PT-2025-42968

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.2.3 through 12.2.14 Description An easily exploitable issue exists in the Oracle Applications Framework component of Oracle E-Business Suite. A low-privileged attacker with network access via HTTP can...

PT-2025-42982

Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft versions 9.2 Description A flaw exists within the Work Order Management component of Oracle PeopleSoft Enterprise FIN Maintenance Management. A low-privileged attacker with network access via HTTP can compromise the system...

Work Examiner Professional Security Vulnerabilities

Work Examiner Professional is an employee computer monitoring software from Work Examiner USA. A security vulnerability exists in Work Examiner Professional that stems from the use of weakly hard-coded credentials by the FTP server, which could lead to data modification or reading and remote code...

PT-2025-42962

Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft versions 8.60 through 8.62 Description An easily exploitable issue exists in the PeopleSoft Enterprise PeopleTools product, specifically within the PIA Core Technology component. An unauthenticated attacker with network acces...

CVE-2025-10641: Cleartext Transmission of Sensitive Information

All WorkExaminer Professional traffic between monitoring client, console and server is transmitted as plain text. This allows an attacker with access to the network to read the transmitted sensitive data. An attacker can also freely modify the data on the wire. The monitoring clients transmit the...

PT-2025-42938

Name of the Vulnerable Software and Affected Versions Oracle iStore versions 12.2.5 through 12.2.14 Description An easily exploitable issue exists in the Oracle iStore Shopping Cart component of Oracle E-Business Suite. An unauthenticated attacker with network access via HTTP can compromise Oracl...

Oracle E-Business Suite security vulnerabilities

Oracle E-Business Suite is a set of fully integrated global business management software from Oracle USA. The software provides customer relationship management, service management, financial management and other functions. A security vulnerability exists in Oracle Workflow for Oracle E-Business...

PT-2025-42952

Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft versions 8.60 through 8.62 Description An easily exploitable issue exists in the PeopleSoft Enterprise PeopleTools product, specifically within the PIA Core Technology component. An unauthenticated attacker with network acces...

Oracle PeopleSoft security vulnerabilities

Oracle PeopleSoft is a suite of enterprise human capital management solutions from Oracle Corporation USA. The product provides human capital management, financial management, vendor relationship management, and other functions. A security vulnerability exists in Oracle PeopleSoft's PeopleSoft...

CVE-2025-61751: Missing Authorization

Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications component: Platform. Supported versions that are affected are 8.0.7.9, 8.0.8.7 and 8.1.2.5. Easily exploitable vulnerability allows low privileged attacker with...

Oracle E-Business Suite security vulnerabilities

Oracle E-Business Suite is a set of fully integrated global business management software from Oracle USA. The software provides customer relationship management, service management, financial management and other functions. A security vulnerability exists in Oracle Product Hub versions 12.2.3...

WordPress Library Management System plugin unauthorized data modification vulnerability

The WordPress Library Management System plugin is a plugin for extending the functionality of WordPress, mainly used to help users manage website content, user data and system settings more efficiently. The WordPress Library Management System plugin suffers from an unauthorized data modification...

PT-2025-42986

Name of the Vulnerable Software and Affected Versions Oracle Database Server versions 19.3 through 19.28 Oracle Database Server versions 21.3 through 21.19 Oracle Database Server versions 23.4 through 23.9 Description A difficult to exploit issue exists within the Java VM component of Oracle...

WordPress Felan Framework plugin unauthorized data modification vulnerability

The WordPress Felan Framework plugin is a plugin with security vulnerabilities, mainly related to authentication issues. WordPress Felan Framework plugin has an unauthorized data modification vulnerability that stems from a lack of permission checking in the processpluginactions function, which c...

PT-2025-42988

Name of the Vulnerable Software and Affected Versions Oracle Life Sciences InForm version 7.0.1.0 Description An easily exploitable issue exists in the Oracle Life Sciences InForm Web Server component. An unauthenticated attacker with network access via HTTP can compromise the system. Successful...

Oracle MySQL security vulnerabilities

Oracle MySQL is an open source relational database management system from Oracle Corporation USA. A security vulnerability exists in Oracle MySQL for MySQL Server versions 8.0.0 through 8.0.43, 8.4.0 through 8.4.6, and 9.0.0 through 9.4.0, which originates from a network access by an attacker wit...

PT-2025-42984

Name of the Vulnerable Software and Affected Versions Oracle Essbase version 21.7.3.0.0 Description An issue exists in Oracle Essbase, specifically within the Essbase Web Platform component. A low-privileged attacker with network access via HTTP can compromise the system. Successful exploitation...

PT-2025-51502

Уязвимость компонента PIA Core Technology пакета бизнес-приложений Oracle PeopleSoft Enterprise PeopleTools связана с нарушением начальной границы буфера. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, получить доступ на чтение, изменение и удаление данных...

GLPI Authentication Bypass

The vulnerability of the GLPI system for requests, incidents, and inventory management involves bypassing authentication using a password. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access and modify protected information...

EUVD-2025-34984

The Kognetiks Chatbot plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on several functions in all versions up to, and including, 2.3.5. This makes it possible for unauthenticated attackers to upload limited safe files and erase conversatio...