6935 matches found
CVE-2026-83164
Vulnerability in the Oracle Customer Interaction History product of Oracle E-Business Suite component: Outcome-Result. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Custome...
CVE-2026-83166
Vulnerability in the Oracle Customer Interaction History product of Oracle E-Business Suite component: Outcome-Result. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Custome...
CVE-2026-83166
Oracle Customer Interaction History (component Outcome-Result ) in Oracle E-Business Suite versions 12.2.3 through 12.2.15 is vulnerable to an easily exploitable network-based attack via HTTP. A low-privileged attacker can exploit this vulnerability to gain unauthorized access to critical data , ...
CVE-2026-83165
CVE-2026-83165 affects the User Interface component of the Oracle Customer Interaction History product within Oracle E-Business Suite, supporting versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTPS can exploit this vulnerability to achieve full takeover of th...
EUVD-2026-79492
Vulnerability in the Oracle Customer Interaction History product of Oracle E-Business Suite component: User Interface. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle Custom...
EUVD-2026-79493
Vulnerability in the Oracle Customer Interaction History product of Oracle E-Business Suite component: Outcome-Result. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Custome...
CVE-2026-83164
Oracle E-Business Suite 's Customer Interaction History product (component: Outcome-Result ) is affected in supported versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability with low complexity and no user interaction to achieve take...
EUVD-2026-79491
Vulnerability in the Oracle Customer Interaction History product of Oracle E-Business Suite component: Outcome-Result. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Custome...
CVE-2026-12258
Inadequate access control in Hiperdino’s REST v1.0 API. The public endpoint ‘customer/check’ could allow an authenticated attacker to enter a telephone number or an email address. When the value entered belongs to a registered customer, the service returns the associated information email address...
Magento-APSB22-48-Security-Patches
Se han publicado los parches oficiales de Magento:Documentación de Magento Estos parches abordan los mismos problemas de seguridad que este repositorio, excepto que hemos añadido algunas correcciones para versiones antiguas de Magento. Parches de seguridad para APSB22-48 Este repositorio contiene...
CVE-2026-12258
CVE-2026-12258 is an information disclosure vulnerability in Hiperdino's REST v1.0 API . The public endpoint customer/check requires only a static bearer token for authentication, with no per-user credentials, rate limiting, or generic error handling. An attacker holding this token can submit tel...
EUVD-2026-77435
Inadequate access control in Hiperdino’s REST v1.0 API. The public endpoint ‘customer/check’ could allow an authenticated attacker to enter a telephone number or an email address. When the value entered belongs to a registered customer, the service returns the associated information email address...
CVE-2026-12258 Inadequate access control in the Hiperdino REST API
Inadequate access control in Hiperdino’s REST v1.0 API. The public endpoint ‘customer/check’ could allow an authenticated attacker to enter a telephone number or an email address. When the value entered belongs to a registered customer, the service returns the associated information email address...
EUVD-2026-77319
A vulnerability has been found in SourceCodester Inventory Management System 1.0. Affected is an unknown function of the file /api/customershandler.php of the component Customer Management Module. Such manipulation of the argument CustomerName leads to cross site scripting. The attack can be...
CVE-2026-90694 SourceCodester Inventory Management System Customer Management customers_handler.php cross site scripting
A vulnerability has been found in SourceCodester Inventory Management System 1.0. Affected is an unknown function of the file /api/customershandler.php of the component Customer Management Module. Such manipulation of the argument CustomerName leads to cross site scripting. The attack can be...
CVE-2026-88995
The Bookit — Booking & Appointment Calendar WordPress plugin before 2.6.0.1 does not properly restrict the data returned by an availability-check request, allowing unauthenticated users to retrieve other customers' appointment details, including free-text booking comments and contact information...
CVE-2026-77705 Amelia < 2.4.10 - Amelia Manager+ WordPress Account Takeover
The Booking for Appointments and Events Calendar WordPress plugin before 2.4.10 does not verify that the user editing a customer or employee record is entitled to modify the WordPress account linked to it, allowing users holding Amelia's customer or employee management permissions to set the...
CVE-2026-77705
The Amelia (Booking for Appointments and Events Calendar) WordPress plugin before 2.4.10 contains an authorization flaw in its customer/employee record editing feature. The plugin does not verify whether the user editing a record is entitled to modify the linked WordPress account. Users with Amel...
coreweave-demo-2026-05
Gogs Gogs 是一款极易搭建的自助 Git 服务。 项目愿景 Gogs（/gɑgz/）项目旨在打造一个以最简便的方式搭建简单、稳定和可扩展的自助 Git 服务。使用 Go 语言开发使得 Gogs 能够通过独立的二进制分发，并且支持 Go 语言支持的 所有平台 ，包括 Linux、macOS、Windows 和基于 ARM 的操作系统。 概览 请移步官网查看用户使用文档 请通过 CHANGELOG.md 文件查看各个版本的变更历史 想要先睹为快？直接去在线体验吧！ 使用过程中遇到问题？尝试故障排查或者前往用户论坛获取帮助 希望帮助多国语言的翻译吗？请查看本地化文档...