24153 matches found
EUVD-2026-47283
Vulnerability in the PeopleSoft Enterprise FIN Staffing Front Office Brazil product of Oracle PeopleSoft component: Staffing. The supported version that is affected is 9.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft...
EUVD-2026-46951
Vulnerability in the PeopleSoft Enterprise FIN Staffing Front Office product of Oracle PeopleSoft component: Staffing Front Office. The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft...
CVE-2026-61072
Vulnerability in the PeopleSoft Enterprise FIN Staffing Front Office Brazil product of Oracle PeopleSoft component: Staffing. The supported version that is affected is 9.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft...
CVE-2026-60593
Vulnerability in the PeopleSoft Enterprise FIN Staffing Front Office product of Oracle PeopleSoft component: Staffing Front Office. The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft...
vulnerabilities present in Microsoft Office
Microsoft has uncovered vulnerabilities in various Office products, such as Word, Excel, PowerPoint, and SharePoint. A malicious individual can exploit these vulnerabilities to carry out attacks that can cause various types of damage, as listed in the table below. For successful exploitation, the...
PT-2026-62631
Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft Enterprise FIN Staffing Front Office version 9.2 Description An issue in the Staffing Front Office component allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful exploitation ca...
VulnCheck KEV: CVE-2026-50522
Microsoft SharePoint contains a deserialization of untrusted data vulnerability which could allow an unauthorized attacker to execute code over a network...
Vulnerabilities of Microsoft Office, Excel, and 365 Apps for Enterprise packages, as well as Microsoft Office Online Server, allow attackers to disclose protected information.
The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise programs, as well as Microsoft Office Online Server, is related to reading data beyond the allowed range in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by...
CVE-2026-36669
An unauthenticated arbitrary file upload vulnerability in ckuploadhandler.php in Feng Office 3.11.13.11 allows remote attackers to upload malicious files such as .html to the web-accessible /tmp/ directory...
PT-2026-60849
Name of the Vulnerable Software and Affected Versions Feng Office version 3.11.13.11 Description An unauthenticated arbitrary file upload issue exists in the ck upload handler.php file. This allows remote attackers to upload malicious files, such as .html files, to the web-accessible /tmp/...
CVE-2026-36669
An unauthenticated arbitrary file upload vulnerability in ckuploadhandler.php in Feng Office 3.11.13.11 allows remote attackers to upload malicious files such as .html to the web-accessible /tmp/ directory...
CVE-2026-36669
An unauthenticated arbitrary file upload vulnerability in ckuploadhandler.php in Feng Office 3.11.13.11 allows remote attackers to upload malicious files such as .html to the web-accessible /tmp/ directory...
CVE-2026-36669
CVE-2026-36669 affects Feng Office 3.11.13.11, targeting the ck_upload_handler.php component. The vulnerability is an unauthenticated arbitrary file upload that allows attackers to place files (e.g., .html) in the web-accessible /tmp directory. Reported CVSS v3.1: 9.8 (CRITICAL) with network atta...
Security Updates for Microsoft Office Products C2R (July 2026)
The Microsoft Office Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally. CVE-2026-55045 - Use after free in Microsoft Office allows an unauthorized attacker...
CVE-2026-54733
The Microsoft 365 and Microsoft Entra ID Plugins for Moodle provide Office 365 and Azure Active Directory integration for Moodle. Prior to 4.5.6, 5.0.5, and 5.1.1, the Microsoft Office 365 Integration plugin localo365 Teams SSO endpoint ssologin.php base64-decodes a JWT payload and authenticates...
KLA91160 SUI vulnerability in Microsoft Office
User interface spoofing vulnerability was found in Microsoft Office. Malicious users can exploit this vulnerability to spoof user interface. Original advisories CVE-2026-62826 Exploitation CVE list CVE-2026-62826 high KB list 5002882 5002883 5002891 Solution Install necessary updates from the KB...
PT-2026-60486
Name of the Vulnerable Software and Affected Versions Microsoft Office 365 Integration plugin versions prior to 4.5.6 Microsoft Office 365 Integration plugin versions prior to 5.0.5 Microsoft Office 365 Integration plugin versions prior to 5.1.1 Description The Microsoft Office 365 Integration...
EUVD-2025-210478
LogicalDOC Enterprise up to and for v9.1.1 is vulnerable to Local File Inclusion LFI in the OnlyOfficeEditor servlet class, allowing authenticated user to exploit path traversal flaws in the fileExt parameter, enabling unauthorized access to sensitive files outside the designated directories...
CVE-2026-57821
A SQL Injection vulnerability exists in Apache Fineract's Office Search API GET /api/v1/offices in versions up to and including 1.14.0. The orderBy request parameter is concatenated into a SQL query without sufficient validation, allowing an authenticated user with permission to view offices to...
CVE-2026-57821
A SQL Injection vulnerability exists in Apache Fineract's Office Search API GET /api/v1/offices in versions up to and including 1.14.0. The orderBy request parameter is concatenated into a SQL query without sufficient validation, allowing an authenticated user with permission to view offices to...