75387 matches found
CVE-2026-62539
...
CVE-2026-62520
...
CVE-2026-62509
...
CVE-2026-62501
...
CVE-2026-62481
...
CVE-2026-62481
Oracle Hyperion Infrastructure Technology 11.2.25.0.000 is affected in the Common Events component. A low-privileged attacker with network SQL access can achieve full product takeover (C/I/A impact). Oracle's August 2026 CPU advisory (cspuaug2026.html) provides remediation; no exploit details are...
CVE-2026-62457
...
CVE-2026-62455
...
CVE-2026-61300
...
CVE-2026-61284
...
CVE-2026-61273
...
CVE-2026-60916
...
CVE-2026-60909
...
CVE-2026-60865
Oracle Fusion Middleware's Service Delivery Platform Messaging Enabler component (versions 14.1.2.0.0 and 12.2.1.4.0) is vulnerable to network-based HTTP attacks by high-privileged attackers, allowing unauthorized access to critical data with scope-change impact across additional products. CVSS 3...
CVE-2026-60849
...
MineAdmin Vulnerable to Path Traversal via Unsanitized identifier in Plugin Install/Uninstall
Path Traversal via Unsanitized Identifier in Plugin Install/Uninstall Summary The app-store plugin service concatenates unsanitized user-supplied identifier values directly into file system paths. An attacker can use path traversal sequences e.g., ../ to read, install, or uninstall plugins from...
Directory Traversal
Overview mineadmin/mineadmin is a Quickly build a background management system for web applications Affected versions of this package are vulnerable to Directory Traversal via the identifier parameter in the plugin installation and uninstallation process. An attacker can access or modify files...
CGA-4WMP-QRXW-J63P
Bulletin has no description...
BELL-CVE-2026-14670
Bulletin has no description...
PT-2026-80225
Path Traversal via Unsanitized Identifier in Plugin Install/Uninstall Summary The app-store plugin service concatenates unsanitized user-supplied identifier values directly into file system paths. An attacker can use path traversal sequences e.g., ../ to read, install, or uninstall plugins from...