307413 matches found
CVE-2026-82891 IBM Guardium Data Protection is affected by a security vulnerability
IBM Guardium Data Protection 12.1, and 12.2 could allow a remote attacker to obtain sensitive information due to use of a hard-coded cryptographic key...
CVE-2026-82891
IBM Guardium Data Protection versions 12.1 and 12.2 are affected by a security vulnerability (CVE-2026-82891 ) caused by the use of a hard-coded cryptographic key (CWE-321). This flaw could allow a remote attacker to obtain sensitive information . To remediate this issue, IBM encourages customers...
dotnet10.0: dotnet9.0: dotnet: dotnet8.0: .NET Denial of Service Vulnerability
Uncontrolled recursion in .NET allows an unauthorized attacker to deny service over a network...
dotnet10.0: dotnet9.0: dotnet: dotnet8.0: .NET Denial of Service Vulnerability
Uncontrolled recursion in .NET allows an unauthorized attacker to deny service over a network...
dotnet10.0: dotnet9.0: dotnet: dotnet8.0: .NET Denial of Service Vulnerability
Uncontrolled recursion in .NET allows an unauthorized attacker to deny service over a network...
CVE-2026-113731
djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. From 0.9.0 until 1.0.10, 1.1.7, 1.2.4, and 1.3.0rc8, the findhandlersfortemplate MCP tool in python/djust/mcp/server.py accepts an existing absolute templatepath and reads it without...
Malicious code in rootaccessxvv-bbmarker (npm)
Source: amazon-inspector 126c6e67bc80ed62f5e620ef9a8ce11ca39653348a59bc8d7a1d0cef76f72a02 package.json declares a postinstall lifecycle script that runs on npm install and POSTs installer host identifiers to a hardcoded webhook.site collector at...
CVE-2026-91662
A vulnerability exists in the Java Based Agent component of Oracle Essbase version 21.8.3.0.0 . This difficult-to-exploit flaw allows a low-privileged attacker with local infrastructure access to compromise Oracle Essbase, potentially leading to unauthorized access to critical data or the ability...
CVE-2026-91649
A vulnerability exists in the Java Based Agent component of Oracle Essbase version 21.8.3.0.0 . A high-privileged attacker with logon access to the infrastructure where Oracle Essbase executes can exploit this vulnerability to compromise the software. Successful exploitation may result in unautho...
CVE-2026-91633
A vulnerability exists in the Security component of Oracle Essbase version 21.8.3.0.0 . This easily exploitable flaw allows a high-privileged attacker with infrastructure access to compromise the system, potentially resulting in unauthorized access to critical data or complete access to all acces...
CVE-2026-91629
The Oracle Communications Billing and Revenue Management product (component: Platform ) is affected by a difficult-to-exploit vulnerability in versions 15.0.0.0.0 , 15.0.1.0.0 , 15.1.0.0.0 , and 15.2.0.0.0 . A low-privileged attacker with infrastructure logon access can compromise the system, pot...
CVE-2026-91628
A vulnerability exists in the BRM Server component of the Oracle Communications Billing and Revenue Management product, specifically affecting versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0, and 15.2.0.0.0 . A low-privileged attacker with access to the infrastructure can exploit this vulnerability t...
CVE-2026-91627
A vulnerability exists in the Platform component of Oracle Communications Billing and Revenue Management (versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0, and 15.2.0.0.0). A low privileged attacker with access to the underlying infrastructure can exploit this flaw to compromise the product, potential...
CVE-2026-91617
A vulnerability exists in the Remote Diagnostic Agent component of Oracle Middleware Common Libraries and Tools within Oracle Fusion Middleware . Affected versions include 12.2.1.4.0 , 14.1.1.0.0 , 14.1.2.0.0 , and 15.1.1.0.0 . A low-privileged attacker with local access to the infrastructure can...
CVE-2026-91614
A vulnerability exists in the Security component of Oracle Communications Unified Inventory Management (affected versions: 7.5.0, 7.5.1, 7.6.0, 7.7.0, 7.8.0, and 8.0.1 ). A low-privileged attacker with logon access to the infrastructure where the software executes can easily exploit this flaw to ...
CVE-2026-91613
A vulnerability exists in the Security component of the Oracle Communications Unified Inventory Management product, affecting versions 7.5.0, 7.5.1, 7.6.0, 7.7.0, 7.8.0, and 8.0.1. A low-privileged attacker with logon access to the infrastructure can exploit this vulnerability to compromise the s...
CVE-2026-91557
A vulnerability exists in the BI Foundation component of Oracle Business Intelligence Enterprise Edition within Oracle Analytics. Specifically, version 12.2.1.4.0 is affected. This is a difficult to exploit vulnerability that allows a low privileged attacker with local access to the infrastructur...
CVE-2026-91559
The PeopleSoft Enterprise FIN Manufacturing Brazil product (version 9.1 ) contains a vulnerability in the Integration component. A low-privileged attacker with access to the infrastructure where the software executes can exploit this flaw to compromise the system. Successful exploitation may lead...
CVE-2026-91562
A vulnerability exists in the Inventory component of Oracle PeopleSoft Enterprise FIN Inventory Brazil (version 9.1 ). This flaw allows a low-privileged attacker with access to the underlying infrastructure to compromise the product, potentially leading to unauthorized update, insert, or delete a...
CVE-2026-91553
A vulnerability exists in the Product Configurator component of Oracle PeopleSoft Enterprise FIN Product Configurator Brazil (version 9.1 ). This easily exploitable flaw allows a low-privileged attacker with local infrastructure access to compromise the product. Successful exploitation can lead t...