope change; Oracle's August 2026 CPU advisory is the primary remediation source.
CVE-2026-60715
CVE-2026-60715 affects Oracle Identity Manager versions 12.2.1.4.0 and 14.1.2.1.0 in the OIM Legacy UI component. A low-privileged attacker with network HTTP access can exploit it (CVSS 8.8, HIGH) to fully compromise the application. No in-the-wild exploitation or exploit code is reported. Oracle...
CVE-2026-60592
CVE-2026-60592 affects the Cluster: NDB Operator component of Oracle MySQL (versions 8.0.0-8.0.47, 8.4.0-8.4.10, 9.7.0-9.7.1). An unauthenticated, network-accessible attacker can crash the cluster (DoS) and perform unauthorized data modification (insert/delete/update). CVSS 3.1 score is 8.2 (HIGH...
CVE-2026-60414
...
CVE-2026-74938
creationtimestamp| type| source ---|---|--- 2026-08-18 20:30:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtf2niepx22e 2026-08-19 04:45:16+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260819 2026-08-20 05:37:07+00:00| see...
CVE-2026-75874
creationtimestamp| type| source ---|---|--- 2026-08-18 20:30:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtf2nh52c42m 2026-08-19 04:47:19+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260819 2026-08-20 02:37:07+00:00| see...
CVE-2026-74990
creationtimestamp| type| source ---|---|--- 2026-08-18 20:20:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtf23mac2525 2026-08-19 03:20:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtfrkkkdx72j 2026-08-19 04:47:16+00:00| seen|...
CVE-2026-50774
creationtimestamp| type| source ---|---|--- 2026-08-18 20:20:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtf23kqd2z2c...
CVE-2026-16868
creationtimestamp| type| source ---|---|--- 2026-08-18 20:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mtezeerdxh2y...
CGA-HQF4-H7M5-8G92
Bulletin has no description...
CGA-F38V-44CX-4892
Bulletin has no description...