CVE-2026-62452

Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM component: Siebel Cloud Manager. Supported versions that are affected are 22.3-26.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM Cloud...

ormar 安全漏洞

ORMar is a Python ORM library developed by Collerek’s individual developers. Versions of Ormar prior to 0.23.0 contain security vulnerabilities. These vulnerabilities stem from Pydantic validation bypasses in the model constructor. This allows unvalidated users to bypass field validations by...

EUVD-2025-20349

Malicious code in bioql PyPI...

PT-2025-54630

Уязвимость ЕСМ-системы Directum RX связана с недостатками контроля доступа. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, нарушить целостность данных...

CVE-2024-45282

Fields which are in 'read only' state in Bank Statement Draft in Manage Bank Statements application, could be modified by MERGE method. The property of an OData entity representing assumably immutable method is not protected against external modifications leading to integrity violations...

CVE-2024-7767 Improper Access Control in danswer-ai/danswer

An improper access control vulnerability exists in danswer-ai/danswer version v0.3.94. This vulnerability allows the first user created in the system to view, modify, and delete chats created by an Admin. This can lead to unauthorized access to sensitive information, loss of data integrity, and...

[SECURITY] [DLA 3920-1] php7.4 security update

Debian LTS Advisory DLA-3920-1 [email protected] https://www.debian.org/lts/security/ Guilhem Moulin October 14, 2024 https://wiki.debian.org/LTS Package : php7.4 Version : 7.4.33-1+deb11u6 CVE ID : CVE-2022-4900 CVE-2024-5458 CVE-2024-8925 CVE-2024-8927 CVE-2024-9026 Debian Bug : 10728...

PT-2019-4998

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 77.0.3865.75 Description The issue is related to insufficient data validation in Google Chrome, which can be exploited by a remote attacker using a specially crafted HTML page. This can lead to data integrity...

PT-2019-4991

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 77.0.3865.75 Description The issue is related to insufficient policy enforcement in site isolation, allowing a remote attacker to bypass site isolation via a crafted HTML page. This can potentially lead to data...

PT-2019-5032

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 76.0.3809.87 Description The issue is related to insufficient data validation in Blink, allowing a remote attacker to bypass anti-clickjacking policy via a crafted HTML page. This can lead to a violation of data...