EUVD-2026-61417

Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle General Ledger...

WordPress WP Travel Engine plugin <= 6.8.4 - Missing Authorization to Unauthenticated Sensitive Information Disclosure via 'booking_id' Parameter vulnerability

Missing Authorization to Unauthenticated Sensitive Information Disclosure via 'bookingid' Parameter vulnerability discovered by Supakiad S. m3ez - E-CQURITY Thailand in WordPress Plugin WP Travel Engine versions = 6.8.4...

CVE-2026-74990

Internally found bugs present in Thunderbird ESR 140.13, Thunderbird ESR 153.0 and Thunderbird 153. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited. This vulnerability was...

CVE-2026-74987

Internally found bugs present in Thunderbird ESR 140.13, Thunderbird ESR 153.0 and Thunderbird 153. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited. This vulnerability was...

SUSE CVE-2026-75006

In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, insufficient Cascading Style Sheets CSS sanitization in HTML e-mail messages may lead to SSRF or Information Disclosure, e.g., if stylesheet links point to local network hosts. This issue exists because of insufficient fixes for...

CVE-2026-70701: Improper Access Control

Vulnerability in the Oracle Payables product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Payables. Successful...

CVE-2026-70690: Improper Access Control

Vulnerability in the Oracle HRMS US product of Oracle E-Business Suite component: US Payroll - General. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle HRMS US. While the...

CVE-2026-70783: Improper Access Control

Vulnerability in the Oracle Service Contracts product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Service...

CVE-2026-70799: Improper Access Control

Vulnerability in the Oracle SDP Number Portability product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle SDP...

PT-2026-77794

Name of the Vulnerable Software and Affected Versions Oracle SDP Number Portability versions 12.2.3 through 12.2.15 Description An issue exists in the Internal Operations component of the Oracle SDP Number Portability product within Oracle E-Business Suite. An unauthenticated attacker with networ...

PT-2026-77840

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Loans versions 12.2.3 through 12.2.15 Description A flaw in the Internal Operations component allows a low privileged attacker with network access via HTTP to compromise the system. This can lead to unauthorized...

PT-2026-77691

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Marketing Encyclopedia System versions 12.2.3 through 12.2.15 Description A flaw in the Internal Operations component of the Oracle Marketing Encyclopedia System allows a low privileged attacker with network acce...

CVE-2026-70782: Improper Access Control

Vulnerability in the Oracle Labor Distribution product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Labor...

PT-2026-77758

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Operations Intelligence versions 12.2.3 through 12.2.15 Description A flaw in the Daily Business Intelligence component of Oracle Operations Intelligence allows a low privileged attacker with network access via...

PT-2026-77633

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Customer Care versions 12.2.3 through 12.2.15 Description A flaw in the Internal Operations component of Oracle Customer Care allows a high privileged attacker with network access via HTTP to compromise the syste...

PT-2026-77719

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Production Scheduling versions 12.2.3 through 12.2.15 Description An issue exists in the Internal Operations component of the Oracle Production Scheduling product. A low privileged attacker with network access vi...

PT-2026-77700

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Payables versions 12.2.3 through 12.2.15 Description An issue exists in the Internal Operations component of Oracle Payables. A low privileged attacker with network access via HTTP can compromise the system,...

PT-2026-77540

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Work in Process versions 12.2.3 through 12.2.15 Description An issue exists in the Internal Operations component of the Oracle Work in Process product. A low privileged attacker with access to the infrastructure...

PT-2026-77703

Vulnerability in the Oracle Trading Community product of Oracle E-Business Suite component: Party Search UI. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Trading...

CVE-2026-60769: Missing Authentication for Critical Function

Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle General Ledger...