261710 matches found
CVE-2026-70793
Oracle Hyperion Financial Reporting Server (version 11.2.25.0.000) has a network-accessible vulnerability exploitable by low-privileged attackers via HTTP, enabling unauthorized data read, insert, update, and delete. CVSS 3.1 scores 4.2 (Medium). No exploitation details or patches are provided in...
CVE-2026-70792
A vulnerability in the Internal Operations component of Oracle Yard Management (Oracle E-Business Suite, versions 12.2.3–12.2.15) allows a low-privileged attacker with network HTTP access to compromise the application, with successful exploitation enabling full takeover (CVSS 3.1 base score 8.8, ...
CVE-2026-70734
Oracle Autonomous Health Framework's Trace File Analyzer component (versions 26.1.0, 26.2.0, 26.3.1, 26.5.0, 26.5.2) is affected by a HIGH-severity (CVSS 7.4) local vulnerability requiring high privileges and user interaction. Successful exploitation permits unauthorized data modification/deletio...
CVE-2026-70701
Affected: Oracle E-Business Suite Payables, component Internal Operations, versions 12.2.3–12.2.15. A low-privileged network attacker can compromise Payables data confidentiality and integrity (CVSS 8.1, HIGH). Exploitation details are not provided. Apply Oracle Critical Patch Update referenced a...
CVE-2026-62639
CVE-2026-62639 is a critical vulnerability in Oracle Reports Developer (Oracle Fusion Middleware), specifically in the Security and Authentication component, affecting version 14.1.2.0.0 . An unauthenticated attacker with network access via CORBA can exploit this flaw to achieve full takeover of ...
CVE-2026-62592
Oracle Siebel CRM Integration (component: Open Integration ) versions 25.12–26.6 are affected by a critical vulnerability (CVSS 3.1: 9.8 ) that allows an unauthenticated attacker with network access via HTTP to achieve full takeover of the product, impacting confidentiality, integrity, and availa...
CVE-2026-62462
Oracle E-Business Suite Work in Process (component: Internal Operations) versions 12.2.3-12.2.15 is vulnerable. A low-privileged attacker with network access via HTTP can exploit it for full CIA impact (CVSS 8.8 HIGH). Oracle's August 2026 CPU advisory is referenced for patch details; no exploit ...
CVE-2026-60983
A high-severity (CVSS 7.7) vulnerability in Oracle WebCenter Content's Content Server component (versions 14.1.2.0.0 and 12.2.1.4.0) allows a low-privileged attacker with network HTTP access to read critical data. No public exploit code or active exploitation details are provided in the documents...
CVE-2026-60873
...
CVE-2026-16868
creationtimestamp| type| source ---|---|--- 2026-08-18 20:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mtezeerdxh2y...
CVE-2026-67917
creationtimestamp| type| source ---|---|--- 2026-08-18 16:30:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtenacnjjb2u...
CVE-2026-75784
creationtimestamp| type| source ---|---|--- 2026-08-18 16:11:19+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtem6rsfaf2e 2026-08-18 18:00:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtesbcd3x425...
CVE-2026-73379
Unauthenticated Bypass Vulnerability in Contact Form by Supsystic 1.10.0 versions...
CVE-2026-73377
Unauthenticated Broken Access Control in Ultimate Maps by Supsystic 1.5.0 versions...
CVE-2026-75855
creationtimestamp| type| source ---|---|--- 2026-08-18 12:39:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/4slx2a7pbugb5...
CVE-2026-75851
creationtimestamp| type| source ---|---|--- 2026-08-18 12:20:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mte7bb543m2p 2026-08-18 12:27:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/jmjnx7jcsbs5x 2026-08-18 13:00:50+00:00| seen|...
ROOT-APP-NPM-CVE-2025-64718 CVE-2025-64718 in js-yaml - Patched by Root
Root has patched CVE-2025-64718 in the js-yaml package for Root:npm. Multiple fixed versions available...
WordPress Typing Effect plugin <= 1.3.7 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Typing Effect versions = 1.3.7...
Security Vulnerabilities fixed in Firefox ESR 115.39 — Mozilla
Internally found bugs present in Firefox ESR 115.38, Firefox ESR 140.13, Firefox ESR 153.0 and Firefox 153. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited...