8665 matches found
CVE-2026-47237 Kubeflow Community Distribution: Overly Permissive Istio Permissions Allows Kubeflow Authorization Token Stealing
Kubeflow Community Distribution helps users to install Kubeflow Platform in popular Kubernetes clusters. Prior to version 26.03-rc.1, a Kubeflow setup based on the official manifests or most other packaged Kubeflow distributions is vulnerable to authorization token stealing from any user of the...
GHSA-23HP-3JRH-7FPW vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce, opensearch-dashboards-fips, prism, saf, code-server, graalvm, wazuh-dashboard-fips, pulumi, wazuh-dashboard, kibana, opensearch-dashboards, sqlpad, gitlab-rails-ce-fips, actions-runner, kubeflow-centraldashboard, lerna, npm, homepage...
GHSA-XV26-6W52-CPH6 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce, gitlab-rails-ce-fips, arangodb...
PT-2026-62748
Name of the Vulnerable Software and Affected Versions Oracle Trading Community versions 12.2.3 through 12.2.12 Description An issue exists in the Party Search UI component of the Oracle Trading Community product within Oracle E-Business Suite. A high privileged attacker with network access via HT...
PT-2026-62632
Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft PeopleSoft Enterprise CS Campus Community version 9.2.38 Description A flaw exists in the Integration and Interfaces component of the PeopleSoft Enterprise CS Campus Community product. A low privileged attacker with network...
PT-2026-62649
Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft PeopleSoft Enterprise CS Campus Community version 9.2.38 Description A security flaw in the Security component allows an unauthenticated attacker with network access via HTTP to compromise the system. This can lead to...
PT-2026-62654
Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft PeopleSoft Enterprise CS Campus Community version 9.2.38 Description A security flaw in the Security component allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful exploitation...
📄 WordPress Community Events 1.5.1 Unauthenticated Blind SQL Injection
WordPress Community Events plugin version 1.5.1 contains an unauthenticated time-based blind SQL injection vulnerability. A remote attacker can inject SQL through the vulnerable parameter and infer database contents through response timing. This proof of concept exploit demonstrates the vulnerabl...
PT-2026-62652
Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft Enterprise CS Campus Community version 9.2.38 Description A flaw in the Person Data component allows a low privileged attacker with network access via HTTP to compromise the system. Successful exploitation can lead to...
PT-2026-62778
Name of the Vulnerable Software and Affected Versions Oracle Trading Community versions 12.2.3 through 12.2.15 Description An issue exists in the Party Search UI component of the Oracle Trading Community product. A low privileged attacker with network access via HTTP can exploit this flaw to...
PT-2026-62647
Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft Enterprise CS Campus Community version 9.2.38 Description A flaw in the Communication component allows a low privileged attacker with network access via HTTPS to compromise the system. Successful exploitation can lead to...
PT-2026-62991
Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft PeopleSoft Enterprise CS Campus Community version 9.2.38 Description A security flaw exists in the Security component that allows an unauthenticated attacker with access to the physical communication segment attached to the...
PT-2026-62642
Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft PeopleSoft Enterprise CS Campus Community version 9.2.38 Description A security flaw in the Security component allows a low-privileged attacker with network access via HTTP to compromise the system. Successful exploitation ca...
PT-2026-62653
Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft PeopleSoft Enterprise CS Campus Community version 9.2.38 Description A security flaw in the Security component allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful exploitation...
PT-2026-62648
Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft PeopleSoft Enterprise CS Campus Community version 9.2.38 Description A security flaw in the Security component allows an unauthenticated attacker with network access via HTTPS to compromise the system. Successful exploitation...
PT-2026-62655
Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft PeopleSoft Enterprise CS Campus Community version 9.2.38 Description A security flaw in the Security component allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful exploitation...
CVE-2026-26081
HAProxy Community Edition 3.0 through 3.3 before 3.3.3 lacks a length check for the NEWTOKEN format. HAProxy Enterprise and ALOHA are also affected...
CVE-2026-26080
HAProxy Community Edition 3.2.x through 3.3.x before 3.3.3 can enter a loop or crash because varint is mishandled. HAProxy Enterprise and ALOHA are also affected...
