CVE-2026-91590

A vulnerability exists in the Web Service API component of Oracle BI Publisher (part of Oracle Analytics). Affected versions include 8.2.0.0.0 and 26.01.0.0.0 . This easily exploitable flaw allows a low-privileged attacker with network access via HTTP to compromise the product, provided they can ...

CVE-2026-91453

A vulnerability exists in the Lightweight HTTP Server component of Oracle Java SE , Oracle GraalVM for JDK , and Oracle GraalVM Enterprise Edition . Affected versions include Oracle Java SE 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, and 27; Oracle GraalVM for JDK 17.0.20.1 and ...

CVE-2026-91451

A vulnerability exists in the Networking component of Oracle Java SE . Affected versions include Oracle Java SE: 8u503 , 8u503-perf , 11.0.32.1 , 17.0.20.1 , 21.0.12.1 , and 25.0.4.1 , as well as specific versions of Oracle GraalVM for JDK and Oracle GraalVM Enterprise Edition . This easily explo...

CVE-2026-87291

A vulnerability exists in the Networking component of Oracle Java SE (affected versions: 21.0.12.1, 25.0.4.1, and 27). An unauthenticated attacker with network access via multiple protocols can exploit this flaw to gain unauthorized read access to a subset of accessible data. Exploitation occurs ...

CVE-2026-87255

A vulnerability exists in the Compiler component of Oracle Java SE versions 25.0.4.1 and 27 . An unauthenticated attacker with network access via multiple protocols can exploit this vulnerability by supplying data to specific APIs—excluding Untrusted Java Web Start applications or applets (e.g., ...

CVE-2026-101841

A vulnerability exists in the Global Order Promising product of Oracle E-Business Suite , specifically within the Web Service component. Affected supported versions include 12.2.3 through 12.2.15 . This difficult-to-exploit vulnerability allows a low-privileged attacker with network access via HT...

cve-2023-34960

cve-2023-34960 chamilo soap api rce /webservices/additionalwebservices.php...

CVE-2023-23752

Joomla! options Arguments url: Root URL base path of the target Joomla! site, including the HTTP scheme, port, and root folder if necessary. --debug: Optional. If set, the script will print debug information, including the fetched data. --no-color: Optional. If set, disables colored output for...

PT-2026-119607

Vulnerability in Oracle Java SE component: Compiler. Supported versions that are affected are Oracle Java SE: 25.0.4.1 and 27. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attacks of this...

Azul Zulu: CVE-2026-87291: Vulnerability in Azul Zulu

Vulnerability in Oracle Java SE component: Networking. Supported versions that are affected are Oracle Java SE: 21.0.12.1, 25.0.4.1 and 27. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attacks ...

Azul Zulu: CVE-2026-87255: Vulnerability in Azul Zulu

Vulnerability in Oracle Java SE component: Compiler. Supported versions that are affected are Oracle Java SE: 25.0.4.1 and 27. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attacks of this...

Oracle E-Business Suite: CVE-2026-101841: Critical Patch Update

Vulnerability in the Global Order Promising product of Oracle E-Business Suite component: Web Service. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Global Order Promising. Whil...

Azul Zulu: CVE-2026-91451: Vulnerability in Azul Zulu

Vulnerability in Oracle Java SE component: Networking. Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1; Oracle GraalVM for JDK: 17.0.20.1 and 21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable...

PT-2026-119410

Vulnerability in Oracle Java SE component: Compiler. The supported version that is affected is Oracle Java SE: 26.0.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attacks of this vulnerabili...

Siemens APOGEE Controllers Stack-based Buffer Overflow (CVE-2026-102075)

The affected product web service does not properly validate user input in multipart handling. This could allow an unauthenticated remote attacker to cause a denial of service. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information...

Azul Zulu: CVE-2026-91452: Vulnerability in Azul Zulu

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Networking. Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK:...

Siemens APOGEE Controllers Stack-based Buffer Overflow (CVE-2026-102076)

The affected product web service does not properly validate user-supplied input in upload code. This could allow an unauthenticated remote attacker to cause a denial of service. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information...

CVE-2026-102073

A vulnerability has been identified in APOGEE MBC PPC BACnet All versions, APOGEE MBC PPC P2 Ethernet All versions, APOGEE MEC PPC BACnet All versions, APOGEE MEC PPC P2 Ethernet All versions, APOGEE PXC Compact BACnet All versions V3.5.7, APOGEE PXC Compact P2 Ethernet All versions V2.8.21, APOG...

CVE-2026-102076

A vulnerability exists in the web service of various APOGEE and TALON products, including MBC , MEC , PXC Compact , PXC Modular , and TC Compact/Modular models. The root cause is the improper validation of user-supplied input within the upload code, categorized as a stack-based buffer overflow (C...

CVE-2026-102073

A vulnerability exists in multiple APOGEE and TALON products, including APOGEE MBC (PPC), MEC (PPC), PXC Compact, PXC Modular, and TALON TC Compact/Modular across various BACnet and P2 Ethernet configurations. The root cause is an integer underflow (CWE-191) where the web service fails to properl...