CVE-2026-47877

Spring Security Authorization Server is vulnerable to Cross-Site Scripting (XSS) in its default consent page, which renders user-controlled values without HTML entity encoding. The flaw allows an attacker to inject scripts via crafted input reflected on the consent page, requiring user interactio...

CVE-2026-47877 Spring Security Authorization Server Default Consent Page is vulnerable to Cross-Site Scripting (XSS)

Spring Security Authorization Server's default consent page renders user-controlled values without HTML entity encoding. Spring Security 7.1.0 Spring Security 7.0.0 - 7.0.6...

EUVD-2026-66840

Spring Security Authorization Server's default consent page renders user-controlled values without HTML entity encoding. Spring Security 7.1.0 Spring Security 7.0.0 - 7.0.6...

Oracle E-Business Suite 12.2.3 -12.2.11 - Remote Code Execution

Oracle E-Business Suite 12.2.3 through 12.2.11 is susceptible to remote code execution via the Oracle Web Applications Desktop Integrator product, Upload component. An attacker with HTTP network access can execute malware, obtain sensitive information, modify data, and/or gain full control over a...

Hitachi Pentaho Business Analytics Server - Remote Code Execution

Hitachi Pentaho Business Analytics Server prior to versions 9.4.0.1 and 9.3.0.2, including 8.3.x, is susceptible to remote code execution via server-side template injection. Certain web services can set property values which contain Spring templates that are interpreted downstream, thereby...

Micro Focus Operations Bridge Reporter - Remote Code Execution

Micro Focus Operations Bridge Reporter 10.40 is susceptible to remote code execution. An attacker can potentially execute malware, obtain sensitive information, modify data, and/or execute unauthorized operations without entering necessary credentials. id: CVE-2021-22502 info: name: Micro Focus...

PhpMyAdmin <4.8.2 - Local File Inclusion

PhpMyAdmin before version 4.8.2 is susceptible to local file inclusion that allows an attacker to include view and potentially execute files on the server. The vulnerability comes from a portion of code where pages are redirected and loaded within phpMyAdmin, and an improper test for whitelisted...

MINI-G98F-75VM-WWGG

Bulletin has no description...

ECHO-5CD0-42C5-E641

Bulletin has no description...

ECHO-C81E-9900-F4E2

Bulletin has no description...

ECHO-BA17-0503-20CE

Bulletin has no description...

GHSA-F66Q-9RF6-8795 vulnerabilities

Vulnerabilities for packages: pgadmin4...

GHSA-GGR8-5VV4-36MX vulnerabilities

Vulnerabilities for packages: langfuse...

CLSA-2026-1787796805 TuxCare security update for axios (2 CVEs)

TuxCare rebuilt axios to address 2 CVEs. Fixed in 0.18.1-tuxcare.5...

CVE-2026-74747

creationtimestamp| type| source ---|---|--- 2026-08-27 01:43:40+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117164934142622275...

CLSA-2026-1787791991 TuxCare security update for org.springframework (2 CVEs)

TuxCare rebuilt 25 org.springframework packages to address 2 CVEs. Fixed in 6.2.15-tuxcare.6...

EUVD-2025-210804

HCL Connections is vulnerable to server-side request forgery SSRF when an internal server is compromised possibly allowing an attacker to send unauthorized requests in certain scenarios leading to information disclosure or security bypass...

CVE-2026-47666

creationtimestamp| type| source ---|---|--- 2026-08-27 00:00:26+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtzk4xs4wc2r...

PT-2026-82413

Name of the Vulnerable Software and Affected Versions Spring Security version 7.1.0 Spring Security versions 7.0.0 through 7.0.6 Spring Security versions 6.5.0 through 6.5.11 Spring Security versions 6.4.0 through 6.4.18 Spring Security versions 5.8.0 through 5.8.27 Spring Security versions 5.7.0...

tor-0.4.9.11-1.1 on GA media (moderate)

tor-0.4.9.11-1.1 on GA media Announcement ID: openSUSE-SU-2026:11590-1 Rating: moderate Cross-References: CVE-2026-77584 CVE-2026-77587 CVE-2026-77638 Affected Products: openSUSE Tumbleweed An update that solves 3 vulnerabilities can now be installed. Description: These are all security issues...