Lucene search
+L

325249 matches found

Positive Technologies
Positive Technologies
•added 2026/09/15 12:00 a.m.•19 views

PT-2026-92596

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Applications Framework versions 12.2.3 through 12.2.15 Description A flaw in the Search Bean Incl. Advanced component allows a low privileged attacker with network access via HTTP to compromise the Oracle...

8.1CVSS5.7AI score0.0035EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/15 12:00 a.m.•19 views

PT-2026-92656

Name of the Vulnerable Software and Affected Versions Oracle iStore versions 12.2.3 through 12.2.15 Description A flaw in the Shopping Cart component allows a low privileged attacker with network access via HTTP to compromise the system. Successful exploitation can lead to unauthorized access,...

8.1CVSS5.7AI score0.0035EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/15 12:00 a.m.•19 views

PT-2026-92654

Name of the Vulnerable Software and Affected Versions Oracle Site Hub versions 12.2.3 through 12.2.15 Description A flaw in the Internal Operations component allows a low privileged attacker with network access via HTTP to compromise the system. This can lead to unauthorized read access to a subs...

7.1CVSS5.7AI score0.00278EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/15 12:00 a.m.•22 views

PT-2026-93084

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Integration Broker. Supported versions that are affected are 8.61-8.63. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise...

7.7CVSS5.6AI score0.00299EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/15 12:00 a.m.•25 views

PT-2026-92687

Vulnerability in the Oracle Customer Interaction History product of Oracle E-Business Suite component: Outcome-Result. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Custome...

8.8CVSS5.6AI score0.00417EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/15 12:00 a.m.•26 views

PT-2026-93080

Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain component: Engineering Communication Interface. The supported version that is affected is 6.2.1. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Orac...

8.4CVSS5.7AI score0.00143EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/15 12:00 a.m.•7 views

CVE-2026-58755: Protection Mechanism Failure

In smmuinstallnestedste of arm-smmu-v3.c, there is a possible escalation of privilege due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

6.7CVSS6AI score0.00103EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/15 12:00 a.m.•4 views

CVE-2026-83289: Improper Privilege Management

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics component: Analytics Web General. Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Difficult to exploit vulnerability allows low privileged attacker with network access...

7.5CVSS5.7AI score0.00323EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/15 12:00 a.m.•46 views

PT-2026-92982

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle HRMS India versions 12.2.3 through 12.2.15 Description An issue exists in the Internal Operations component of the Oracle HRMS India product. A low privileged attacker with network access via HTTP can exploit thi...

8.1CVSS5.6AI score0.0035EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/15 12:00 a.m.•47 views

PT-2026-92943

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware Helidon versions 4.0.0 through 4.5.4 Description A flaw in the helidon-microprofile-security component allows a low privileged attacker with network access via HTTP to compromise the system. This can lead to unauthoriz...

5.4CVSS5.7AI score0.00231EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/15 12:00 a.m.•3 views

CVE-2026-76678: Improper Privilege Management

A vulnerability in the API endpoint of HPE Networking EdgeConnect SD-WAN Gateways could allow a low-privilege authenticated remote attacker to escalate privileges. Successful exploitation of this vulnerability may enable the attacker to execute arbitrary system commands with root privileges on th...

8.8CVSS6.4AI score0.00625EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/15 12:00 a.m.•20 views

PT-2026-92905

Vulnerability in the Oracle Engineering product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Engineering. Whil...

8.2CVSS5.6AI score0.00279EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/15 12:00 a.m.•21 views

PT-2026-92988

Vulnerability in the Oracle Contract Lifecycle Management for Public Sector product of Oracle E-Business Suite component: ECC For Award and IDV. The supported version that is affected is V16. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromis...

8.8CVSS5.7AI score0.00417EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/15 12:00 a.m.•4 views

CVE-2026-58744: Improper Input Validation

In multiple locations, there is a possible escalation of privilege due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS5.8AI score0.00096EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/15 12:00 a.m.•21 views

PT-2026-92357

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description A race condition exists in multiple locations, leading to a time-of-check to time-of-use TOCTOU issue. This flaw allows for local escalation of privilege,...

6.7CVSS5.7AI score0.00078EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/15 12:00 a.m.•2 views

CVE-2025-11395: Insecure Inherited Permissions

A flaw was found in Podman. If an attacker can pass a crafted tar archive to the podman load command, they can create files on the host machine with the privileges of the user running Podman...

5.5CVSS5.8AI score0.00362EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/09/15 12:00 a.m.•12 views

Linux Distros Unpatched Vulnerability : CVE-2026-75092

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A privilege escalation flaw was found in the scanmysql actor of leapp-upgrade-el9toel10 provided by leapp-repository. During RHEL 9 to RHEL 10 upgrades, the act...

7.3CVSS6.1AI score0.00129EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/15 12:00 a.m.•23 views

PT-2026-92338

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description A missing bounds check in multiple locations allows for a possible out-of-bounds write, which is a condition where data is written outside the intended memory...

6.7CVSS5.8AI score0.00098EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/15 12:00 a.m.•4 views

CVE-2026-87231: Improper Privilege Management

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion component: Security. The supported version that is affected is 11.2.26.0.000. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Financia...

8.1CVSS5.8AI score0.00392EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/15 12:00 a.m.•27 views

PT-2026-92862

Name of the Vulnerable Software and Affected Versions Oracle Identity Manager versions 12.2.1.4.0 Oracle Identity Manager versions 14.1.2.1.0 Description A security flaw in the Oracle Identity Manager product of Oracle Fusion Middleware allows a low privileged attacker with network access via HTT...

8.8CVSS5.7AI score0.00417EPSS
SaveExploits0References3
Rows per page
Query Builder