Tenda AX1806 security vulnerabilities

The Tenda AX1806 is a WiFi6 wireless router produced by the Chinese company Tenda. The Tenda AX1806 v1.0.0.1 version has a security vulnerability. This vulnerability stems from a stack overflow in the time parameter of the sub60CFC function, which may lead to a denial-of-service attack...

Argo Workflows Cross-Site Script Vulnerabilities

Argo Workflows is an open-source, container-native workflow engine for Kubernetes, part of the Argo project. Versions prior to Argo Workflows 3.6.17 and 3.7.8 had a cross-site scripting vulnerability. This vulnerability stemmed from the presence of a stored cross-site script in the artifact...

Hi-Rez Studios HiPatchService code-related vulnerabilities

Hi-Rez Studios HiPatchService is a software update service provided by Hi-Rez Studios in the United States. Version 5.1.6.3 of Hi-Rez Studios HiPatchService contains a code vulnerability. This vulnerability stems from the use of service paths without quotes in HiPatchService, which may allow loca...

CVE-2026-22022

Deployments of Apache Solr 5.3.0 through 9.10.0 that rely on Solr's "Rule Based Authorization Plugin" are vulnerable to allowing unauthorized access to certain Solr APIs, due to insufficiently strict input validation in those components. Only deployments that meet all of the following criteria ar...

CVE-2026-21975

creationtimestamp| type| source ---|---|--- 2026-01-20 23:48:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcvdss4f272g 2026-01-21 08:16:57+00:00| seen| https://gist.github.com/Darkcrai86/58c524eb3766770755055392d271183e 2026-01-21 16:30:19+00:00| seen|...

CVE-2026-21969

Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain component: Supplier Portal. The supported version that is affected is 6.2.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2026-21969

Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain component: Supplier Portal. The supported version that is affected is 6.2.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2026-21944

Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain component: Product Quality Management. The supported version that is affected is 6.2.4. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

CVE-2026-21940

Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain component: User and User Group. The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Agile PLM. Successful attacks of...

CVE-2026-21988

...

CVE-2026-21982

...

CVE-2026-21978

...

CVE-2026-21971

...

CVE-2026-21962

...

CVE-2026-21960

CVE-2026-21960 affects Oracle E-Business Suite Applications DBA (Java utils) for versions 12.2.3–12.2.15. The vulnerability enables a high-privileged, network-accessible attacker (via HTTP) to compromise Oracle Applications DBA, potentially causing unauthorized creation/deletion/modification of d...

CVE-2026-21946

...

CVE-2026-21944

...

CVE-2026-21944

Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain component: Product Quality Management. The supported version that is affected is 6.2.4. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

CVE-2026-21937

...

CVE-2026-21938

CVE-2026-21938 covers a vulnerability in Oracle PeopleSoft Enterprise PeopleTools (Portal component). Affected are Oracle PeopleSoft PeopleTools versions 8.60, 8.61, and 8.62. The flaw allows an unauthenticated attacker with network access over HTTP to compromise the system, with user interaction...