CVE-2026-14851

A vulnerability relating to the exposure of confidential information in the customer invoicing web application, which exposes personally identifiable information PII and financial data – including customer names, addresses, invoice numbers, payment details and tax information – to unauthorised...

CVE-2026-14851

The Copart online billing service suffers from a vulnerability that leads to the unauthorised disclosure of information within its customer invoicing web application. The root cause is a lack of authorisation checks on the endpoint responsible for serving PDF invoice files , combined with certain...

EUVD-2026-100940

A vulnerability relating to the exposure of confidential information in the customer invoicing web application, which exposes personally identifiable information PII and financial data – including customer names, addresses, invoice numbers, payment details and tax information – to unauthorised...

PT-2026-113725

A vulnerability relating to the exposure of confidential information in the customer invoicing web application, which exposes personally identifiable information PII and financial data – including customer names, addresses, invoice numbers, payment details and tax information – to unauthorised...

CVE-2026-97078

Unauthenticated Insecure Direct Object References IDOR in Client Invoicing by Sprout Invoices = 20.8.17 versions...

CVE-2026-97078 WordPress Client Invoicing by Sprout Invoices plugin <= 20.8.17 - Insecure Direct Object References (IDOR) vulnerability

Unauthenticated Insecure Direct Object References IDOR in Client Invoicing by Sprout Invoices = 20.8.17 versions...

CVE-2026-97078 WordPress Client Invoicing by Sprout Invoices plugin <= 20.8.17 - Insecure Direct Object References (IDOR) vulnerability

Unauthenticated Insecure Direct Object References IDOR in Client Invoicing by Sprout Invoices = 20.8.17 versions...

CVE-2026-97078

The Client Invoicing by Sprout Invoices WordPress plugin versions

PT-2026-103228

Unauthenticated Insecure Direct Object References IDOR in Client Invoicing by Sprout Invoices = 20.8.17 versions...

CVE-2026-97078: Authorization Bypass Through User-Controlled Key

Unauthenticated Insecure Direct Object References IDOR in Client Invoicing by Sprout Invoices = 20.8.17 versions...

WordPress Client Invoicing by Sprout Invoices plugin <= 20.8.17 - Insecure Direct Object References (IDOR) vulnerability

Insecure Direct Object References IDOR vulnerability discovered by gueco in WordPress Plugin Client Invoicing by Sprout Invoices versions = 20.8.17...

CVE-2026-87168

Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite component: G-Invoicing. Supported versions that are affected are 12.2.10-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Purchasing. Successful...

CVE-2026-87167

Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite component: G-Invoicing. Supported versions that are affected are 12.2.11-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Purchasing. Successful...

CVE-2026-87127

Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite component: G-Invoicing. Supported versions that are affected are 12.2.10-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Purchasing. While the...

CVE-2026-87167

CVE-2026-87167 affects Oracle Purchasing (component: G-Invoicing ) in Oracle E-Business Suite , versions 12.2.11 through 12.2.15 . The vulnerability is exploitable over the network via HTTP by a low-privileged attacker with no user interaction, allowing unauthorized creation, deletion, or modific...

EUVD-2026-79822

Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite component: G-Invoicing. Supported versions that are affected are 12.2.11-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Purchasing. Successful...

EUVD-2026-79823

Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite component: G-Invoicing. Supported versions that are affected are 12.2.10-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Purchasing. Successful...

CVE-2026-87168

A vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: G-Invoicing ) affects supported versions 12.2.10 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability with low complexity and no user interaction. Successful ...

EUVD-2026-79782

Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite component: G-Invoicing. Supported versions that are affected are 12.2.10-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Purchasing. While the...

CVE-2026-87127

CVE-2026-87127 affects the G-Invoicing component of Oracle Purchasing in Oracle E-Business Suite, versions 12.2.10 through 12.2.15 . The vulnerability is easily exploitable by a low-privileged attacker with network access via HTTP . Although the flaw resides in Oracle Purchasing, the changed scop...