PT-2026-93020

Name of the Vulnerable Software and Affected Versions Oracle Hyperion Financial Management version 11.2.26.0.000 Description A security flaw in the Security component allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful exploitation can lead to...

PT-2026-93012

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion component: Security. The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows high privileged attacker with network access via Oracle Net to compromise Oracle Hyperion...

PT-2026-93088

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox version 7.2.16 Description A flaw in the Core component of Oracle VM VirtualBox on Windows hosts allows a low-privileged attacker with access to the infrastructure where the software executes to compromise the system...

PT-2026-93094

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox version 7.2.16 Description A flaw in the Core component allows a low-privileged attacker with access to the infrastructure where the software executes to compromise the system. Exploitation is difficult and requires human...

PT-2026-92679

Name of the Vulnerable Software and Affected Versions Oracle Database Server versions 19.3 through 19.32 Oracle Database Server versions 21.3 through 21.23 Oracle Database Server versions 23.4.0 through 23.26.3 Description A flaw exists in the Oracle XML Developers Kit component. A low privileged...

PT-2026-93057

Name of the Vulnerable Software and Affected Versions Oracle Hyperion Financial Management version 11.2.26.0.000 Description A security flaw in the Security component allows a low privileged attacker with network access via HTTP to compromise the system. Successful exploitation can lead to...

PT-2026-92795

Name of the Vulnerable Software and Affected Versions Oracle Database Server versions 19.3 through 19.32 Oracle Database Server versions 21.3 through 21.23 Oracle Database Server versions 23.4.0 through 23.26.3 Description An issue exists in the Oracle Text component of Oracle Database Server. A...

CVE-2026-51133

A Cross-Site Scripting (XSS) vulnerability exists in za-internet GmbH C-MOR Video Surveillance version 6.0104 and below . The flaw allows a remote attacker to execute arbitrary client-side code by enticing an authenticated user to click crafted URLs. The vulnerability is triggered via the size pa...

PT-2026-92483

Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via T3, IIOP to compromise Oracle Identity...

PT-2026-92815

Name of the Vulnerable Software and Affected Versions Oracle Business Intelligence Enterprise Edition version 12.2.1.4.0 Description A flaw in the FNDN component of the Oracle Business Intelligence Enterprise Edition allows a low privileged attacker with access to the infrastructure where the...

EUVD-2026-78940

BharatMLStack up to and including 1.3.0 is vulnerable to Cross Site Scripting XSS via the component Trufflebox UI trufflebox-ui in ExpressionViewModal.jsx...

PT-2026-92482

Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Identity Manager...

PT-2026-92622

Vulnerability in the Oracle Forms product of Oracle Fusion Middleware component: Forms Services, C/S, Charmode. Supported versions that are affected are 12.2.1.19.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

PT-2026-93090

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox version 7.2.16 Description A flaw in the Core component of Oracle VM VirtualBox on Windows hosts allows a low-privileged attacker with access to the infrastructure where the software executes to compromise the system...

PT-2026-92732

Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM component: Workflow. Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel CRM Development. Successful attacks o...

ROS-20260915-73-0150

The vulnerability of the Proxy component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

ROS-20260915-73-0077

The vulnerability of the Payments component in Google Chrome and Microsoft Edge relates to the user interface’s false representation of critical information. Exploiting this vulnerability can allow an attacker to compromise data integrity through a specially created HTML page...

ROS-20260915-73-0118

The vulnerability of the History component in Google Chrome and Microsoft Edge is related to a lack of mechanisms for verifying the source of the data. Exploiting this vulnerability allows an attacker to manipulate data integrity through a specially created HTML page...

PT-2026-91965

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 156 Firefox ESR versions prior to 115.41 Firefox ESR versions prior to 140.16 Firefox ESR versions prior to 153.3 Thunderbird versions prior to 156 Thunderbird versions prior to 140.16 Thunderbird versions prior to...

CVE-2026-92029: Use After Free

Use-after-free in the SVG component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3...