4470 matches found
CVE-2026-75744
Adobe Experience Manager Forms JEE is affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a high-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page...
CVE-2026-75744 Adobe Experience Manager Forms JEE | Cross-site Scripting (Stored XSS) (CWE-79)
Adobe Experience Manager Forms JEE is affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a high-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page...
CVE-2026-83413
Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle...
CVE-2026-83344
Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware component: Database Application Table. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to...
CVE-2026-83138
Vulnerability in the Oracle Spares Management product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Spares...
CVE-2026-73926
Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware component: Authentication Engine. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle...
EUVD-2026-79838
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion component: Security. The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Hyperion Financial...
CVE-2026-87147
Oracle Hyperion Data Relationship Management (component: Access and security ), version 11.2.26.0.000 , is affected by a network-accessible vulnerability exploitable via HTTP. A high-privileged attacker with high attack complexity can achieve unauthorized creation, deletion, or modification of da...
EUVD-2026-79675
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics component: Platform Security. Supported versions that are affected are 8.2.0.0.0 and 26.01.0.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to...
PT-2026-92040
Dell SmartFabric OS10 Software, versions prior to 10.6.1.3, contains a Download of Code Without Integrity Check vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Code execution...
Unity Linux 20.1070e Security Update: mysql (UTSA-2026-022363)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-022363 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.0-8.0.44, 8.4.0-8.4.7 and...
CVE-2026-79693
Dell Secure Connect Gateway (SCG) 5.0 is affected by a Least Privilege Violation in versions prior to 5.36.00.16 (Appliance) and 5.36.00.00 (Application). A high-privileged attacker with local access could potentially exploit this flaw to gain unauthorized access to the system. The vulnerability ...
CVE-2026-79944
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Least Privilege Violation vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to unauthorized access...
CVE-2026-79972
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability. A high privileged attacker with remote access could potentially exploit this...
PT-2026-89078
Dell iDRAC9, 14G versions prior to 7.00.00.184, 15G/16G versions prior to 7.30.10.50, and Dell iDRAC10, 17G versions prior to 1.30.30.50, contain an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A high privileged attacker with remote acces...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mysql (UTSA-2026-106177)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-106177 advisory. Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Performance Schema. Supported versions that are affected are MySQL Server...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mysql (UTSA-2026-106189)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-106189 advisory. Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Replication. Supported versions that are affected are MySQL Server:...
CVE-2026-73600
Dell PowerProtect Data Manager, versions 20.2.0.0 and below, contain a stack buffer overflow vulnerability in file-level restore agent. A high privileged remote attacker could potentially exploit this vulnerability, leading to Information disclosure...
PT-2026-84922
Dell PowerProtect Data Manager, versions 20.2.0.0 and below, contain a Server-Side Request Forgery SSRF vulnerability in the REST API. A high privileged remote attacker could potentially exploit this vulnerability, leading to Information disclosure...
Linux Distros Unpatched Vulnerability : CVE-2026-71134
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.14. Easily exploitable...