44272 matches found
PT-2026-77787
Name of the Vulnerable Software and Affected Versions Oracle Yard Management versions 12.2.3 through 12.2.15 Description A flaw in the Internal Operations component of Oracle Yard Management allows a low privileged attacker with network access via HTTP to compromise the system. Successful...
PT-2026-78032
Name of the Vulnerable Software and Affected Versions Oracle Agile PLM version 9.3.6 Description An issue exists in the Gantt Chart component of the Oracle Agile PLM product within Oracle Supply Chain. A low privileged attacker with access to the infrastructure where the software executes can...
PT-2026-78062
Name of the Vulnerable Software and Affected Versions Oracle MySQL Connector/ODBC version 26.7.0 Description An unauthenticated attacker with access to the infrastructure where the software executes can compromise the system. This issue requires human interaction from a person other than the...
PT-2026-77642
Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware component: Security and Authentication. The supported version that is affected is 12.2.1.19.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via SMTP to compromise Oracle Repor...
PT-2026-77937
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion component: Security. The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial...
CVE-2026-63337: Use of Externally-Controlled Input to Select Classes or Code
The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.33.0, com.rabbitmq.tools.jsonrpc.ProcedureDescription receives a javaReturnType value in an untrusted system.describe response and passes it through JSONUtil.tryFill,...
PT-2026-77351
Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0 Description A flaw in the Core component of Oracle Fusion Middleware allows a low privileged attacker with network access via HTTP to compromise the server...
PT-2026-78019
Name of the Vulnerable Software and Affected Versions Oracle Commerce Guided Search / Oracle Commerce Experience Manager version 11.4.0 Description A flaw in the Endeca Application Controller component allows a low-privileged attacker with access to the infrastructure where the software executes ...
PT-2026-78112
Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox version 7.2.14 Description An issue in the Core component allows an unauthenticated attacker with access to the infrastructure where the software executes to compromise the system. Exploitation requires human interaction a...
PT-2026-78088
Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle HRMS US versions 12.2.3 through 12.2.15 Description A flaw in the US Payroll Tax Issues component allows a low privileged attacker with access to the infrastructure where the software executes to compromise the...
PT-2026-77448
Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware Oracle Identity Manager Connector version 12.2.1.4.0 Oracle Fusion Middleware Oracle Identity Manager Connector version 14.1.2.1.0 Description A flaw in the Core component of the Oracle Identity Manager Connector allow...
PT-2026-77687
Name of the Vulnerable Software and Affected Versions Oracle Essbase version 21.8.1.0.0 Description A flaw in the Calculator component allows a low privileged attacker with network access via HTTP to compromise the system. Successful exploitation can lead to a full takeover of the application...
PT-2026-77598
Name of the Vulnerable Software and Affected Versions Oracle Hyperion Infrastructure Technology version 11.2.25.0.000 Description An issue exists in the Installation and Configuration component that allows a high privileged attacker with local access to the infrastructure to compromise the system...
CVE-2026-17639
HP Smart Tank All-in-One printers are vulnerable to denial of service via concurrent HTTP requests; no specific models or patch versions are provided. CVSS 4.0 scores MEDIUM (6.9). Exploitation status is not reported. See HP advisory HPSBPI04142 for details. Monitor for vendor updates. No exploit...
CVE-2026-12629 PL011 UART error interrupts never cleared, enabling an external-peer interrupt-storm denial of service
The ARM PL011 UART driver in drivers/serial/uartpl011.c fails to acknowledge receive error interrupts. On the PL011, the framing, parity, break, and overrun error interrupts PL011IMSCERRORMASK are cleared only by writing the interrupt-clear register UARTICR; reading the data register clears the R...
CVE-2026-58560
Null pointer dereference issue in the image codec module. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2026-58561
Null pointer dereference issue in the image codec module. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2026-49303
Permission control vulnerability in the notification module. Impact: Successful exploitation of this vulnerability may affect availability...