Lucene search
+L

20040 matches found

Positive Technologies
Positive Technologies
•added 2026/08/18 12:00 a.m.•19 views

PT-2026-77912

Name of the Vulnerable Software and Affected Versions Oracle Hyperion Financial Management version 11.2.25.0.000 Description A security flaw in the Security component allows an unauthenticated attacker with network access via TLS to compromise the system. Successful exploitation can lead to...

10CVSS5.2AI score0.00425EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/08/18 12:00 a.m.•15 views

PT-2026-77046

Unauthenticated Sensitive Data Exposure in Duitku Payment Gateway = 2.11.14 versions...

7.5CVSS5.2AI score0.00303EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/08/18 12:00 a.m.•15 views

PT-2026-77188

Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to 1.0.8.4, Vvveb backend comment operations allow a low-privileged Author to manage comments under another Author's posts. The admin/controller/content/comment.php and...

7.6CVSS5.4AI score0.00298EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/08/18 12:00 a.m.•16 views

PT-2026-77446

Name of the Vulnerable Software and Affected Versions Oracle WebCenter Content version 14.1.2.0.0 Oracle WebCenter Content version 12.2.1.4.0 Description A flaw in the Content Server component of Oracle Fusion Middleware allows a low privileged attacker with network access via HTTP to compromise...

8.7CVSS5.1AI score0.00326EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/08/18 12:00 a.m.•13 views

PT-2026-78002

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Experience Manager. The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

6.1CVSS5.2AI score0.00179EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/18 12:00 a.m.•19 views

PT-2026-78207

Vulnerability in the Helidon product of Oracle Fusion Middleware component: Imperative Web Server. The supported version that is affected is 4.5.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this...

7.3CVSS5.2AI score0.00294EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/18 12:00 a.m.•14 views

PT-2026-78065

Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain component: CAX Client. The supported version that is affected is 3.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Agile PLM MCAD Connector...

5.3CVSS5.1AI score0.00306EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/18 12:00 a.m.•18 views

PT-2026-77767

Vulnerability in the Oracle Warehouse Management product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Warehouse...

7.5CVSS5.2AI score0.00414EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/18 12:00 a.m.•17 views

PT-2026-77847

🚨 CVE-2026-70852 Vulnerability in the Oracle Demand Planning product of Oracle Supply Chain component: Internal Operations. Supported versions that are affected are 12.1 and 12.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

8.2CVSS5.2AI score0.00262EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/08/18 12:00 a.m.•19 views

PT-2026-78144

Name of the Vulnerable Software and Affected Versions Oracle Helidon version 3.2.18 Description An issue in the Imperative Web Server component of Oracle Fusion Middleware allows an unauthenticated attacker with network access via HTTP to compromise the system. This can lead to unauthorized acces...

7.5CVSS5.2AI score0.00396EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/08/18 12:00 a.m.•15 views

PT-2026-77415

Name of the Vulnerable Software and Affected Versions Oracle Unified Directory versions 12.2.1.4.0 Oracle Unified Directory versions 14.1.2.1.0 Description A flaw in the OUD Core component of Oracle Fusion Middleware allows a low privileged attacker with network access via LDAP to compromise the...

6.8CVSS5.1AI score0.0027EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/08/18 12:00 a.m.•15 views

PT-2026-77291

An issue in SJRC F11 SJ-GPS-PRO firmware build 2019-09-17 allows a remote attacker to obtain sensitive information via the inetd service...

5.3AI score0.00222EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2026/08/18 12:00 a.m.•13 views

PT-2026-77601

Name of the Vulnerable Software and Affected Versions Oracle Hyperion Infrastructure Technology version 11.2.25.0.000 Description An issue exists in the Installation and Configuration component of Oracle Hyperion Infrastructure Technology. A low privileged attacker with access to the infrastructu...

5.5CVSS5.9AI score0.00123EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/08/18 12:00 a.m.•17 views

PT-2026-78185

Vulnerability in the Helidon product of Oracle Fusion Middleware component: Imperative Web Server. The supported version that is affected is 4.5.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP/2 to compromise Helidon. Successful attacks of this...

6.5CVSS5.1AI score0.00346EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/18 12:00 a.m.•14 views

PT-2026-77742

Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion component: Server. The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Hyperion Financial...

8.2CVSS5.2AI score0.00443EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/18 12:00 a.m.•15 views

PT-2026-77391

Name of the Vulnerable Software and Affected Versions Oracle Siebel CRM Integration versions 17.0 through 26.6 Description An issue exists in the REST component of the Siebel CRM Integration product. An unauthenticated attacker with network access via HTTPS can compromise the system. Successful...

7.4CVSS5.2AI score0.00317EPSS
SaveExploits0References4
NVD
NVD
•added 2026/08/17 11:16 p.m.•11 views

CVE-2026-9693

Mattermost versions 10.11.x = 10.11.20, 11.7.x = 11.7.5 Mattermost fails to remove thread membership records when a user is removed from or leaves a team, which allows a previously removed user who is later re-invited to the team to view private channel thread root post content and metadata via t...

3.5CVSS0.00159EPSS
SaveExploits0References1
NVD
NVD
•added 2026/08/17 11:16 p.m.•14 views

CVE-2026-42164

Mahara before 25.04.5 and 26.04.0 is vulnerable in the Text block/section functionality when a call is crafted in a certain way that allows it to recall the backed-up content from another Text section...

9.8CVSS0.00307EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
•added 2026/08/17 10:07 p.m.•25 views

CVE-2026-9693

Mattermost versions 10.11.x = 10.11.20, 11.7.x = 11.7.5 Mattermost fails to remove thread membership records when a user is removed from or leaves a team, which allows a previously removed user who is later re-invited to the team to view private channel thread root post content and metadata via t...

3.5CVSS5.3AI score0.00159EPSS
SaveExploits0References2Affected Software1
RedHat Linux
RedHat Linux
•added 2026/08/17 9:58 p.m.•13 views

.NET: .NET Information Disclosure Vulnerability

Improper removal of sensitive information before storage or transfer in .NET allows an unauthorized attacker to disclose information over a network...

5.9CVSS5.1AI score0.00546EPSS
SaveExploits0References4
Rows per page
Query Builder