19892 matches found
CVE-2026-71031
...
CVE-2026-71018
Oracle Commerce 11.4.0's Endeca Application Controller is vulnerable: unauthenticated remote attackers can exploit it via HTTP to read all accessible data and modify some data, requiring victim interaction; CVSS 3.1 score 8.2 (High). No specific root cause or patch details are provided. No known ...
CVE-2026-71011
CVE-2026-71011 affects the Experience Manager component of Oracle Commerce Guided Search / Oracle Commerce Experience Manager , version 11.4.0 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability, though successful exploitation requires user interaction from a...
CVE-2026-71010
...
CVE-2026-70981
...
CVE-2026-70935
Oracle Hyperion Financial Management 11.2.25.0.000 has a Security-component flaw: a low-privileged attacker with network HTTP access can read all accessible data (HIGH confidentiality) and cause partial DoS (LOW availability), CVSS 7.1. No patch version or exploit details are provided; see Oracle...
CVE-2026-70930
A HIGH-severity vulnerability affects the Product Diagnostic Tools component of Oracle E-Business Suite Order Management, versions 12.2.3 through 12.2.15. A low-privileged attacker with network HTTP access can exploit it (high attack complexity) to achieve full compromise of Oracle Order Manageme...
CVE-2026-70892
Affected product: Oracle Hyperion Data Relationship Management version 11.2.25.0.000, component "Access and security." Root cause: unspecified, described as "difficult to exploit." Impact: CVSS 8.2 (High) — low-privileged network attacker can gain unauthorized read/write access to critical data w...
CVE-2026-70873
...
CVE-2026-70820
...
CVE-2026-70770
...
CVE-2026-62636
Oracle Reports Developer 14.1.2.0.0 (Security and Authentication component) is vulnerable to an unauthenticated, remotely exploitable SOAP attack (CVSS 8.6) yielding unauthorized data access, modification, and partial DoS. Oracle's August 2026 Critical Patch Update addresses it; apply patches per...
CVE-2026-62569
...
CVE-2026-61296
...
CVE-2026-60914
...
CVE-2026-74956
creationtimestamp| type| source ---|---|--- 2026-08-18 20:40:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtf37cwmsx2j 2026-08-19 04:45:58+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260819 2026-08-20 05:07:07+00:00| see...
CVE-2026-66780
creationtimestamp| type| source ---|---|--- 2026-08-18 20:09:15+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtezi7xmyo2c 2026-08-18 20:50:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtf3ra5x5j2j 2026-08-20 12:59:58+00:00| seen|...
CVE-2026-47630
creationtimestamp| type| source ---|---|--- 2026-08-18 17:07:45+00:00| seen| https://infosec.exchange/users/AAKL/statuses/117117607235862161 2026-08-18 19:10:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/65wp6hpbjzwaf...
EUVD-2026-61029
Joomla! Core - 20260807 - MFA Authentication Bypass in Joomla 4.0.0-5.4.7 and 6.0.0-6.1.2 - Insufficient state checks lead to a vector that allows to bypass 2FA checks...
CVE-2026-73337
Joomla! Core - 20260807 - MFA Authentication Bypass in Joomla 4.0.0-5.4.7 and 6.0.0-6.1.2 - Insufficient state checks lead to a vector that allows to bypass 2FA checks...