18257 matches found
PT-2026-63433
A flaw was found in librest. The PKCE implementation for OAuth authorization uses the GRand function from the GLib API, a cryptographically insecure pseudo-random number generator. Because the generated "code verifier" lacks sufficient cryptographic entropy, a malicious actor can reverse-engineer...
CVE-2026-63959
A flaw was found in the Linux kernel's USB Type-C Universal Serial Bus Type-C subsystem. A malicious or broken USB-C port can transmit a specially crafted data frame that advertises more data objects than it actually contains. This can lead to the system reading from uninitialized memory,...
CVE-2026-60150
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.12. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle V...
CVE-2026-62466
CVE-2026-62466 affects Oracle E-Business Suite Human Resources (Data Removal Tool) with affected 12.2.3–12.2.15. The vulnerability allows a high-privilege attacker with network access via HTTP to compromise Oracle Human Resources, potentially taking over the resource. The CVSS v3.1 base score is ...
CVE-2026-61236
CVE-2026-61236 affects Oracle PeopleSoft Enterprise FIN Common Objects Brazil ( Staffing component) with affected version 9.1. The vulnerability allows an unauthenticated attacker over HTTP to access PeopleSoft data, potentially leading to unauthorized data access or full access to accessible dat...
CVE-2026-61223
CVE-2026-61223 concerns Oracle Communications Converged Application Server (Security component). Affected versions are 8.2 and 8.3. The issue is accessible without authentication over TCP/IP and, per the description, can lead to takeover of the Converged Application Server with high impact on con...
CVE-2026-61190
CVE-2026-61190 affects Oracle Agile Engineering Data Management (Oracle Supply Chain), specifically the Install component, version 6.2.1. The vulnerability allows a low-privilege attacker who has network access via HTTP to compromise the system. Successful exploitation requires user interaction a...
CVE-2026-61181
CVE-2026-61181 affects Oracle Agile Product Lifecycle Management for Process (Product Quality Management) with affected version 6.2.4. The vulnerability is exploitable over a network (HTTP) by a low-privilege attacker and requires user interaction; it may lead to unauthorized data access and pote...
CVE-2026-61167
...
CVE-2026-61160
CVE-2026-61160 affects Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Experience Manager) in 11.4.0. The vulnerability allows a low-privileged, network-accessible attacker over HTTP to compromise the product, potentially leading to unauthorized access to data and a...
CVE-2026-61143
...
CVE-2026-61096
...
CVE-2026-61095
...
CVE-2026-61087
CVE-2026-61087 affects Oracle PeopleSoft Enterprise FIN Payables (v9.2) — a vulnerability in the Security component that an unauthenticated, network-accessing attacker can exploit via HTTP to access or compromise FIN Payables data. The CVSSv3.1 base score is 7.5 (Impact: Confidentiality) with vec...
CVE-2026-61083
CVE-2026-61083 affects Oracle E-Business Suite’s Performance Management, specifically the Appraisals component, with affected versions 12.2.3–12.2.15. The vulnerability permits a low-privileged, network-accessing attacker (via HTTP) to compromise Oracle Performance Management, enabling unauthoriz...
CVE-2026-61081
...
CVE-2026-61065
CVE-2026-61065 affects Oracle Access Manager (Oracle Fusion Middleware), specifically the Authentication Engine. Affected versions are 12.2.1.4.0 and 14.1.2.1.0. The entry describes an easily exploitable vulnerability that allows an unauthenticated attacker with network access via HTTP to comprom...