PT-2026-92796

Name of the Vulnerable Software and Affected Versions Oracle Business Intelligence Enterprise Edition version 26.01.0.0.0 Description A flaw in the Platform Security component allows a high privileged attacker with network access via HTTP to compromise the system. Successful exploitation can lead...

CVE-2026-91004: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in SourceCodester Online Faculty Clearance System 1.0. The impacted element is an unknown function of the file /deletefaculty1.php. Such manipulation of the argument ID leads to sql injection. The attack can be executed remotely. The exploit has been disclosed to th...

CVE-2026-91996: Missing Authentication for Critical Function

lamp-cloud through 5.10.0 whitelists the path pattern //anno/ for anonymous access, allowing unauthenticated attackers to read the server's full JVM system property map. Attackers can send POST requests to /defGenProject/anno/getProperties to retrieve sensitive information including JVM classpath...

PT-2026-92533

Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware component: Client Bundle. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

PT-2026-92670

Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft PeopleSoft Enterprise FIN Inventory Brazil version 9.1 Description A flaw in the Inventory component allows a low privileged attacker with access to the infrastructure where the software executes to compromise the system...

CVE-2026-90847: Improper Neutralization of Special Elements used in an OS Command

A vulnerability was determined in EFM ipTIME C200E 1.094. The impacted element is an unknown function of the file iuxset.cgi of the component System Setup. This manipulation causes os command injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and ma...

PT-2026-92312

Name of the Vulnerable Software and Affected Versions VPU affected versions not specified Description Improper input validation in VPU allows for a shared memory overwrite. This issue can lead to local escalation of privilege, granting the attacker System execution privileges without requiring us...

PT-2026-92520

Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware component: Centralized Thirdparty Jars. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure...

CVE-2026-56979: Protection Mechanism Failure

In multiple locations, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-90841: Improper Neutralization of Special Elements used in an SQL Command

A security flaw has been discovered in PHPGurukul Blood Donor Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /application/controllers/admin/Report.php of the component Report Endpoint. The manipulation of the argument fromdate/todate results in sql...

PT-2026-92304

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description An incorrect bounds check in multiple functions within remap.c allows for a possible out-of-bounds write. This condition could enable local escalation of...

CVE-2026-90849: Improper Neutralization of Special Elements used in an SQL Command

A security vulnerability has been detected in SourceCodester College Notes Gallery Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /College/login.php. The manipulation of the argument User leads to sql injection. The attack may be initiated remotely...

PT-2026-92133

Name of the Vulnerable Software and Affected Versions code-projects Record Management System version 1.0 Description A remote cross-site scripting issue exists in the file main/reg.php. The flaw allows an attacker to execute malicious scripts by manipulating the desc argument. Recommendations As ...

PT-2026-92739

Name of the Vulnerable Software and Affected Versions Oracle Siebel CRM versions 17.0 through 26.7 Description A flaw in the Server Infrastructure component of the Siebel CRM Deployment product allows a low privileged attacker with access to the execution infrastructure to compromise the system...

PT-2026-92622

Vulnerability in the Oracle Forms product of Oracle Fusion Middleware component: Forms Services, C/S, Charmode. Supported versions that are affected are 12.2.1.19.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

PT-2026-92733

Name of the Vulnerable Software and Affected Versions Oracle Siebel CRM versions 17.0 through 26.7 Description A flaw in the Server Infrastructure component of the Siebel CRM Deployment product allows a low privileged attacker with network access via SQL to compromise the system. Successful...

PT-2026-92293

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A logic error in the code allows for a permission bypass in multiple locations. This issue can lead to local escalation of privilege, granting System execution...

CVE-2026-56879: Unintended Proxy or Intermediary

In gmcmbmsghandler of gmcmba.c, there is a possible memory corruption due to a confused deputy. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

PT-2026-92337

Name of the Vulnerable Software and Affected Versions affected versions not specified Description A race condition in multiple functions within bluetooth cco.cc can lead to a use-after-free scenario. This issue allows for local escalation of privilege, requiring System execution privileges for...

PT-2026-92334

Name of the Vulnerable Software and Affected Versions VPU affected versions not specified Description A missing permission check in VPU allows for a permission bypass. This issue can lead to local escalation of privilege, granting the attacker System execution privileges without requiring user...