Mlflow <2.8.0 - Local File Inclusion

Mlflow before 2.8.0 is susceptible to local file inclusion due to path traversal in GitHub repository mlflow/mlflow. An attacker can potentially obtain sensitive information, modify data, and/or execute unauthorized administrative operations in the context of the affected site. id: CVE-2023-6977...

CVE-2021-43798

CVE-2021-43798 CVE-2021-43798 is a vulnerability marked as High priority CVSS 7.5 leading to arbitrary file read via installed plugins in Grafana application. This vulnerability works on versions 8.0.0-beta1, 8.0.0 to 8.3.0. Tested only on 8.2.0. Exploit works by creating a list of vulnerable...

boot-jackson-cve

Reproduction of CVE-2020-36518 in Spring Boot 2.5.10 Execute: ./mvnw clean verify It will fail with: ERROR Failed to execute goal org.owasp:dependency-check-maven:7.0.0:check default on project jackson-demo: ERROR ERROR One or more dependencies were identified with vulnerabilities that have a CVS...

CVE-2025-55184_Testing

CVE-2025-55184Testing Python script for testing CVE-2025-55184 CVE-2025-55184 – React Server Components DoS Scanner A safe, security validation script designed to detect CVE-2025-55184 , a denial-of-service DoS vulnerability affecting React Server Components RSC. This tool is intended strictly fo...

CVE-2020-3452

CVE-2020-3452 CVSS 7.5 base wget https://bit.ly/32Q065t wget https://vpn.target.local:443/+CSCOT+/translation-table?type=mst&textdomain=/%2bCSCOE%2b/portalinc.lua&default-language&lang=../ wget...

CVE-2026-87237

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion component: Security. The supported version that is affected is 11.2.26.0.000. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial...

CVE-2026-83156

Vulnerability in the Oracle XML Developers Kit component of Oracle Database Server. Supported versions that are affected are 19.3-19.32, 21.3-21.23 and 23.4.0-23.26.3. Difficult to exploit vulnerability allows low privileged attacker having XDKC privilege with network access via Oracle Net to...

EUVD-2026-79929

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.16. Easily exploitable vulnerability allows unauthenticated attacker with network access via RDP to compromise Oracle VM VirtualBox. Successful attacks of this...

EUVD-2026-79892

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion component: Security. The supported version that is affected is 11.2.26.0.000. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial...

EUVD-2026-79876

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion component: Security. The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Financial...

CVE-2026-87221

Oracle Hyperion Financial Management (component: Security ), version 11.2.26.0.000 , is affected by an easily exploitable vulnerability that allows an unauthenticated attacker with network access via HTTP to gain unauthorized access to critical or all accessible data. The impact is limited to con...

EUVD-2026-79845

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion component: Security. The supported version that is affected is 11.2.26.0.000. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial...

CVE-2026-87148

CVE-2026-87148 affects Oracle Hyperion Data Relationship Management (component: Access and security), specifically version 11.2.26.0.000 . An unauthenticated attacker with network access via HTTP can cause a hang or frequently repeatable crash, resulting in a complete denial of service . The CVSS...

CVE-2026-83289

CVE-2026-83289 is a vulnerability in Oracle Business Intelligence Enterprise Edition (Oracle Analytics), specifically in the Analytics Web General component. Supported versions affected are 8.2.0.0.0 , 12.2.1.4.0 , and 26.01.0.0.0 . The flaw is exploitable over the network via SOAP by a low-privi...

CVE-2026-83263

Oracle Product Lifecycle Analytics (Oracle Supply Chain), version 3.6.1 , is affected by a vulnerability in the Installation Issues component. A low-privileged attacker with network access via HTTP can exploit this difficult-to-exploit flaw to achieve a takeover of the product, impacting confiden...

CVE-2026-83034

Oracle WebCenter Sites (Oracle Fusion Middleware) versions 12.2.1.4.0 and 14.1.2.0.0 are affected by an unauthenticated vulnerability exploitable over HTTP . An attacker with network access can achieve unauthorized access to critical data or complete access to all accessible WebCenter Sites data,...

CVE-2026-83028

Oracle Identity Manager Connector (Core component) in Oracle Fusion Middleware versions 12.2.1.4.0 and 14.1.2.1.0 is affected by a vulnerability allowing an unauthenticated attacker with access to the physical communication segment attached to the hardware to take over the product. The attack vec...

EUVD-2026-78904

In Concrete CMS 9.0 to 9.5.2, the Top Navigation Bar block did not HTML-escape dropdown child page names before writing them into the page, so a user who could create or rename pages could store a script through a child page name and have it run in the browser of any visitor, editor, or...

PT-2026-92814

Name of the Vulnerable Software and Affected Versions Oracle Business Intelligence Enterprise Edition version 8.2.0.0.0 Oracle Business Intelligence Enterprise Edition version 26.01.0.0.0 Description An issue exists in the Platform Security component of Oracle Business Intelligence Enterprise...

PT-2026-92589

Name of the Vulnerable Software and Affected Versions Oracle WebCenter Portal version 14.1.2.0.0 Description An issue exists in the Runtime Tools component of Oracle WebCenter Portal. An unauthenticated attacker with access to the physical communication segment attached to the hardware where the...