CVE-2026-75876

A security vulnerability has been detected in xianrendzw EasyReport up to 2.0.17.0522Beta. Affected by this issue is some unknown functionality of the file ModuleController.java of the component Move Operations. Such manipulation of the argument sourcePath leads to sql injection. The attack may b...

CVE-2026-75876

EasyReport versions up to 2.0.17.0522_Beta contain a SQL injection in ModuleController.java via the sourcePath argument in the Move Operations component, exploitable remotely with low privileges; CVSS 6.3 (Medium) with proof-of-concept exploit disclosed; no patch version provided, project unrespo...

CVE-2026-75876 xianrendzw EasyReport Move Operations ModuleController.java sql injection

A security vulnerability has been detected in xianrendzw EasyReport up to 2.0.17.0522Beta. Affected by this issue is some unknown functionality of the file ModuleController.java of the component Move Operations. Such manipulation of the argument sourcePath leads to sql injection. The attack may b...

EUVD-2026-61162

A security vulnerability has been detected in xianrendzw EasyReport up to 2.0.17.0522Beta. Affected by this issue is some unknown functionality of the file ModuleController.java of the component Move Operations. Such manipulation of the argument sourcePath leads to sql injection. The attack may b...

CVE-2026-50578

ePA 3.x Integration implements the authorization workflow and writes Medical Information Objects to Germany's electronic patient record. Prior to 1.3.0, ePA 3.x Integration disables TLS certificate verification for both ePA connections in app/vau/VAUProtokoll.py and Konnektor connections in...

EUVD-2026-61056

ePA 3.x Integration implements the authorization workflow and writes Medical Information Objects to Germany's electronic patient record. Prior to 1.3.0, ePA 3.x Integration disables TLS certificate verification for both ePA connections in app/vau/VAUProtokoll.py and Konnektor connections in...

GO-2026-6213 Worktree operations may follow symlinks in github.com/go-git/go-git

Worktree operations may follow symlinks in github.com/go-git/go-git...

CVE-2026-49224

Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to 1.0.8.4, Vvveb backend post revision operations allow a low-privileged Author to access revisions for posts owned by another Author. The admin/controller/content/revisions.php controll...

CVE-2026-73371 Joomla! Core - [20260808] - Improper ACL checks for batch copy actions in Joomla 4.0.0-5.4.7, 6.0.0-6.1.2

Joomla! Core - 20260808 - Improper ACL checks for batch copy actions in Joomla 4.0.0-5.4.7, 6.0.0-6.1.2 - An improper access check allows unauthorized users to perform copy batch operations on uneditable items...

CVE-2026-45119 MyBB: ACP UTF-8 Conversion CSRF

MyBB is free and open source forum software. Prior to 1.8.40, the Admin CP UTF-8 Conversion module does not validate certain requests correctly, allowing same-site attackers to alter table encoding and deny service with a specially crafted URL. The do=all control flow in...

PT-2026-77801

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle E-Business Tax versions 12.2.3 through 12.2.15 Description A flaw in the Internal Operations component of the Oracle E-Business Tax product allows a low-privileged attacker with access to the execution...

PT-2026-77811

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Financials for EMEA versions 12.2.3 through 12.2.15 Description A flaw in the Internal Operations component allows a low privileged attacker with network access via HTTP to compromise the system. This can lead to...

PT-2026-77832

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Financials for Asia/Pacific versions 12.2.3 through 12.2.15 Description A flaw in the Internal Operations component allows a low privileged attacker with network access via HTTP to compromise the system. This can...

PT-2026-77558

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Purchasing versions 12.2.3 through 12.2.15 Description A flaw in the Internal Operations component allows a low privileged attacker with network access via HTTP to compromise the system. This can lead to...

PT-2026-77815

Name of the Vulnerable Software and Affected Versions Oracle Call Center Technology versions 12.2.3 through 12.2.15 Description An issue exists within the Internal Operations component of the Oracle Call Center Technology product of Oracle E-Business Suite. A high privileged attacker with network...

PT-2026-77769

Name of the Vulnerable Software and Affected Versions Oracle Warehouse Management versions 12.2.3 through 12.2.15 Description An authorization bypass issue exists in the Internal Operations component of Oracle Warehouse Management. A low-privileged attacker with network access via HTTP can exploi...

PT-2026-77794

Vulnerability in the Oracle SDP Number Portability product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle SDP...

PT-2026-77808

Name of the Vulnerable Software and Affected Versions Oracle Call Center Technology versions 12.2.3 through 12.2.15 Description An issue exists within the Internal Operations component of the Oracle Call Center Technology product of Oracle E-Business Suite. A low privileged attacker with network...

PT-2026-77806

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Purchasing versions 12.2.5 through 12.2.15 Description A flaw in the Internal Operations component allows a low privileged attacker with network access via HTTP to compromise the system. Successful exploitation c...

PT-2026-77187

Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to 1.0.8.4, Vvveb backend post operations allow a low-privileged Author to access posts owned by another Author. The admin/controller/content/posts.php controller permits filteradmin id t...