CVE-2026-62451

CVE-2026-62451 affects Oracle Work in Process within Oracle E-Business Suite (Internal Operations). Affected versions are 12.2.14–12.2.15. The vulnerability allows a low-privileged attacker with network access via HTTP to compromise Oracle Work in Process, leading to unauthorized creation, deleti...

CVE-2026-61161

...

CVE-2026-61117

...

CVE-2026-60824

CVE-2026-60824 affects Oracle E-Business Suite’s Oracle iSupport (component: Internal Operations). Affected versions are 12.2.3–12.2.15. The issue enables a low-privileged, network-adjacent attacker with HTTP access to compromise iSupport, with potential unauthorized access to all Oracle iSupport...

CVE-2026-60760

...

CVE-2026-60735

CVE-2026-60735 affects Oracle E-Business Suite, Oracle Sales Offline (Internal Operations) in versions 12.2.3–12.2.15. An attacker with low privilege gains network access via HTTP to compromise Oracle Sales Offline, enabling unauthorized creation, deletion or modification of data and potentially ...

CVE-2026-60712

...

CVE-2026-60703

The CVE-2026-60703 entry concerns Oracle Interaction Blending (Internal Operations) in Oracle E-Business Suite, affected on 12.2.3–12.2.15. A local, low-privileged attacker with logon can compromise Oracle Interaction Blending, potentially leading to unauthorized creation, deletion or modificatio...

CVE-2026-60669

The CVE-2026-60669 entry concerns Oracle PeopleSoft Enterprise HCM Global Payroll Mexico (component: Global Payroll for Mexico) with affected version 9.2. A low-privilege, network-accessible (via HTTP) attacker can access and modify data, potentially causing unauthorized data changes and a partia...

CVE-2026-60408

...

CVE-2026-60397

...

CVE-2026-60302

...

CVE-2026-47058

CVE-2026-47058 affects Oracle Java SE (Scripting) on 8u491, 8u491-perf, and 11.0.31. The vulnerability enables an unauthenticated attacker over network protocols to compromise data confidentiality and integrity, potentially leading to unauthorized creation, deletion, or modification of data. The ...

CVE-2026-47032

...

UBUNTU-CVE-2026-46640

Twig is a template language for PHP. From 3.15.0 until 3.26.0, self. and import-alias dynamic attribute syntax can concatenate an attacker-controlled string into a MacroReferenceExpression name without identifier validation, causing raw PHP to be emitted into the generated template source and...

CVE-2025-13102 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-46959

Technical details (affected product, vulnerable component, exploit information, or remediation) are not publicly available in the provided documents. Monitor for updates.

ImageMagick 输入验证错误漏洞

ImageMagick is a set of open-source image processing software developed by the ImageMagick project. It can read, convert, and write images in various formats. Versions of ImageMagick prior to 6.9.13-48 and 7.1.2-24 contained a vulnerability related to input validation errors. This vulnerability...

frr: denial of service via crafted BGP UPDATE message

A flaw was found in FRRouting FRR. An unauthenticated remote attacker can exploit an integer underflow vulnerability by supplying a specially crafted BGP Border Gateway Protocol UPDATE message. This issue can lead to a Denial of Service DoS...

PT-2026-45880

Name of the Vulnerable Software and Affected Versions GLPI versions 11.0.0 through 11.0.6 Description An issue exists where a technician can store a Cross-Site Scripting XSS payload within ITIL costs. XSS is a type of security flaw that allows an attacker to inject malicious scripts into web page...