9416 matches found
CVE-2026-93083: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: firmware: armscmi: Unwind TX receiver mailbox setup failure mailboxchansetup can request an additional unidirectional TX receiver channel after successfully acquiring the primary channel. If that second request fails, the functio...
PT-2026-93518
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the saa7164 dev setup function where a device is added to the global saa7164 devlist before PCI BAR memory regions are requested. If the get resources function fails,...
The vulnerability of the Wireless Setup Section component in the microprogramming software of D-Link DSL-2740R routers allows attackers to perform cross-site scripting (XSS) attacks.
The vulnerability of the Wireless Setup Section component in D-Link DSL-2740R microprogramming software is related to the lack of measures taken to protect the website structure when processing the Wireless Network Name parameter. Exploiting this vulnerability allows a remote attacker to perform...
PT-2026-93639
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists when loading and unloading a table. This occurs if userspace initiates two concurrent table load ioctls where one succeeds and the other fails. The issue arises...
CVE-2026-87150
Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite component: Setup Workbench. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Bills of Material...
CVE-2026-87151
Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite component: Setup Workbench. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Bills of Material...
CVE-2026-83450
Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite component: Setup Workbench. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Bills of...
EUVD-2026-79806
Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite component: Setup Workbench. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Bills of Material...
CVE-2026-87151
Oracle E-Business Suite – Bills of Material (component: Setup Workbench ) in versions 12.2.3 through 12.2.15 contains an easily exploitable vulnerability allowing a low-privileged attacker with network access via HTTP to compromise the product. The vulnerability has a scope change , meaning succe...
CVE-2026-87150
CVE-2026-87150 is an easily exploitable vulnerability in the Setup Workbench component of Oracle Bills of Material (Oracle E-Business Suite), affecting supported versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this flaw to achieve takeover of t...
EUVD-2026-79805
Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite component: Setup Workbench. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Bills of Material...
EUVD-2026-79749
Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite component: Setup Workbench. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Bills of...
CVE-2026-83450
Oracle E-Business Suite – Bills of Material (component: Setup Workbench ) is affected by a vulnerability in supported versions 12.2.3 through 12.2.15 . The flaw allows a high-privileged attacker with network access via HTTP to compromise the product. The vulnerability carries a scope change , mea...
CVE-2026-57012
In the Setup Wizard, there is a possible remote package install due to a missing permission check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-57012
A missing permission check within the Setup Wizard allows for a potential remote package install . This vulnerability can lead to a remote escalation of privilege without requiring additional execution privileges or user interaction. Exploitation details are not provided in the documents.
CVE-2026-57012
In the Setup Wizard, there is a possible remote package install due to a missing permission check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-57012
In the Setup Wizard, there is a possible remote package install due to a missing permission check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
EUVD-2026-78992
In the Setup Wizard, there is a possible remote package install due to a missing permission check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-90847
A vulnerability was determined in EFM ipTIME C200E 1.094. The impacted element is an unknown function of the file iuxset.cgi of the component System Setup. This manipulation causes os command injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and ma...
SUSE CVE-2026-80940
In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: pci: fix resource leak on failed NAPI setup rtwpciprobe allocates PCI resources through rtwpcisetupresource before it sets up NAPI. If rtwpcinapiinit fails, the error path jumps straight to errpcideclaim and skips...