CVE-2021-20253

CVE-2021-20253: Privilege Escalation via Job Isolation Escape in Ansible Tower A flaw was found in ansible-tower. The default installation is vulnerable to Job Isolation escape allowing an attacker to elevate the privilege from a low privileged user to the awx user from outside the isolated...

MAL-015

MAL-015: Isolation Escape 2 in Ansible Tower Le installazioni di Ansible Tower su alcune configurazioni di Rhel 7/8 sono potenzialmente vulnerabili a "Job Isolation" Escape che consentono a un attaccante di elevare i privilegi all'utente "awx" dall'esterno dell'ambiente isolato. I seguenti...

EUVD-2026-66666

Dell PowerProtect One, versions 20.1.0.0 and below, contain an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Remote execution...

CVE-2026-77127

The extension fails to restrict a backend AJAX endpoint for inline editing to fields the current user is permitted to see or edit. An authenticated, low-privileged backend user can supply arbitrary table, field and record parameters, and trigger an error response that discloses the current databa...

EUVD-2026-65091

Dell Client BIOS contains an Improper Link Resolution Before File Access 'Link Following' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Arbitrary Write...

EUVD-2026-64890

RansomLook contains an authorization weakness in the web-based configuration editor exposed through the /admin/config endpoint. The endpoint requires an authenticated session but does not perform an explicit privilege or administrator authorization check before allowing access to...

CVE-2026-71042

Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain component: PGC / Excel Plugin. The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile PLM. Successful attacks of...

CVE-2026-72661

CVE-2026-72661 describes a missing authorization vulnerability in Kibana where an internal data retrieval capability could bypass privilege checks and return endpoint response data with elevated internal permissions. Applicable to Elastic Kibana and tied to Security Solution/endpoint privileges, ...

Oracle APEX (CVE-2026-60630) (July 2026 CPU)

The remote host is affected by a vulnerability in Oracle APEX component: Installation as referenced in the July 2026 Oracle Critical Patch Update CPU advisory. - Vulnerability in the Oracle APEX product component: Installation. Easily exploitable vulnerability allows low privileged attacker with...

EUVD-2026-47489

Vulnerability in the Oracle Product Workbench product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Product...

EUVD-2026-47370

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Endeca Application Controller. The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with logon to the...

EUVD-2026-47061

Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM component: Siebel Cloud Manager. Supported versions that are affected are 22.3-26.5. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Siebel CRM Cloud Applications...

EUVD-2026-46901

Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware component: Integration Business Insight. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

EUVD-2026-46877

Vulnerability in the JD Edwards EnterpriseOne Solution Advisor product of Oracle JD Edwards component: Solution Advisor. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise JD Edwards EnterpriseO...

CVE-2026-61041

Vulnerability in the Oracle Demantra Demand Management product of Oracle Supply Chain component: Product Security. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Demantra...

CVE-2026-60630

Vulnerability in Oracle APEX component: Installation. Supported versions that are affected are 24.1, 24.2 and 26.1. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle APEX executes to compromise Oracle APEX. Successful attacks of this...

CVE-2026-60430

Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware component: OUD Core. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via LDAP to compromise Oracle Unified...

PT-2026-62846

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Payroll versions 12.2.3 through 12.2.15 Description A flaw in the Internal Operations component of Oracle Payroll allows a low-privileged attacker with access to the execution infrastructure to compromise the...

CVE-2026-56086

Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release versions 7.13.1.0 through 7.13.1.70 contain an Incorrect Authorization vulnerability. A low privileged attacker with...

PT-2026-50052

Vulnerability in the Oracle Quality product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Quality. Successful...