Oracle REST Data Services: Vulnerabilities in permission management and access control mechanisms

Oracle REST Data Services versions 24.2.0 to 26.1.0 have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from ADP components, and they may allow low-privilege attackers to access through the HTTP network. Unauthorized updates, insertions, or deletion...

Oracle REST Data Services security vulnerabilities

A security vulnerability exists in Oracle REST Data Services versions 24.2.0 through 26.1.0. This vulnerability stems from issues within the Database Actions component. It may allow attackers with elevated privileges to perform network access via HTTP, unauthorized updates, insertions, or deletio...

Oracle PeopleSoft Enterprise SCM Purchasing security vulnerability

Oracle PeopleSoft Enterprise SCM Purchasing version 9.2 contains a security vulnerability stemming from issues in the Supplier Registration component. This vulnerability may allow low-privilege attackers to perform unauthorized updates, inserts, or deletions of certain accessible data via HTTP, a...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 have security vulnerabilities. These vulnerabilities stem from issues with the Fluid Core component. Unauthorized attackers with low privileges may access the system via the HTTP network. This allows them to perform unauthorized...

Oracle Helidon security vulnerabilities

Oracle Helidon versions 4.0.0 to 4.5.5 have security vulnerabilities. These vulnerabilities stem from issues with the LRA component, which may allow unauthenticated attackers to access through the HTTP network. Unauthorized updates, insertions, or deletions of certain data are possible, as well a...

Oracle Compensation Workbench security vulnerability

A security vulnerability exists in Oracle Compensation Workbench versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Total Compensation Statement component and may allow low-privilege attackers to perform unauthorized updates, insertions, or deletions of certain data,...

Oracle REST Data Services security vulnerabilities

Oracle REST Data Services versions 24.2.0 to 26.1.0 have security vulnerabilities. These vulnerabilities stem from issues with the Core component. Attackers with low privileges can access through the HTTP network, potentially leading to unauthorized updates, insertions, or deletions of accessible...

Security Bulletin: IBM Guardium Data Protection is affected by multiple vulnerabilities

Summary IBM Guardium Data Protection has addressed these vulnerabilities in an update. Vulnerability Details CVEID:CVE-2026-0994 DESCRIPTION: A denial-of-service DoS vulnerability exists in google.protobuf.jsonformat.ParseDict in Python, where the maxrecursiondepth limit can be bypassed when...

Security Bulletin: IBM Event Streams is affected by multiple vulnerabilities in Java SE (CVE-2026-21945, CVE-2026-21932, CVE-2026-21933).

Summary IBM Event Streams is affected by multiple vulnerabilities in Java SE. These vulnerabilities could allow a remote attacker to cause a denial of service condition, bypass security restrictions, or perform unauthorized operations on data processed by affected Java components. Vulnerability...

OneUptime: Access Control Vulnerability

OneUptime is a comprehensive solution developed by OneUptime OpenSource. It is used to monitor and manage your online services. Versions of OneUptime prior to 10.0.42 contained a access control vulnerability, which stems from the lack of authentication at the workflow execution endpoint. This...

CVE-2026-3431

On SimStudio version below to 0.5.74, the MongoDB tool endpoints accept arbitrary connection parameters from the caller without authentication or host restrictions. An attacker can leverage these endpoints to connect to any reachable MongoDB instance and perform unauthorized operations including...

Security Bulletin: Multiple Vulnerabilities in IBM® Java SDK affect IBM WebSphere Application Server and WebSphere Application Server Liberty due to the January 2026 CPU

Summary There are multiple vulnerabilities in the IBM® SDK, Java™ Technology Edition that is shipped with IBM WebSphere Application Server and IBM WebSphere Application Server Liberty. The CVEs listed in this document might affect some configurations of IBM WebSphere Application Server traditiona...

EUVD-2020-12015

Malware in sbrugna...

EUVD-2012-5075

Malware in sbrugna...

EUVD-2021-30334

Malicious code in bioql PyPI...

CVE-2025-32960 CUBA Generic REST API Vulnerable to Cross-Site Scripting (XSS) in the /files Endpoint

The CUBA REST API add-on performs operations on data and entities. Prior to version 7.2.7, the input parameter, which consists of a file path and name, can be manipulated to return the Content-Type header with text/html if the name part ends with .html. This could allow malicious JavaScript code ...

PT-2025-8934 · Ciges · Ciges

Name of the Vulnerable Software and Affected Versions: Ciges version 2.15.5 Description: A SQL Injection vulnerability has been found in Ciges, allowing an attacker to retrieve, create, update, and delete database entries via the $idServicio parameter in the /modules/ajaxBloqueaCita.php endpoint...

Oracle Fusion Middleware Security Vulnerability

Oracle Fusion Middleware Oracle Fusion Middleware and Oracle WebLogic Server are both products of Oracle Corporation.Oracle Fusion Middleware is a business innovation platform for enterprise and cloud environments. The platform provides middleware, software collections, and more.Oracle WebLogic...

Syska SW100 Security Vulnerability

Syska SW100 is a smartwatch from Syska. A security vulnerability exists in the Syska SW100 version V2 that stems from a misconfiguration and could allow an attacker to perform firmware updates, device reboots, or data operations on the target device...

OpenSearch Project Security Vulnerability

OpenSearch Project is OpenSearch Project open source a community-driven, Apache 2.0 licensed open source search and analytics suite. Making it easy to access, search, visualize and analyze data. A security vulnerability exists in OpenSearch. An attacker exploiting this vulnerability could perform...