PT-2025-29660

Name of the Vulnerable Software and Affected Versions Oracle Universal Work Queue versions 12.2.5 through 12.2.14 Description This issue relates to flaws in access control within the request handling component of Oracle Universal Work Queue. Successful exploitation allows an unauthenticated remot...

PT-2025-29643 · Oracle · Oracle Applications Framework +1

Name of the Vulnerable Software and Affected Versions: Oracle E-Business Suite versions 12.2.3 through 12.2.14 Description: A vulnerability exists within the Personalization component of the Oracle Applications Framework product of Oracle E-Business Suite. This issue is easily exploitable, allowi...

CVE-2025-50060: Improper Access Control

Vulnerability in the Oracle BI Publisher product of Oracle Analytics component: Web Server. Supported versions that are affected are 7.6.0.0.0, 8.2.0.0.0 and 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle BI Publisher...

Oracle Analytics Access Control Vulnerability

Oracle Analytics is an enterprise analytics solution from Oracle Corporation USA. A security vulnerability exists in Oracle Business Intelligence Enterprise Edition versions 7.6.0.0.0, 8.2.0.0.0, and 12.2.1.4.0 of Oracle Analytics, which originates from an unauthenticated attacker who can conduct...

PT-2025-29628 · Oracle · Oracle Weblogic Server

Name of the Vulnerable Software and Affected Versions: Oracle WebLogic Server versions 12.2.1.4.0 Oracle WebLogic Server versions 14.1.1.0.0 Oracle WebLogic Server versions 14.1.2.0.0 Description: This issue affects the Web Container component of Oracle WebLogic Server. An unauthenticated attacke...

PT-2025-29602 · Oracle · Oracle Database Server

Name of the Vulnerable Software and Affected Versions: Oracle Database Server versions 19.3 through 19.27 Oracle Database Server versions 21.3 through 21.18 Oracle Database Server versions 23.4 through 23.8 Description: This issue resides within the Unified Audit component of Oracle Database...

CVE-2025-50072: Improper Access Control

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle WebLogic...

Oracle E-Business Suite Access Control Vulnerability

Oracle E-Business Suite is a fully integrated set of global business management software from Oracle USA. The software provides customer relationship management, service management, financial management and other functions. A security vulnerability exists in Oracle Universal Work Queue for Oracle...

PT-2025-29598

Name of the Vulnerable Software and Affected Versions Oracle iStore versions 12.2.3 through 12.2.14 Description A flaw exists in the Shopping Cart component of the Oracle iStore product, which is part of Oracle E-Business Suite. This issue stems from insufficient input validation. A remote,...

Oracle MySQL security vulnerabilities

Oracle MySQL Server is a relational database from Oracle Corporation. A security vulnerability exists in Oracle MySQL Server that originates from improper access control of the InnoDB component and can be exploited by an attacker to cause a denial of service and unauthorized modification of data...

CVE-2025-53639

MeterSphere is an open source continuous testing platform. Prior to version 3.6.5-lts, the sortField parameter in certain API endpoints is not properly validated or sanitized. An attacker can supply crafted input to inject and execute arbitrary SQL statements through the sorting functionality. Th...

PT-2025-29324 · Oracle · Primavera P6 Enterprise Project Portfolio Management

Name of the Vulnerable Software and Affected Versions: Oracle Primavera P6 Enterprise Project Portfolio Management versions 20.12.0 through 20.12.21 Oracle Primavera P6 Enterprise Project Portfolio Management versions 21.12.0 through 21.12.21 Oracle Primavera P6 Enterprise Project Portfolio...

CVE-2025-3780

The WCFM – Frontend Manager for WooCommerce along with Bookings Subscription Listings Compatible plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the wcfmredirecttosetup function in all versions up to, and including, 6.7.16. This makes i...

StateRepository Service Privilege Escalation

The vulnerability of the StateRepository service in the Windows operating system is related to the lack of authentication. Exploiting this vulnerability can allow an attacker to gain access to read and modify data...

Calendar Storage Module Access Control

The vulnerability of the Calendar Storage module in the EMUI operating system of HarmonyOS is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain access to read and modify data...

CVE-2025-4855

CVE-2025-4855 concerns the WordPress plugin Support Board. Multiple sources confirm a vulnerability in all versions up to 3.8.0 where hardcoded default secrets in sb_encryption() enable unauthenticated bypass of authorization and the execution of arbitrary AJAX actions via sb_ajax_execute(). This...

CVE-2025-3780

The CVE-2025-3780 entry concerns the WordPress plugins “WCFM – Frontend Manager for WooCommerce” and “Bookings Subscription Listings Compatible” (WP). All versions up to 6.7.16 are affected due to a missing authorization check in the wcfm_redirect_to_setup function, enabling unauthenticated attac...

WordPress plugin WCFM - Frontend Manager for WooCommerce along with Bookings Subscription Listings Compatible Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. WordPress plugin WCFM - Frontend Manager for WooCommerce...

PT-2025-28804

Name of the Vulnerable Software and Affected Versions: The Support Board plugin for WordPress versions up to, and including, 3.8.0 Description: The issue allows unauthorized access, modification, or deletion of data due to the use of hardcoded default secrets in the sb encryption function. This...

PT-2025-28802 · WordPress · Wcfm – Frontend Manager For Woocommerce +1

Name of the Vulnerable Software and Affected Versions: WCFM – Frontend Manager for WooCommerce along with Bookings Subscription Listings Compatible plugin for WordPress versions up to and including 6.7.16 Description: The WCFM – Frontend Manager for WooCommerce along with Bookings Subscription...