Oracle MySQL Vulnerability CVE-2026-101721

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Components Services. Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. Easily...

PT-2026-119631

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards component: Enterprise Infrastructure SEC. Supported versions that are affected are 9.2.0.0-9.2.26.5. Difficult to exploit vulnerability allows low privileged attacker with network access via JDENET to compromise JD...

PT-2026-119825

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards component: Business Logic Infra SEC. Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows low privileged attacker with network access via JDENET to compromise JD Edwards...

PT-2026-119847

Vulnerability in the iProcurement product of Oracle E-Business Suite component: E-Content Manager Catalog. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTPS to compromise iProcurement. Successful...

Oracle MySQL Server security vulnerabilities

Oracle MySQL Server versions 8.4.0 through 8.4.12, 9.7.0 through 9.7.3, and 26.7.0 through 26.7.1, as well as Oracle MySQL Cluster version 8.0.0 through 8.0.49, 8.4.0 through 8.4.12, 9.7.0 through 9.7.3, and 26.7.0 through 26.7.1, have security vulnerabilities. These vulnerabilities stem from...

Oracle Communications Unified Inventory Management security vulnerabilities

Oracle Communications Unified Inventory Management versions 7.5.0, 7.5.1, 7.6.0, 7.7.0, 7.8.0, and 8.0.1 have security vulnerabilities. These vulnerabilities stem from issues with the Security component, which may allow low-privilege attackers to log in and access infrastructure resources,...

Oracle Primavera P6 Enterprise Project Portfolio Management: Vulnerabilities in Permissions and Access Control

Versions of Oracle Primavera P6 Enterprise Project Portfolio Management from 21.12.0.0 to 21.12.21.9 and from 22.12.0.0 to 22.12.21.4, as well as versions from 23.12.0 to 23.12.20, 24.12.0 to 24.12.16, and 25.12.0 to 25.12.8, have vulnerabilities related to permission licensing and access control...

Oracle REST Data Services security vulnerabilities

Oracle REST Data Services versions 24.2.0 to 26.1.0 have security vulnerabilities. These vulnerabilities stem from issues with the Core components. They may allow high-privilege attackers to access through the HTTP network, enabling unauthorized updates, insertions, or deletions of certain...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 have security vulnerabilities. These vulnerabilities stem from issues with the SQR component. The vulnerabilities are difficult to exploit and require a high-privilege attacker to log in to the infrastructure managed by PeopleSoft...

Oracle Utilities Network Management System security vulnerabilities

The Oracle Utilities Network Management System versions 2.4.0.1.0 to 2.4.0.1.33, 2.5.0.1.0 to 2.5.0.1.18, 2.5.0.2.0 to 2.5.0.2.11, 2.6.0.1.0 to 2.6.0.1.12, 2.6.0.2.0 to 2.6.0.2.9, and 25.12.0.0.0 to 25.12.0.0.2 contain security vulnerabilities. These vulnerabilities stem from System Wide componen...

Oracle REST Data Services security vulnerabilities

Oracle REST Data Services versions 24.2.0 to 26.1.0 have security vulnerabilities. These vulnerabilities stem from issues with the Core component, which may allow high-privilege attackers to access through the HTTP network, enabling them to unauthorizedly create, delete, or modify critical data o...

Oracle MySQL Server security vulnerabilities

Security vulnerabilities exist in Oracle MySQL Server versions 8.4.0 through 8.4.12, 9.7.0 through 9.7.3, and 26.7.0 through 26.7.1; as well as in Oracle MySQL Cluster versions 8.0.0 through 8.0.49, 8.4.0 through 8.4.12, 9.7.0 through 9.7.3, and 26.7.0 through 26.7.1. These vulnerabilities stem...

EUVD-2025-28862

The Ocean Extra plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's oceanwplibrary shortcode in all versions up to, and including, 2.4.9 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

CVE-2026-87862

A flaw was found in curl. When importing HTTP Strict Transport Security HSTS cache records, loading a parent domain entry configured to include subdomains before a longer-lived subdomain entry silently drops the subdomain policy. Consequently, once the parent policy expires, curl fails to upgrade...

EUVD-2026-102611

The FluentCart A New Era of eCommerce – Faster, Lighter, and Simpler plugin for WordPress is vulnerable to generic SQL Injection via the 'products.variants.' parameter in all versions up to, and including, 1.7.0 due to insufficient escaping on the user supplied parameter and lack of sufficient...

Microsoft PowerShell 7.4.x < 7.4.21 / 7.5.x < 7.5.12 / 7.6.x < 7.6.7 Multiple Vulnerabilities (October 2026)

The version of Microsoft PowerShell installed on the remote host is 7.4.x prior to 7.4.21, 7.5.x prior to 7.5.12, or 7.6.x prior to 7.6.7. It is, therefore, affected by multiple vulnerabilities: - Reliance on untrusted inputs in a security decision in Microsoft PowerShell allows an unauthorized...

Microsoft Power Apps < 3.26085.3.0 Remote Code Execution (October 2026)

The Windows 'Microsoft Power Apps' app installed on the remote host is prior to version 3.26085.3.0. It is, therefore, affected by a remote code execution vulnerability: - Origin validation error in Microsoft Power Apps allows an authorized attacker to execute code over a network. CVE-2026-70213...

CVE-2026-108452

Improper limitation of a pathname to a restricted directory 'path traversal' in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

EUVD-2026-102464

Improper limitation of a pathname to a restricted directory 'path traversal' in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

WordPress FluentCart: A New Era of eCommerce SQL Injection Vulnerabilities

WordPress FluentCart – A New Era of eCommerce. Versions 1.7.0 and earlier have a SQL injection vulnerability. This vulnerability stems from insufficient escaping of the parameter ‘products.variants.’ and inadequate SQL query preparation. This could allow authenticated attackers to append addition...