CVE-disclosures

CVE-2026-3171 и CVE-2026-3170 – Archana M Официальные раскрытия уязвимостей от Archana M. 🔹 CVE-2026-3171 Продукт: SourceCodester / Patrick Mvuma Patients Waiting Area Queue Management System 1.0 Тип уязвимости: Межсайтовый скриптинг CWE-79 Затронутый файл: /queue.php Вектор атаки: Удалённый...

CVE-2025-60656

CVE-2025-60656 - Cross-Site Scripting XSS stocké sur la page d'accueil | ---|--- Chercheurs| DotAdrien Sévérité| 8.5 ÉLEVÉ CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N Logiciel| Script Pag Description Une vulnérabilité de Cross-Site Scripting XSS stocké existe sur la page d'accueil via le module ...

CVE-2015-3073

CVE-2015-3073 Cette vulnérabilité permet à des attaquants distants de contourner les restrictions API sur les installations vulnérables d'Adobe Reader. Une interaction utilisateur est nécessaire pour exploiter cette vulnérabilité, car la cible doit visiter une page malveillante ou ouvrir un fichi...

cve-2018-12798

Vulnérabilité de dépassement de tas et d'exécution de code à distance dans Adobe Acrobat Reader Vulnérabilité Vulnérabilité de restriction inappropriée des opérations dans les limites d'un tampon mémoire Description de la vulnérabilité Cette vulnérabilité permet à des attaquants distants d'exécut...

CVE-2026-87137

Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion component: Access and security. The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

CVE-2026-83247

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Forge. The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle...

CVE-2026-83206

Vulnerability in the Oracle Banking Corporate Lending Process Management product of Oracle Financial Services Applications component: Base. Supported versions that are affected are 14.5.0.0.0-14.9.0.0.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTT...

CVE-2026-83190

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM component: Server Infrastructure. Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Siebel CRM Deployment executes to...

EUVD-2026-79932

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.16. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle ...

CVE-2026-83294

CVE-2026-83294 affects Oracle Business Intelligence Enterprise Edition (component: Platform Security ) in Oracle Analytics. Supported versions 8.2.0.0.0 , 12.2.1.4.0 , and 26.01.0.0.0 are impacted. The vulnerability is easily exploitable by an unauthenticated attacker with local logon to the infr...

EUVD-2026-79558

Vulnerability in the Oracle Banking Corporate Lending Process Management product of Oracle Financial Services Applications component: Base. Supported versions that are affected are 14.5.0.0.0-14.9.0.0.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTT...

CVE-2026-83150

CVE-2026-83150 affects Oracle Application Testing Suite version 13.3.0.1 . The vulnerability allows an unauthenticated attacker with local access to the infrastructure where the suite executes to achieve full takeover of the application, impacting confidentiality, integrity, and availability. Exp...

CVE-2026-83004

Oracle WebCenter Enterprise Capture (Oracle Fusion Middleware), component Client Bundle , is affected in versions 12.2.1.4.0 and 14.1.2.0.0 . This difficult-to-exploit vulnerability allows a low-privileged attacker with local logon to compromise the product, with high complexity and required user...

CVE-2026-92176

pdfforge PDF Architect App Object Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of pdfforge PDF Architect. User interaction is required to exploit this vulnerability in that the target must...

CVE-2026-56974

The libpixelimsmedia component in Pixel devices is vulnerable to an out-of-bounds write due to improper input validation in Start of AudioRtpPayloadEncoderNode.cpp . This flaw could allow for remote code execution without requiring additional execution privileges, although user interaction is req...

CVE-2026-92176 pdfforge PDF Architect App Object Out-Of-Bounds Read Remote Code Execution Vulnerability

pdfforge PDF Architect App Object Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of pdfforge PDF Architect. User interaction is required to exploit this vulnerability in that the target must...

CVE-2026-92177 pdfforge PDF Architect PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

pdfforge PDF Architect PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of pdfforge PDF Architect. User interaction is required to exploit this vulnerability in that the target...

CVE-2026-92177

pdfforge PDF Architect is affected by an out-of-bounds write vulnerability in its PDF file parsing functionality. The root cause is a lack of proper validation of user-supplied data, which allows a write past the end of an allocated object. A remote attacker can leverage this flaw to execute arbi...

CVE-2026-92178 pdfforge PDF Architect PDF File Parsing Memory Corruption Remote Code Execution Vulnerability

pdfforge PDF Architect PDF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of pdfforge PDF Architect. User interaction is required to exploit this vulnerability in that the target mu...

CVE-2026-92178 pdfforge PDF Architect PDF File Parsing Memory Corruption Remote Code Execution Vulnerability

pdfforge PDF Architect PDF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of pdfforge PDF Architect. User interaction is required to exploit this vulnerability in that the target mu...