Kibana - Local File Inclusion

Kibana versions before 6.4.3 and 5.6.13 contain an arbitrary file inclusion flaw in the Console plugin. An attacker with access to the Kibana Console API could send a request that will attempt to execute JavaScript which could possibly lead to an attacker executing arbitrary commands with...

Elasticsearch 7.10.0-7.13.3 - Information Disclosure

ElasticSsarch 7.10.0 to 7.13.3 is susceptible to information disclosure. A user with the ability to submit arbitrary queries can submit a malformed query that results in an error message containing previously used portions of a data buffer. This buffer can contain sensitive information such as...

elastic-search-email-extractor

Email Extractor This Go program is designed to extract email addresses from a list of Elastic Search Databases. It takes in a list of URLs and will search the Database of each URL to find email addresses. Install go install github.com/RandomRobbieBF/elastic-search-email-extractor@latest Usage To...

GHSA-6Q48-6C7W-9GW2 vulnerabilities

Vulnerabilities for packages: openstack-keystone-2026.1-fips, openstack-kolla-toolbox-2025.2-fips, opentelemetry-python-instrumentation, openstack-glance-2026.1-fips, kserve-xgbserver, openstack-nova-2026.1, py3-opentelemetry-exporter-otlp, openstack-kolla-toolbox-2025.1-fips,...

EUVD-2026-106192

Vulnerability in the Oracle Communications BRM - Elastic Charging Engine product of Oracle Communications component: Security. The supported version that is affected is 15.2.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via TLS to compromise Oracle...

EUVD-2026-106193

Vulnerability in the Oracle Communications BRM - Elastic Charging Engine product of Oracle Communications component: Security. Supported versions that are affected are 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0 and 15.2.0.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with access...

EUVD-2026-106191

Vulnerability in the Oracle Communications BRM - Elastic Charging Engine product of Oracle Communications component: Security. Supported versions that are affected are 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0 and 15.2.0.0.0. Easily exploitable vulnerability allows low privileged attacker with logon to...

EUVD-2026-106194

Vulnerability in the Oracle Communications BRM - Elastic Charging Engine product of Oracle Communications component: Core. Supported versions that are affected are 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0 and 15.2.0.0.0. Easily exploitable vulnerability allows low privileged attacker with logon to the...

EUVD-2026-106164

Vulnerability in the Oracle Communications BRM - Elastic Charging Engine product of Oracle Communications component: Cloud native deployment. Supported versions that are affected are 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0 and 15.2.0.0.0. Easily exploitable vulnerability allows unauthenticated attacke...

CVE-2026-101793

Vulnerability in the Oracle Communications BRM - Elastic Charging Engine product of Oracle Communications component: Core. Supported versions that are affected are 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0 and 15.2.0.0.0. Easily exploitable vulnerability allows low privileged attacker with logon to the...

CVE-2026-101790

Vulnerability in the Oracle Communications BRM - Elastic Charging Engine product of Oracle Communications component: Security. Supported versions that are affected are 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0 and 15.2.0.0.0. Easily exploitable vulnerability allows low privileged attacker with logon to...

CVE-2026-101792

Vulnerability in the Oracle Communications BRM - Elastic Charging Engine product of Oracle Communications component: Security. Supported versions that are affected are 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0 and 15.2.0.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with access...

CVE-2026-101791

Vulnerability in the Oracle Communications BRM - Elastic Charging Engine product of Oracle Communications component: Security. The supported version that is affected is 15.2.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via TLS to compromise Oracle...

CVE-2026-101763

Vulnerability in the Oracle Communications BRM - Elastic Charging Engine product of Oracle Communications component: Cloud native deployment. Supported versions that are affected are 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0 and 15.2.0.0.0. Easily exploitable vulnerability allows unauthenticated attacke...

CVE-2026-101793

A vulnerability exists in the Core component of Oracle Communications BRM - Elastic Charging Engine affecting versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0, and 15.2.0.0.0 . A low privileged attacker with local access to the infrastructure can exploit this issue to compromise the product, potential...

CVE-2026-101791

A vulnerability exists in the Security component of Oracle Communications BRM - Elastic Charging Engine version 15.2.0.0.0 . A low-privileged attacker with network access via TLS can exploit this flaw to compromise the system, potentially gaining unauthorized access to, or modifying, critical dat...

CVE-2026-101792

A vulnerability exists in the Security component of Oracle Communications BRM - Elastic Charging Engine affecting versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0, and 15.2.0.0.0 . This difficult-to-exploit flaw allows an unauthenticated attacker with access to the physical communication segment attac...

CVE-2026-101790

A vulnerability exists in the Security component of Oracle Communications BRM - Elastic Charging Engine affecting versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0, and 15.2.0.0.0 . A low privileged attacker with logon access to the infrastructure can exploit this flaw to compromise the product, potent...

CVE-2026-101763

A critical vulnerability exists in the Oracle Communications BRM - Elastic Charging Engine (component: Cloud native deployment ) affecting versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0, and 15.2.0.0.0 . An unauthenticated attacker with network access via RMI can easily exploit this flaw to compromi...

CVE-2026-111064 vulnerabilities

Vulnerabilities for packages: metaflow-service, py3.13-scanner-test-libraries-aiohttp, dask-kubernetes-fips, metaflow-service-fips, open-webui, datahub-ingestion-fips, nemo-rl-cuda-13.0, datahub-ingestion, dask-kubernetes, opal, kserve-xgbserver-fips, elastic-connectors-fips, kserve-models-web-ap...