Lucene search
+L

5138 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/21 12:00 a.m.•4 views

CVE-2026-60666: Improper Access Control

Vulnerability in the PeopleSoft Enterprise HCM Human Resources product of Oracle PeopleSoft component: Security. The supported version that is affected is 9.2. Difficult to exploit vulnerability allows low privileged attacker with network access via Oracle Net to compromise PeopleSoft Enterprise...

6.8CVSS5.7AI score0.00289EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/21 12:00 a.m.•6 views

CVE-2026-60542: Improper Access Control

Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware component: Human Workflow. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via T3, IIOP to...

9.9CVSS5.7AI score0.00432EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/21 12:00 a.m.•3 views

CVE-2026-60526: Improper Input Validation

Vulnerability in Oracle Java SE component: Installation. Supported versions that are affected are Oracle Java SE: 8u491 and 8u491-perf. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Java SE executes to compromise Oracle Java SE...

6.7CVSS5.4AI score0.0015EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/07/21 12:00 a.m.•14 views

PT-2026-62551

Name of the Vulnerable Software and Affected Versions Oracle JD Edwards EnterpriseOne Human Resources Management version 9.2 Description A flaw in the Human Resources component allows a low privileged attacker with network access via HTTP to compromise the system. Successful exploitation can lead...

8.8CVSS7.1AI score0.00432EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/21 12:00 a.m.•3 views

CVE-2026-60172: Improper Access Control

Vulnerability in Oracle Autonomous Health Framework component: Developer triaging platform. Supported versions that are affected are 26.0.0, 26.1.0 and 26.2.0. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Autonomous Health...

6.3CVSS5.7AI score0.00141EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/07/21 12:00 a.m.•18 views

PT-2026-63118

Vulnerability in the Oracle HRMS Hong Kong product of Oracle E-Business Suite component: Hong Kong Payroll. Supported versions that are affected are 12.2.13-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle HRMS Hong Kong...

5.4CVSS7AI score0.00231EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/07/21 12:00 a.m.•19 views

PT-2026-62556

Name of the Vulnerable Software and Affected Versions Oracle JD Edwards EnterpriseOne Human Resources Management version 9.2 Description A flaw in the Human Resources component allows a low-privileged attacker with network access via JDENET to compromise the system. Successful exploitation can le...

7.5CVSS7.1AI score0.00334EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/21 12:00 a.m.•6 views

CVE-2026-60631: Improper Access Control

Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware component: Content Server. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

9.3CVSS5.7AI score0.00196EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/21 12:00 a.m.•2 views

CVE-2026-60667: Improper Access Control

Vulnerability in the PeopleSoft Enterprise HCM Human Resources product of Oracle PeopleSoft component: Core. The supported version that is affected is 9.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TCP to compromise PeopleSoft Enterprise HCM Human...

7.4CVSS5.7AI score0.00356EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/21 12:00 a.m.•3 views

CVE-2026-60493: Missing Authentication for Critical Function

Vulnerability in the JD Edwards EnterpriseOne Human Resources Management product of Oracle JD Edwards component: Human Resources. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise JD Edwards...

8.8CVSS5.8AI score0.00432EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/21 12:00 a.m.•1 views

CVE-2026-60469: Improper Access Control

Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise WebCenter Content:...

8.7CVSS5.7AI score0.00326EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/07/21 12:00 a.m.•21 views

PT-2026-62968

Vulnerability in the Oracle Public Sector Human Resources product of Oracle E-Business Suite component: Regression Testing. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

5.4CVSS7AI score0.00231EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/07/21 12:00 a.m.•25 views

PT-2026-63232

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle HRMS US versions 12.2.3 through 12.2.15 Description An issue exists in the Internal Operations component of Oracle HRMS US that allows a high privileged attacker with network access via HTTP to compromise the...

6.8CVSS7.1AI score0.00396EPSS
SaveExploits0References4
NVD
NVD
•added 2026/07/19 4:17 p.m.•23 views

CVE-2026-63916

In the Linux kernel, the following vulnerability has been resolved: HID: wacom: Fix OOB write in wacomhidsetdevicemode wacomhidsetdevicemode currently assumes that the HIDDGINPUTMODE usage is always located in the first field field0 of the feature report. However, a device can specify...

8.8CVSS0.00412EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
•added 2026/07/19 12:00 a.m.•19 views

PT-2026-61233

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds write exists in the wacom hid set device mode function. The issue occurs because the function assumes the HID DG INPUTMODE usage is always located in the first field...

8.8CVSS5.5AI score0.00412EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2026/07/17 12:00 a.m.•53 views

The vulnerability of Windows operating systems with HID technology allows attackers to disclose sensitive information.

The vulnerability of Windows operating systems with HID devices is related to a numerical overflow condition. Exploiting this vulnerability can allow an attacker to disclose protected information...

4.7CVSS5.3AI score0.00311EPSS
SaveExploits0References2Affected Software11
Positive Technologies
Positive Technologies
•added 2026/07/15 12:00 a.m.•51 views

PT-2026-58885

The HCM developed by MetaGuru has a SQL Injection vulnerability. Authenticated remote attackers can inject SQL commands via specific parameters, thereby compromising the confidentiality, integrity, and availability of database data...

8.8CVSS6.2AI score0.00543EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/07/14 6:32 p.m.•27 views

EUVD-2026-43886

Integer overflow or wraparound in Windows Devices Human Interface allows an authorized attacker to disclose information locally...

4.7CVSS6AI score0.00311EPSS
SaveExploits0References2
NVD
NVD
•added 2026/07/14 6:17 p.m.•33 views

CVE-2026-50310

Integer overflow or wraparound in Windows Devices Human Interface allows an authorized attacker to disclose information locally...

4.7CVSS0.00311EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/07/14 5:06 p.m.•19 views

CVE-2026-50310 Windows Human Interface Device Information Disclosure Vulnerability

...

4.7CVSS5.7AI score0.00311EPSS
SaveExploits0References1
Rows per page
Query Builder