CVE-2026-60338

Vulnerability in the Oracle Project Manufacturing product of Oracle E-Business Suite component: PJM Command Center. The supported version that is affected is V16. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Project Manufacturing...

CVE-2026-60321

Vulnerability in the Oracle Project Manufacturing product of Oracle E-Business Suite component: PJM Command Center. The supported version that is affected is V16. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Project Manufacturing...

CVE-2026-60165

Vulnerability in the Oracle Cost Management product of Oracle E-Business Suite component: Enterprise Command Center. The supported version that is affected is V16. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Cost Management...

CVE-2026-10680

The Classic BR/EDR L2CAP signaling handlers l2capbrconfreq and l2capbrconfrsp in subsys/bluetooth/host/classic/l2capbr.c validated the minimum command size against buf-len the bytes remaining in the whole received PDU instead of len the per-command data length from the L2CAP signaling header...

Exploit for Command Injection in Microsoft

🔑 YellowKey-Bitlocker-CVE-2026-45585 - Manage your BitLocker r...

GitPython: Environment-variable exfiltration via os.path.expandvars() on Repo.clone_from() URL

Summary Repo.clonefrom passes the caller-supplied remote URL through Git.polishurl, which on every non-Cygwin platform calls os.path.expandvars on the URL before handing it to git clone. An attacker who controls the URL argument — the documented use case for clonefrom in "import repository from...

GHSA-RWJ8-PGH3-R573 GitPython: Environment-variable exfiltration via os.path.expandvars() on Repo.clone_from() URL

Summary Repo.clonefrom passes the caller-supplied remote URL through Git.polishurl, which on every non-Cygwin platform calls os.path.expandvars on the URL before handing it to git clone. An attacker who controls the URL argument — the documented use case for clonefrom in "import repository from...

CVE-2026-62515

Vulnerability in the Oracle Advanced Planning Command Center product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Orac...

CVE-2026-62515

CVE-2026-62515 affects Oracle E-Business Suite’s Oracle Advanced Planning Command Center (Internal Operations) with affected versions 12.2.3–12.2.15. The CVSS 3.1 base score is 7.6 (Confidentiality and Integrity impacts). The vulnerability is exploitable over HTTP with network access by a high-pr...

CVE-2026-62468

Vulnerability in the Oracle Human Resources product of Oracle E-Business Suite component: Enterprise Command Center. Supported versions that are affected are 12.2.14-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Human...

CVE-2026-62469

The CVE-2026-62469 entry concerns Oracle E-Business Suite, Oracle Human Resources product (Enterprise Command Center) affecting 12.2.14–12.2.15. The vulnerability permits a low-privilege user with logon to the infrastructure running Oracle Human Resources to compromise the application, enabling u...

CVE-2026-62468

CVE-2026-62468 affects Oracle E-Business Suite HR (Enterprise Command Center) with affected versions 12.2.14–12.2.15. The vulnerability is exploitable over the network (HTTP) by a low-privileged attacker and can lead to unauthorized creation/modification/deletion of data or unauthorized data acce...

CVE-2026-62469

Vulnerability in the Oracle Human Resources product of Oracle E-Business Suite component: Enterprise Command Center. Supported versions that are affected are 12.2.14-12.2.15. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Human...

CVE-2026-60763

CVE-2026-60763 affects Oracle Applications Manager in Oracle E-Business Suite (component: Command Line - RapidClone). Affected versions: 12.2.3–12.2.15. The vulnerability allows an unauthenticated attacker with access to the infrastructure where Oracle Applications Manager runs to compromise the ...

CVE-2026-60581

CVE-2026-60581 affects Oracle E-Business Suite, Oracle Enterprise Command Center Framework (Core), version V16. An unauthenticated attacker with access to the physical network segment attached to the hardware running the framework can compromise and potentially take over the Oracle Enterprise Com...

CVE-2026-60582

The CVE-2026-60582 affecting Oracle E-Business Suite’s Oracle Enterprise Command Center Framework (Core) in version V16 is exploitable by a low-privilege, network-accessible attacker via HTTP, leading to unauthorized data creation/deletion/modification, unauthorized data read, and potential compl...

CVE-2026-60580

CVE-2026-60580 affects Oracle E-Business Suite’s Oracle Enterprise Command Center Framework (Core) in version V16. The vulnerability allows an unauthenticated attacker with access to the physical network segment connected to the hardware hosting the framework to compromise it, potentially leading...

CVE-2026-60577

CVE-2026-60577 concerns Oracle E-Business Suite’s Oracle Enterprise Command Center Framework, Core component, in the V16 line. The vulnerability enables a low-privileged, network-accessible attacker (via HTTP) to compromise the Enterprise Command Center Framework, potentially granting unauthorize...

CVE-2026-60579

The CVE affects Oracle E-Business Suite's Oracle Enterprise Command Center Framework (Core) with affected version V16. The vulnerability allows an unauthenticated attacker with access to the physical communication segment to compromise the framework. Impact includes unauthorized creation, deletio...

CVE-2026-60578

CVE-2026-60578 is a vulnerability in the Oracle Enterprise Command Center Framework (Oracle E-Business Suite, Core). Affected product version is V16. The flaw allows a high-privileged attacker with network access over HTTP to compromise the Oracle Enterprise Command Center Framework, with potenti...