Lucene search
+L

12647 matches found

Positive Technologies
Positive Technologies
•added 2026/07/21 12:00 a.m.•20 views

PT-2026-62706

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Client System Analyzer versions 12.2.3 through 12.2.15 Description An issue exists in the Oracle Applications Technology Stack that allows an unauthenticated attacker with network access via HTTP to compromise the syste...

8.1CVSS7.2AI score0.00392EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/21 12:00 a.m.•3 views

CVE-2026-61264: Improper Access Control

Vulnerability in the Oracle Call Center Technology product of Oracle E-Business Suite component: RDBMS and UI. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Call Center...

5.4CVSS5.7AI score0.00231EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/21 12:00 a.m.•6 views

CVE-2026-47015: URL Redirection to Untrusted Site

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: PIA Core Technology. The supported version that is affected is 8.62. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise...

7.1CVSS5.7AI score0.00241EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/21 12:00 a.m.•1 views

CVE-2026-47049: Improper Access Control

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: PIA Core Technology. Supported versions that are affected are 8.61 and 8.62. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise PeopleSoft...

4.9CVSS5.7AI score0.00396EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/07/21 12:00 a.m.•21 views

PT-2026-63128

Vulnerability in the Oracle Call Center Technology product of Oracle E-Business Suite component: RDBMS and UI. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Call Center...

5.4CVSS7AI score0.00231EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/07/20 2:00 p.m.•51 views

CVE-2026-16252 Beijing Shenzhou Shihan Technology Multimedia Integrated Business Display System Staffshinel Ds.jsp sql injection

A security flaw has been discovered in Beijing Shenzhou Shihan Technology Multimedia Integrated Business Display System 8.2.2. Impacted is an unknown function of the file /admin/system/structure/updateStructure/deflate/Insecure/Staffshinel Ds.jsp?Shine ID=aaa. The manipulation of the argument...

7.5CVSS0.00431EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/20 12:00 a.m.•3 views

CVE-2026-16252: Improper Neutralization of Special Elements used in an SQL Command

A security flaw has been discovered in Beijing Shenzhou Shihan Technology Multimedia Integrated Business Display System 8.2.2. Impacted is an unknown function of the file /admin/system/structure/updateStructure/deflate/Insecure/Staffshinel Ds.jsp?Shine ID=aaa. The manipulation of the argument...

7.5CVSS7AI score0.00431EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2026/07/20 12:00 a.m.•12 views

The vulnerability of the NTFS file system in Windows operating systems allows a perpetrator to execute arbitrary code.

The vulnerability of the NTFS file system in Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS6.1AI score0.00333EPSS
SaveExploits0References2Affected Software18
NVD
NVD
•added 2026/07/17 2:17 p.m.•25 views

CVE-2026-7488

Insertion of sensitive information into sent data vulnerability in IKAS Technology Inc. E-Commerce allows Retrieve Embedded Sensitive Data. This issue affects E-Commerce: through 03062026...

7.5CVSS0.00416EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/07/17 1:07 p.m.•15 views

CVE-2026-7488

Insertion of sensitive information into sent data vulnerability in IKAS Technology Inc. E-Commerce allows Retrieve Embedded Sensitive Data. This issue affects E-Commerce: through 03062026...

7.5CVSS5.2AI score0.00416EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/07/17 1:07 p.m.•18 views

EUVD-2026-45170

Insertion of sensitive information into sent data vulnerability in IKAS Technology Inc. E-Commerce allows Retrieve Embedded Sensitive Data. This issue affects E-Commerce: through 03062026...

7.5CVSS5.2AI score0.00416EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/17 12:00 a.m.•2 views

CVE-2026-7488: Insertion of Sensitive Information Into Sent Data

Insertion of sensitive information into sent data vulnerability in IKAS Technology Inc. E-Commerce allows Retrieve Embedded Sensitive Data. This issue affects E-Commerce: through 03062026...

7.5CVSS5.8AI score0.00416EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2026/07/17 12:00 a.m.•16 views

The vulnerability of the NTFS file system in Windows operating systems allows a perpetrator to execute arbitrary code.

The vulnerability of the NTFS file system in Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS6.1AI score0.00466EPSS
SaveExploits0References2Affected Software18
UbuntuCve
UbuntuCve
•added 2026/07/15 12:00 p.m.•22 views

CVE-2026-42617

In NTFS-3G through 2026.2.25, a heap buffer overflow exists in ntfsirtoib in index.c that allows an attacker to corrupt heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is triggered by extending a directory, e.g., by creating a file...

6.1AI score
SaveExploits0References2
OSV
OSV
•added 2026/07/15 12:00 p.m.•25 views

UBUNTU-CVE-2026-56136

In NTFS-3G through 2026.2.25, an out-of-bounds read exists in ntfsirnill in libntfs-3g/index.c that allows an attacker to read possibly confidential information in an ntfs-3g process by crafting a malicious NTFS image. This read operation is triggered by creation of a file with a crafted name...

4.7CVSS6.1AI score0.00122EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2026/07/15 12:00 a.m.•12 views

The vulnerability of the NTFS file system in Windows operating systems allows a perpetrator to execute arbitrary code.

The vulnerability of the NTFS file system in Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

8.4CVSS6.3AI score0.00337EPSS
SaveExploits0References2Affected Software18
EUVD
EUVD
•added 2026/07/14 6:32 p.m.•35 views

EUVD-2026-43862

Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally...

7.8CVSS6.2AI score0.00466EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/07/14 6:32 p.m.•33 views

EUVD-2026-43910

Out-of-bounds read in Windows NTFS allows an unauthorized attacker to execute code locally...

7.8CVSS6.1AI score0.00466EPSS
SaveExploits0References2
NVD
NVD
•added 2026/07/14 6:17 p.m.•27 views

CVE-2026-50417

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally...

7.8CVSS0.00333EPSS
SaveExploits0References1
CVE
CVE
•added 2026/07/14 5:07 p.m.•86 views

CVE-2026-50494

CVE-2026-50494 is a Windows NTFS vulnerability caused by a heap-based buffer overflow in NTFS handling that can let an authorized, local attacker execute code on the host. The issue affects Windows NTFS components and is being addressed by Microsoft security updates (e.g., KB5099539, KB5099540) r...

7.8CVSS6.2AI score0.00333EPSS
SaveExploits0References1Affected Software12
Rows per page
Query Builder