54186 matches found
CVE-2026-70877
A CVSS 8.8 HIGH-severity flaw in Oracle Hyperion Data Relationship Management 11.2.25.0.000 (Access and security component) allows low-privileged, network-authenticated attackers via HTTP to fully compromise the application (C/H/I/A all High). Oracle's August 2026 CPU advisory is the patch refere...
CVE-2026-70781
Oracle E-Business Suite's Proposals product, Internal Operations component, versions 12.2.3 to 12.2.15, is vulnerable to a HIGH-severity (CVSS 7.2) issue exploitable by a high-privileged network attacker over HTTP, enabling full takeover. Oracle's August 2026 CPU advisory provides patches. Exploi...
CVE-2026-61011
Oracle WebCenter Sites (component of Oracle Fusion Middleware) versions 12.2.1.4.0 and 14.1.2.0.0 are affected. An unauthenticated remote attacker can exploit this via HTTP, gaining unauthorized creation, deletion, or modification access to all accessible data and causing partial denial of servic...
CVE-2026-60995
Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via TLS to compromise Oracle Identity...
MINI-462X-Q42W-6FV6
Bulletin has no description...
MINI-3FX2-74V6-5352
Bulletin has no description...
ROOT-APP-NPM-CVE-2026-16221 CVE-2026-16221 in fast-uri - Patched by Root
Root has patched CVE-2026-16221 in the fast-uri package for Root:npm. Multiple fixed versions available...
CVE-2026-13202
A vulnerability in OpenText Opentext Directory Services allows Input Data Manipulation. This issue affects Opentext Directory Services: through 22.2...
MINI-G2HX-M8H9-4MHG
Bulletin has no description...
MINI-WJPP-7XX9-JCF8
Bulletin has no description...
MINI-M58M-9XFR-WC2R
Bulletin has no description...
MINI-P9G2-XRG2-R5WH
Bulletin has no description...
Apache Solr - Authentication Bypass
Solr instances using the PKIAuthenticationPlugin, which is enabled by default when Solr Authentication is used, are vulnerable to Authentication bypass.A fake ending at the end of any Solr API URL path, will allow requests to skip Authentication while maintaining the API contract with the origina...
Roundcube Webmail - Remote Code Execution
Roundcube Webmail before 1.5.10 and 1.6.x before 1.6.11 allows remote code execution by authenticated users because the from parameter in a URL is not validated in program/actions/settings/upload.php, leading to PHP Object Deserialization. id: CVE-2025-49113 info: name: Roundcube Webmail - Remote...
CVE-2026-19979
creationtimestamp| type| source ---|---|--- 2026-08-16 15:22:53+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117105870334291690 2026-08-17 07:10:37+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mtb5iyxh3g2q...