School Registration and Fee System SQL Injection Vulnerability (CNVD-2026-37879)

School Registration and Fee System is a school registration and fee management software developed by the SourceCodester community. The system has a SQL injection vulnerability, which stems from incorrect handling of the period parameter in the file bilal/normal/payreport.php. Attackers can exploi...

SQL Injection Vulnerability in Sales and Inventory System (CNVD-2026-37978)

Sales and Inventory System is a business resource planning system for sales and inventory management developed by itsourcecode. The Sales and Inventory System has a SQL injection vulnerability, which stems from incorrect handling of the prodcode parameter in the file/pages/proedit1.php. Attackers...

CVE-2026-56964: Concurrent Execution using Shared Resource with Improper Synchronization

In multiple locations, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

PT-2026-92430

Name of the Vulnerable Software and Affected Versions HPE Networking EdgeConnect SD-WAN Orchestrator affected versions not specified Description Privilege escalation flaws exist in the API of the orchestrator. A remote authenticated user with low privileges can exploit these issues to gain...

PT-2026-92622

Vulnerability in the Oracle Forms product of Oracle Fusion Middleware component: Forms Services, C/S, Charmode. Supported versions that are affected are 12.2.1.19.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

PT-2026-92304

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description An incorrect bounds check in multiple functions within remap.c allows for a possible out-of-bounds write. This condition could enable local escalation of...

PT-2026-92864

Name of the Vulnerable Software and Affected Versions Oracle Utilities Network Management System versions 2.4.0.1.0 through 2.4.0.1.33 Oracle Utilities Network Management System versions 2.5.0.1.0 through 2.5.0.1.19 Oracle Utilities Network Management System versions 2.5.0.2.0 through 2.5.0.2.13...

PT-2026-92293

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A logic error in the code allows for a permission bypass in multiple locations. This issue can lead to local escalation of privilege, granting System execution...

PT-2026-92446

Name of the Vulnerable Software and Affected Versions HPE Networking EdgeConnect SD-WAN Gateways affected versions not specified Description A flaw in the underlying operating system allows an unauthenticated remote attacker to trigger a denial-of-service condition, causing the affected service t...

CVE-2026-83342: Improper Privilege Management

Vulnerability in the Oracle Utilities Network Management System product of Oracle Utilities Applications component: System Wide. Supported versions that are affected are 2.4.0.1.0-2.4.0.1.33, 2.5.0.1.0-2.5.0.1.19, 2.5.0.2.0-2.5.0.2.13, 2.6.0.1.0-2.6.0.12B, 2.6.0.2.0-2.6.0.2.10A and...

PT-2026-92796

Name of the Vulnerable Software and Affected Versions Oracle Business Intelligence Enterprise Edition version 26.01.0.0.0 Description A flaw in the Platform Security component allows a high privileged attacker with network access via HTTP to compromise the system. Successful exploitation can lead...

CVE-2026-91004: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in SourceCodester Online Faculty Clearance System 1.0. The impacted element is an unknown function of the file /deletefaculty1.php. Such manipulation of the argument ID leads to sql injection. The attack can be executed remotely. The exploit has been disclosed to th...

PT-2026-92542

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: SQR. Supported versions that are affected are 8.61-8.63. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where PeopleSoft Enterprise PeopleTools executes...

CVE-2026-90845: Improper Neutralization of Input During Web Page Generation

A flaw has been found in PHPGurukul Daily Expense Tracker System 1.1. This issue affects some unknown processing of the file /dets/includes/sidebar.php. Executing a manipulation of the argument FullName can lead to cross site scripting. The attack can be executed remotely. The exploit has been...

CVE-2026-90844: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was detected in PHPGurukul Daily Expense Tracker System 1.1. This vulnerability affects unknown code of the file /dets/index.php of the component Login. Performing a manipulation of the argument email results in sql injection. Remote exploitation of the attack is possible. The...

CVE-2026-90847: Improper Neutralization of Special Elements used in an OS Command

A vulnerability was determined in EFM ipTIME C200E 1.094. The impacted element is an unknown function of the file iuxset.cgi of the component System Setup. This manipulation causes os command injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and ma...

PT-2026-92673

Name of the Vulnerable Software and Affected Versions Oracle Application Testing Suite version 13.3.0.1 Description An unauthenticated attacker with access to the infrastructure where the software executes can compromise the system. This issue requires human interaction from a person other than t...

PT-2026-92296

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description An out-of-bounds write exists in the printf function within the printf.c file due to improper input validation. This flaw allows for local escalation of...

PT-2026-92346

Name of the Vulnerable Software and Affected Versions Google Android affected versions not specified Description Multiple functions within DreamPickerReceiver.kt are susceptible to a permission bypass caused by a confused deputy. A confused deputy is a security issue where a privileged entity is...

CVE-2026-55365: Out-of-bounds Write

In multiple functions of remap.c, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...