271609 matches found
PT-2026-77855
Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise FIN Common Objects Brazil version 9.1 Description An issue exists in the Common Objects component of PeopleSoft Enterprise FIN Common Objects Brazil. A high privileged attacker with network access via T3 or IIOP Internet...
CVE-2026-67921
Cross-Site Request Forgery CSRF vulnerability exists in Halo CMS versions up to 2.25.4 via the CorsConfigurer.java and the CsrfConfigurer.java components. This allows a remote attacker to execute arbitrary code...
EUVD-2026-61091
An incorrect access control vulnerability in reportico-web = 8.1.0 allows an unauthenticated attacker to inject arbitrary php code into the PreExecuteCode attribute of any report regardless of the safemode setting leading to remote code execution...
PT-2026-77436
Name of the Vulnerable Software and Affected Versions Oracle WebCenter Enterprise Capture version 12.2.1.4.0 Oracle WebCenter Enterprise Capture version 14.1.2.0.0 Description An issue exists in the Client Bundle component of Oracle WebCenter Enterprise Capture. An unauthenticated attacker with...
PT-2026-77399
Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft PeopleSoft Enterprise PeopleTools versions 8.61 through 8.63 Description A flaw in the Integration Broker component allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful...
EUVD-2026-61093
An issue in Halo 2.25.4 allows a remote attacker to execute arbitrary code via the run.halo.app.migration.impl.MigrationServiceImpl.restoreWorkdir, and org.springframework.util.FileSystemUtils.copyRecursively components...
CVE-2026-67920
Halo 2.25.4's MigrationServiceImpl.restoreWorkdir() fetches an arbitrary URL, extracts the zip's workdir/ into the Halo work dir unsanitized via FileSystemUtils.copyRecursively(), replacing the entire extension store and enabling RCE. A working exploit (exploit/migration_restore.py) is verified a...
ROS-20260818-73-0009
The vulnerability in Portainer-Ce is related to insufficient verification of data authenticity. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Zoom Workplace VDI Client < 7.0.11 Vulnerability (ZSB-26017)
The version of Zoom Workplace VDI Client installed on the remote host is prior to 7.0.11. It is, therefore, affected by a vulnerability as referenced in the ZSB-26017 advisory. - Use after Free in the annotator function of Zoom Clients may allow a meeting participant to achieve remote code...
Linux Distros Unpatched Vulnerability : CVE-2026-74997
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, the cmdlearn driver of the markasjunk plugin is subject to remote code execution via crafted...
The vulnerability of the Diffable.diff method in the Python library for interacting with git repositories in GitPython allows a hacker to re-write any files in the system.
The vulnerability of the Diffable.diff method in the Python library for interacting with git repositories in GitPython relates to the implementation or modification of arguments. Exploiting this vulnerability could allow a malicious actor to re-write any files in the system remotely...
Amazon Corretto Java 8.x < 8.504.01.1 Multiple Vulnerabilities
The version of Amazon Corretto installed on the remote host is 8 prior to 8.504.01.1. It is, therefore, affected by multiple vulnerabilities as referenced in the corretto-8-2026-Aug-18 advisory. - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition produ...
Microsoft Edge (Chromium) < 151.0.4129.86 Multiple Vulnerabilities
The version of Microsoft Edge installed on the remote Windows host is prior to 151.0.4129.86. It is, therefore, affected by multiple vulnerabilities as referenced in the August 14, 2026 advisory. - Use after free in Blink in Google Chrome prior to 151.0.7922.137 allowed a remote attacker to execu...
Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability
Microsoft Internet Key Exchange IKE Service Extensions contains a double free vulnerability that could enable remote code execution...
PT-2026-77440
Name of the Vulnerable Software and Affected Versions Oracle WebCenter Enterprise Capture version 12.2.1.4.0 Oracle WebCenter Enterprise Capture version 14.1.2.0.0 Description An issue exists in the Client Bundle component of Oracle WebCenter Enterprise Capture. An unauthenticated attacker with...
PT-2026-80784
This update for redis fixes the following issues: Changes in redis: - Update to 8.10.1 Update urgency: SECURITY: There are security fixes in the release. - Security fixes - CVE-2026-62356 Miscalculated buffer size in CMSketch RDB loading may lead to heap OOB write - Out-of-bounds access in TopK...
CVE-2026-67920
An issue in Halo 2.25.4 allows a remote attacker to execute arbitrary code via the run.halo.app.migration.impl.MigrationServiceImpl.restoreWorkdir, and org.springframework.util.FileSystemUtils.copyRecursively components...
KLA91228 Multiple vulnerabilities in Mozilla Firefox ESR
Multiple vulnerabilities were found in Mozilla Firefox ESR. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, obtain sensitive information. Below is a complete list of vulnerabilities: 1. Security vulnerability can ...
PT-2026-77424
Name of the Vulnerable Software and Affected Versions Oracle WebCenter Enterprise Capture version 12.2.1.4.0 Oracle WebCenter Enterprise Capture version 14.1.2.0.0 Description An issue exists in the Client Bundle component of Oracle WebCenter Enterprise Capture. An unauthenticated attacker with...
PT-2026-77331
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.169 Description A race condition in the USB component allows a remote attacker who has already compromised the renderer process to potentially execute arbitrary code outside the sandbox. This is...