CVE-2026-83102

CVE-2026-83102 affects Oracle Forms (component: Forms Services, C/S, Charmode) within Oracle Fusion Middleware , versions 12.2.1.19.0 and 14.1.2.0.0 . The vulnerability is exploitable by an unauthenticated attacker over network access via HTTP , though exploitation is rated as difficult (high att...

CVE-2026-83097

Oracle Forms (component: Forms Services, C/S, Charmode) within Oracle Fusion Middleware is affected in versions 12.2.1.19.0 and 14.1.2.0.0 . A high-privileged attacker with network access via HTTP can exploit this with low complexity to cause unauthorized creation, deletion, or modification of cr...

EUVD-2026-79427

Vulnerability in the Oracle Forms product of Oracle Fusion Middleware component: Forms Services, C/S, Charmode. Supported versions that are affected are 12.2.1.19.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

EUVD-2026-79426

Vulnerability in the Oracle Forms product of Oracle Fusion Middleware component: Forms Services, C/S, Charmode. Supported versions that are affected are 12.2.1.19.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2026-83099

CVE-2026-83099 is a Critical (CVSS 3.1: 10.0) vulnerability in Oracle Forms (component: Forms Services, C/S, Charmode) within Oracle Fusion Middleware . Affected supported versions are 12.2.1.19.0 and 14.1.2.0.0 . The flaw allows an unauthenticated attacker with network access via HTTP to comprom...

CVE-2026-83098

CVE-2026-83098 affects Oracle Forms (component: Forms Services, C/S, Charmode) within Oracle Fusion Middleware, specifically versions 12.2.1.19.0 and 14.1.2.0.0 . An unauthenticated attacker with network access via HTTP can exploit this with low complexity to achieve full takeover of Oracle Forms...

EUVD-2026-79425

Vulnerability in the Oracle Forms product of Oracle Fusion Middleware component: Forms Services, C/S, Charmode. Supported versions that are affected are 12.2.1.19.0 and 14.1.2.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle...

EUVD-2026-79421

Vulnerability in the Oracle Forms product of Oracle Fusion Middleware component: Forms Services, C/S, Charmode. Supported versions that are affected are 12.2.1.19.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

EUVD-2026-79422

Vulnerability in the Oracle Forms product of Oracle Fusion Middleware component: Forms Services, C/S, Charmode. Supported versions that are affected are 12.2.1.19.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

EUVD-2026-79424

Vulnerability in the Oracle Forms product of Oracle Fusion Middleware component: Forms Services, C/S, Charmode. Supported versions that are affected are 12.2.1.19.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

CVE-2026-83096

CVE-2026-83096 affects Oracle Forms (component: Forms Services, C/S, Charmode) within Oracle Fusion Middleware, versions 12.2.1.19.0 and 14.1.2.0.0 . A low-privileged attacker with network access via HTTP can exploit this vulnerability, though it is rated as difficult to exploit (high attack comp...

EUVD-2026-79423

Vulnerability in the Oracle Forms product of Oracle Fusion Middleware component: Forms Services, C/S, Charmode. Supported versions that are affected are 12.2.1.19.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2026-83095

CVE-2026-83095 affects the Oracle Forms product within Oracle Fusion Middleware, specifically the Forms Services, C/S, Charmode component. Supported versions 12.2.1.19.0 and 14.1.2.0.0 are vulnerable. An unauthenticated attacker with network access via HTTP can exploit this with low complexity an...

CVE-2026-83094

Oracle Forms (Oracle Fusion Middleware, component: Forms Services, C/S, Charmode) is vulnerable to an unauthenticated remote attack via HTTP that allows takeover of the application. Affected supported versions are 12.2.1.19.0 and 14.1.2.0.0 . The vulnerability is rated CVSS 3.1 9.8 (CRITICAL) wit...

CVE-2026-83093

Oracle Forms (Oracle Fusion Middleware, component: Forms Services, C/S, Charmode) has an unauthenticated network vulnerability exploitable via HTTP with low complexity. Affected supported versions are 12.2.1.19.0 and 14.1.2.0.0 . Successful exploitation grants unauthorized access to critical data...

CVE-2026-68534 Concrete CMS below 9.5.2 is vulnerable to Stored XSS via unescaped Express entry labels in association selectors

Concrete CMS before 9.5.3 rendered Express entry labels as raw HTML when displaying associated entries, resulting in stored cross-site scripting. An unauthenticated attacker could submit a payload through a public Express Form; it then executed in an administrator's dashboard session when the...

EUVD-2026-78932

In Concrete CMS below CMS 9.5.3, the savecontrol action in the Express entities forms dashboard controller did not validate the anti-CSRF token. By causing an authenticated administrator to submit a forged cross-site request, a remote attacker without credentials could write attacker-controlled...

CVE-2026-81897

Concrete CMS versions below 9.5.3 are vulnerable to stored cross-site scripting via the save_control action in the Express entities forms dashboard controller. The missing anti-CSRF token validation allows an unauthenticated remote attacker to cause an authenticated administrator to submit a forg...

Malicious code in tailwind-forms-styles (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92f06c2ce29f04ce06cfb494996cb6ffde7aea02af92489abcacf10cbcb7beb2 tailwind-forms-styles ships a src/index.js that is fully obfuscated with obfuscator.io rotated 303-entry string array, hex-named identifiers,...

MAL-2026-16195 Malicious code in tailwind-forms-styles (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92f06c2ce29f04ce06cfb494996cb6ffde7aea02af92489abcacf10cbcb7beb2 tailwind-forms-styles ships a src/index.js that is fully obfuscated with obfuscator.io rotated 303-entry string array, hex-named identifiers,...