72257 matches found
CVE-2026-60369
CVE-2026-60369 affects Oracle Platform Security for Java (Oracle Fusion Middleware), specifically the Centralized Thirdparty Jars component. Affected versions are 12.2.1.4.0 and 14.1.2.0.0. An attacker with network access over HTTP and low privileges can compromise the affected product, with pote...
CVE-2026-60367
CVE-2026-60367 affects Oracle Platform Security for Java (Oracle Fusion Middleware) with the Centralized Thirdparty Jars component. Affected versions are 12.2.1.4.0 and 14.1.2.0.0. The vulnerability is exploitable over HTTP by an unauthenticated remote attacker, and successful exploits can lead t...
CVE-2026-60367
...
GHSA-CJ9H-QX8G-PQ2G n8n: Shared-Workflow Editor Can Exfiltrate Credentials via Inline Sub-Workflow JSON
Impact n8n's credential-access checks validated only a node's top-level credentials, not credentials referenced inside an Execute Sub-workflow node's inline workflow JSON. A member with editor access to a shared workflow could reference a credential they were not permitted to use inside that inli...
CVE-2026-6071
creationtimestamp| type| source ---|---|--- 2026-07-22 22:04:53+00:00| seen| https://bsky.app/profile/deafnews-auto.bsky.social/post/3mrbde4g7bk23...
CVE-2026-64793
creationtimestamp| type| source ---|---|--- 2026-07-22 22:03:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrbdbiaqay2a...
GHSA-272M-GCWP-MPWG Netty: Missing CertificateID Validation in OCSP Response Allows Replay Attacks
Summary Netty's OcspClient does not validate that the CertificateID in an OCSP response matches the requested CertificateID. A bad actor can replay a GOOD status response issued for an unrelated certificate by the same CA to bypass revocation checks for any certificate. Details...
CVE-2026-16628 oclif JIT Plugin Entry child_process.exec os command injection
A vulnerability was detected in oclif up to 4.23.16. Affected by this vulnerability is the function childprocess.exec of the component JIT Plugin Entry Handler. Performing a manipulation of the argument jitPlugins results in os command injection. The attack is only possible with local access. The...
CVE-2026-13072
creationtimestamp| type| source ---|---|--- 2026-07-22 20:50:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrb77namiq27 2026-07-22 21:00:31+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrb7r2ehvw2g 2026-07-24 04:45:50+00:00| seen|...
CVE-2026-64798
Joomla Extension - regularlabs.com - Insecure login URL keys in IP login extension - Persistent URL login keys were also generated using a non-cryptographic random generator with insufficient entropy...
GO-2026-6022 Cloudreve: OAuth access tokens bypass scope enforcement due to missing client_id claim in github.com/cloudreve/Cloudreve
Cloudreve: OAuth access tokens bypass scope enforcement due to missing clientid claim in github.com/cloudreve/Cloudreve...
MINI-2RWR-3P5F-XWV2
Bulletin has no description...
MINI-7Q39-4535-95J5
Bulletin has no description...
MINI-5859-P2JC-GJPH
Bulletin has no description...
MINI-C79C-JM4P-5RWG
Bulletin has no description...
MINI-JV94-8R7X-GW67
Bulletin has no description...
MINI-9256-X395-WF2G
Bulletin has no description...
MINI-HFP2-FGW5-86CX
Bulletin has no description...
CVE-2026-22049
ONTAP versions 9.16.1 and higher with WebAuthn multi-factor authentication MFA configured are susceptible to a vulnerability related to the Relying Party ID which when successfully exploited could allow an attacker with valid credentials to bypass MFA...