3901 matches found
CVE-2026-83026
Oracle Identity Manager Connector (Core component) of Oracle Fusion Middleware , versions 12.2.1.4.0 and 14.1.2.1.0 , is vulnerable to a difficult-to-exploit attack by an unauthenticated attacker with access to the physical communication segment attached to the hardware where the connector execut...
EUVD-2026-79354
Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment...
CVE-2026-83022
Oracle WebCenter Enterprise Capture (component: Client Bundle ) in Oracle Fusion Middleware versions 12.2.1.4.0 and 14.1.2.0.0 is affected by a difficult-to-exploit vulnerability that allows an unauthenticated attacker with access to the physical communication segment to compromise the product. S...
EUVD-2026-79350
Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware component: Client Bundle. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication...
CVE-2026-76707
HPE Networking EdgeConnect SD-WAN Gateways are affected by an unauthenticated information disclosure vulnerability that allows an adjacent attacker to view some system memory contents. Successful exploitation could reveal insights into internal services and workflows , increasing the risk of unau...
EUVD-2026-79233
A vulnerability in HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated adjacent attacker to view some system memory contents. Successful exploitation could allow an attacker to gain insight into internal services and workflows, increasing the risk of unauthorized access and...
CVE-2026-76707 Unauthenticated Information Disclosure in HPE Networking EdgeConnect SD-WAN Gateways
A vulnerability in HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated adjacent attacker to view some system memory contents. Successful exploitation could allow an attacker to gain insight into internal services and workflows, increasing the risk of unauthorized access and...
CVE-2026-76699
CVE-2026-76699 is a buffer overflow in a system service within the underlying operating system of HPE Networking EdgeConnect SD-WAN Gateways . An unauthenticated adjacent attacker with high attack complexity can crash the service, causing temporary disruption to network operations. The CVSS 3.1 s...
EUVD-2026-79225
A buffer overflow vulnerability exists in a system service within the underlying operating system of HPE Networking EdgeConnect SD-WAN Gateways that could allow an unauthenticated adjacent attacker to cause a denial-of-service. Successful exploitation could allow an attacker to crash the impacted...
EUVD-2026-79222
A vulnerability in HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated adjacent attacker to conduct a denial of service attack. Successful exploitation could allow an attacker to crash the system, preventing it from rebooting without manual intervention and disrupting networ...
EUVD-2026-79218
A vulnerability in HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated adjacent attacker to obtain limited information from memory and disrupt the normal operation of the affected service. Successful exploitation could result in a denial of service system crash or the...
CVE-2026-76692 Unauthenticated Adjacent Information Disclosure and Denial-of-Service Vulnerability in HPE Networking EdgeConnect SD-WAN Gateways
A vulnerability in HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated adjacent attacker to obtain limited information from memory and disrupt the normal operation of the affected service. Successful exploitation could result in a denial of service system crash or the...
CVE-2026-76692
A vulnerability in HPE Networking EdgeConnect SD-WAN Gateways allows an unauthenticated adjacent attacker to obtain uninitialized stack memory from the gateway and disrupt normal service operation. Successful exploitation results in either information disclosure (limited memory contents) or denia...
CVE-2026-76679
Multiple denial-of-service vulnerabilities in HPE Networking EdgeConnect SD-WAN Gateways allow an unauthenticated adjacent attacker to crash the system. Successful exploitation prevents the gateway from rebooting without manual intervention , disrupting network operations. The CVSS 3.1 score is 8...
EUVD-2026-79205
Vulnerabilities in HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated adjacent attacker to conduct denial-of-service attacks. Successful exploitation could allow an attacker to crash the system, preventing it from rebooting without manual intervention and disrupting network...
CVE-2026-76676
HPE EdgeConnect SD-WAN Gateways are affected by buffer overflow vulnerabilities in the underlying operating system that can be exploited by an unauthenticated attacker on an adjacent network with low complexity and no user interaction. Successful exploitation allows execution of arbitrary code as...
EUVD-2026-79202
Buffer overflow vulnerabilities exist in the underlying operating system of EdgeConnect SD-WAN Gateways that could allow an unauthenticated adjacent attacker to execute arbitrary code if certain preconditions outside of the attacker's control are met. Successful exploitation could allow an attack...
EUVD-2026-78980
In Cellular Modem, there is a possible denial of service due to improper input validation. This could lead to remote proximal/adjacent denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-59160
Yeger is a monorepo for npm packages maintained under the yeger scope. Prior to 2.8.9, the turbo-graph package starts its embedded Next.js server from packages/turbo-graph/src/index.ts on all interfaces, including 0.0.0.0:29312 by default, while the GET handler for /api/run in...
mediatek-wlan-heap-overflow-cve-2026-20452-filogic-router-rce
CVE-2026-20452 — MediaTek WLAN AP ヒープオーバーフロー PoC CVE-2026-20452 の概念実証エクスプロイト。MediaTek の WLAN アクセスポイントドライバーにおけるヒープベースのバッファオーバーフローです。 脆弱性 CVE : CVE-2026-20452 CVSS : 8.0 HIGH CWE : CWE-122 — ヒープベースのバッファオーバーフロー サブコンポーネント : wlan AP ドライバー 攻撃ベクトル : 隣接ネットワーク Wi-Fi — 関連付けられたクライアント 影響を受ける : MT7615, MT7915...