94663 matches found
CVE-2026-70939
Oracle Hyperion Financial Management version 11.2.25.0.000's Security component is affected; a high-privileged network attacker can exploit it via HTTP to fully compromise the application (CVSS 7.2 HIGH). Patch details are in Oracle's August 2026 CPU advisory; no exploitation evidence is provided...
CVE-2026-70829
...
CVE-2026-70797
...
CVE-2026-70795
...
CVE-2026-70765
Oracle Hyperion Financial Reporting Server (version 11.2.25.0.000) is vulnerable to an unauthenticated, low-complexity HTTP attack requiring human interaction. CVSS 3.1 scores it 6.1 (Medium) with scope change, enabling unauthorized read and update/insert/delete access to some product data. Explo...
CVE-2026-70729
...
CVE-2026-70728
...
CVE-2026-70721
...
CVE-2026-70699
...
CVE-2026-62626
...
CVE-2026-62601
...
CVE-2026-62553
...
CVE-2026-62458
Oracle E-Business Suite (component: Internal Operations of Work in Process) versions 12.2.3–12.2.15 are affected by a HIGH-severity (CVSS 7.1) vulnerability exploitable over HTTP by a low-privileged attacker, enabling denial-of-service (hang/crash) and unauthorized data modification. No in-the-wi...
CVE-2026-61332
...
CVE-2026-61008
...
CVE-2026-60722
...
EUVD-2026-61490
linuxfabrik-lib provides Python modules for database access, caching, shell execution, and API integrations. Prior to version 4.2.0, dbsqlite.py created SQLite databases at predictable paths in the shared /tmp directory and followed attacker-created symbolic links at those paths. An attacker who...
CVE-2026-53759 linuxfabrik-lib: Insecure creation of SQLite databases
linuxfabrik-lib provides Python modules for database access, caching, shell execution, and API integrations. Prior to version 4.2.0, dbsqlite.py created SQLite databases at predictable paths in the shared /tmp directory and followed attacker-created symbolic links at those paths. An attacker who...
GHSA-W27M-RMMF-G5W4 Froxlor: Second-Order SQL Injection via `Admins.add` `ipaddress` Parameter Allows Full Database Exfiltration
Summary A second-order SQL injection vulnerability in Froxlor's admin API allows an authenticated administrator to store a crafted SQL payload in the paneladmins.ip column via the Admins.add or Admins.update endpoint. The payload executes as a UNION-based SQL injection the next time...
SQL Injection
Overview froxlor/froxlor is a server administration software. Affected versions of this package are vulnerable to SQL Injection in the ipaddress parameter of the Admins.add or Admins.update process. An attacker can extract sensitive database information, including administrator login names and...