165 matches found
CVE-2026-59638 JSSE hostname verifier CN-fallback enabled by default despite documented opt-in
In Bouncy Castle for Java before 1.85, JSSE hostname verifier CN-fallback enabled by default despite documented opt-in. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bctls-fips 1.0.24 1.0.X series, 2.0.24 2.0.X series and 2.1.24...
CVE-2024-38113
creationtimestamp| type| source ---|---|--- 2026-07-29 03:22:02+00:00| seen| https://bsky.app/profile/cybernewsroom.bsky.social/post/3mrqxurhkb523...
CVE-2026-62546
CVE-2026-62546 affects Oracle E-Business Suite Oracle Applications Framework Web Utilities, with vulnerable versions 12.2.8–12.2.15. The issue enables a high-privilege attacker with network access via HTTP to compromise OAF, potentially taking over the Oracle Applications Framework. CVSS 3.1 base...
CVE-2026-61147
...
CVE-2026-61132
Oracle Commerce Platform (Dynamo Application Framework) vulnerability CVE-2026-61132 affects version 11.4.0. A low privileged attacker can exploit over HTTP with network access, and user interaction is required, to potentially gain unauthorized access to critical data and perform unauthorized upd...
CVE-2026-61104
...
CVE-2026-61069
The CVE-2026-61069 describes a vulnerability in Oracle PeopleSoft Enterprise FIN General Ledger Argentina (General Ledger, version 9.1). An attacker with low privileges and network access via HTTP can potentially modify or delete critical data or access all data in the General Ledger, and may cau...
CVE-2026-61064
Oracle iRecruitment in Oracle E-Business Suite (versions 12.2.3–12.2.15) is affected by a vulnerability in the Install/Upgrade Issues component. The issue can be exploited by a low-privileged attacker over HTTP to gain unauthorized update/insert/delete and read access to some iRecruitment data. T...
CVE-2026-61056
CVE-2026-61056 concerns Oracle PeopleSoft Enterprise FIN Grants (component: Grants) with affected version 9.2. The vulnerability allows an unauthenticated, network-accessible attacker (via HTTP) to compromise FIN Grants, potentially performing unauthorized updates, inserts, or deletes on accessib...
CVE-2026-60706
...
CVE-2026-60499
...
CVE-2026-60410
...
CVE-2026-60407
The CVE-2026-60407 affects Oracle TimesTen In-Memory Database (Kubernetes Operator) with an affected build 26.1.1.1.0. The flaw is described as exploitable by a low-privilege user who can log on to the infrastructure where TimesTen runs, potentially leading to compromised TimesTen data and potent...
CVE-2026-60240
CVE-2026-60240 affects Oracle Coherence (Core) in Oracle Fusion Middleware. Affects 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. An unauthenticated, network-accessible attacker via TCP can compromise Coherence, with potential takeover and high impact to confidentiality, integrity, and avai...
CVE-2026-60149
...
CVE-2026-46936
...
MAL-2026-10105 Malicious code in pxpure8 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a40ae433e9fa90bfbb449d343c281375329a44c0dacf080a91a0c1717579b679 The package's main entry pure.js consists of a single behavior: it creates a element pointing at https://cdn.jsdelivr.net/npm/px8my/px.js no version...
CVE-2026-35300
...
