CVE-2026-78474: Exposure of Sensitive Information to an Unauthorized Actor

The Ni WooCommerce Sales Report WordPress plugin before 4.2.0 does not have any authentication or authorisation checks on one of its report-printing routines, allowing unauthenticated users to retrieve WooCommerce order details and customer contact information, to target an individual order, and ...

PT-2026-93287

The Ni WooCommerce Sales Report WordPress plugin before 4.2.0 does not have any authentication or authorisation checks on one of its report-printing routines, allowing unauthenticated users to retrieve WooCommerce order details and customer contact information, to target an individual order, and ...

PT-2026-93286

The Ni WooCommerce Sales Report WordPress plugin before 4.2.0 does not sanitise and escape a parameter before using it in a SQL statement, allowing unauthenticated users to perform SQL injection attacks...

CVE-2026-78472: Improper Neutralization of Special Elements used in an SQL Command

The Ni WooCommerce Sales Report WordPress plugin before 4.2.0 does not sanitise and escape a parameter before using it in a SQL statement, allowing unauthenticated users to perform SQL injection attacks...

PT-2026-93876

Name of the Vulnerable Software and Affected Versions Open5GS versions prior to 2.8.1 Description A remote attack can be initiated against the PFCP Session Report Request Handler component. The issue resides in the smf n4 handle session report request function within the src/smf/n4-handler.c file...

CVE-2026-92416: Reachable Assertion

A vulnerability has been found in Open5GS up to 2.8.0. Affected by this issue is the function smfn4handlesessionreportrequest of the file src/smf/n4-handler.c of the component PFCP Session Report Request Handler. The manipulation leads to reachable assertion. The attack may be initiated remotely...

Linux Distros Unpatched Vulnerability : CVE-2026-89999

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HID: wacom: validate report length in wacomintuospro2btirq wacomintuospro2btirq receives the wire report length in len but never consults it before parsing...

CVE-2026-83020

creationtimestamp| type| source ---|---|--- 2026-09-15 22:13:08+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvlnhk2jgn2j 2026-09-15 23:30:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvlrr42ag52w 2026-09-16 16:00:45+00:00| seen|...

CVE-2026-83006

creationtimestamp| type| source ---|---|--- 2026-09-15 22:13:01+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvlnhc4xbq2b 2026-09-15 23:20:08+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvlr7dre3a2g 2026-09-23 09:49:50+00:00| seen|...

CVE-2026-73952

creationtimestamp| type| source ---|---|--- 2026-09-15 22:10:09+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvlnc6b3i22f 2026-09-23 09:50:41+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-11 2026-09-23 14:07:07+00:00| seen|...

CVE-2026-71133

creationtimestamp| type| source ---|---|--- 2026-09-15 21:40:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvllmfzmvr2f 2026-09-15 22:08:39+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvln7jbsog22 2026-09-16 16:00:45+00:00| seen|...

CVE-2026-73961

creationtimestamp| type| source ---|---|--- 2026-09-15 21:10:09+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvljwuutr62n 2026-09-15 22:10:42+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvlnd6qpsp2t 2026-09-23 09:50:25+00:00| seen|...

CVE-2026-87126

Vulnerability in the Oracle Report Manager product of Oracle E-Business Suite component: Reports Security. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Report Manager...

CVE-2026-83125

Vulnerability in the Oracle Report Manager product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Report Manager...

CVE-2026-83123

Vulnerability in the Oracle Report Manager product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle Report Manager...

CVE-2026-83122

Vulnerability in the Oracle Report Manager product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle Report Manager...

CVE-2026-83017

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Report Distribution. Supported versions that are affected are 8.61-8.63. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise...

CVE-2026-87126

Oracle Report Manager (component: Reports Security ) in Oracle E-Business Suite versions 12.2.3 through 12.2.15 contains a network-exploitable vulnerability accessible via HTTP. A low-privileged attacker with network access can compromise the component, resulting in unauthorized access to critica...

EUVD-2026-79781

Vulnerability in the Oracle Report Manager product of Oracle E-Business Suite component: Reports Security. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Report Manager...

CVE-2026-83125

Oracle Report Manager (component: Internal Operations ) within Oracle E-Business Suite versions 12.2.3 through 12.2.15 is affected by a network-exploitable vulnerability. A low-privileged attacker with network access via HTTP can compromise the component, resulting in a takeover of Oracle Report ...