143157 matches found
CVE-2026-73873
...
CVE-2026-73865
...
CVE-2026-71166
...
CVE-2026-71155
Oracle Helidon 3.2.18 Imperative Web Server allows low-privilege HTTP attackers to read critical data and modify some data (CVSS 8.5). No patch version is specified; monitor Oracle's August 2026 CPU for remediation. No exploit code is available in the provided documents.
CVE-2026-71131
...
CVE-2026-71122
Oracle Analytics BIE (version 26.01.0.0.0), Platform Security component, has a high-complexity, network-exploitable flaw requiring high privileges via HTTP; successful exploitation causes full product takeover with scope change to other products (CVSS 8.0). Oracle's August 2026 CPU advisory is th...
CVE-2026-71116
Oracle VM VirtualBox 7.2.14 Core component has a HIGH-severity local vulnerability (CVSS 7.5) exploitable by a high-privilege attacker logged into the host, potentially compromising the hypervisor and additional products (scope change). No fix version is specified in the provided documents. Monit...
CVE-2026-71106
Oracle Hospitality OPERA 5 Property Services (component: Opera Servlet ) is affected by a vulnerability in versions 5.6.28.0–5.6.28.1 . An unauthenticated attacker with network access via HTTP can achieve full system takeover (complete compromise of confidentiality, integrity, and availability). ...
CVE-2026-71100
CVE-2026-71100 affects Oracle Database Server's RDBMS component across versions 19.3-19.32, 21.3-21.23, and 23.4.0-23.26.3. An unauthenticated attacker with network access via Oracle Net can exploit it to read a subset of database data. CVSS 3.1 score is 5.3 (MEDIUM). Oracle's August 2026 CPU adv...
CVE-2026-71092
CVE-2026-71092 affects the Lease Administration component of Oracle PeopleSoft Enterprise FIN Lease Administration version 9.2 . A low-privileged attacker with local access to the infrastructure can exploit this vulnerability (high complexity, no user interaction) to achieve unauthorized creation...
CVE-2026-71083
Oracle Agile PLM MCAD Connector CAX Client (affected version 3.6) has a low-severity (CVSS 1.8) local vulnerability requiring high privileges and user interaction; successful exploitation yields unauthorized read access to a subset of accessible data. No fix version or exploitation evidence is pr...
CVE-2026-71075
...
CVE-2026-71064
...
CVE-2026-71053
CVE-2026-71053 affects Oracle Agile Engineering Data Management (Oracle Supply Chain), specifically the Web Services Security component in version 6.2.1 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability to achieve full takeover of the product, resulting in ...
CVE-2026-71053
...
CVE-2026-71040
...
CVE-2026-71008
Oracle Commerce Experience Manager component in version 11.4.0 is affected by a network-reachable vulnerability exploitable by a high-privileged HTTP attacker, enabling unauthorized access to critical or all accessible data (CVSS 6.8, confidentiality impact). Exploitation details are not provided...
CVE-2026-70985
...
CVE-2026-70981
Oracle Commerce 11.4.0 Content Acquisition System is affected by a critical (CVSS 9.1) unauthenticated network-based vulnerability enabling unauthorized data modification and denial of service. No exploitation details are provided; refer to Oracle's August 2026 security alert for patch information.