EUVD-2026-79529

Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite component: Documents. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle One-to-One...

CVE-2026-83173

CVE-2026-83173 affects the Documents component of Oracle One-to-One Fulfillment within Oracle E-Business Suite , versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability with low complexity and no user interaction. Successful exploita...

EUVD-2026-79500

Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite component: Documents. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle One-to-One...

CVE-2026-83171

A vulnerability in the Documents component of Oracle One-to-One Fulfillment (Oracle E-Business Suite) affects supported versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this flaw, though it is rated as difficult to exploit (high complexity). Due...

EUVD-2026-79498

Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite component: Documents. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle One-to-One...

CVE-2026-83170

Oracle One-to-One Fulfillment (component: Documents) in Oracle E-Business Suite , versions 12.2.3 through 12.2.15 , is affected by an easily exploitable vulnerability. A low-privileged attacker with access to the adjacent physical communication segment can compromise the component, resulting in f...

EUVD-2026-79497

Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite component: Documents. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with access to the physical communication segment attached to the...

EUVD-2026-79496

Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite component: Java Server Issues. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2026-83169

CVE-2026-83169 affects Oracle One-to-One Fulfillment (component: Java Server Issues ) within Oracle E-Business Suite, versions 12.2.3 through 12.2.15 . The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the product, resulting in a takeover (high impact...

EUVD-2026-79339

Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware component: Centralized Thirdparty Jars. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to...

EUVD-2026-79318

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM component: Cloud Gateway. Supported versions that are affected are 17.0-26.7. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel CRM Deployment. Successful...

EUVD-2026-79506

Vulnerability in the Oracle GraalVM product of Oracle Java SE component: Compiler. The supported version that is affected is Oracle GraalVM: 25.0.4.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle GraalVM. Successful attacks o...

CVE-2026-79409

An issue in Webkul Bagisto 2.4.9 allows a remote attacker to obtain sensitive information via the add-to-cart API and the downloadable fulfilment components...

CVE-2026-79410

Improper validation of the quantity parameter in the add-to-cart path of Webkul Bagisto v2.4.9 allows authenticated attackers to reduce their order total below the legitimate price of shippable goods...

CVE-2026-69212

Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, The FollowRedirect client middleware strips Authorization and Cookie headers only when a redirect changes authority, but authority comparison excludes the URI scheme. A same-authority redirect from HTTPS to HTTP...

EUVD-2026-79186

Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, The FollowRedirect client middleware strips Authorization and Cookie headers only when a redirect changes authority, but authority comparison excludes the URI scheme. A same-authority redirect from HTTPS to HTTP...

rabbitmq-server: RabbitMQ: Denial of Service due to atom-table exhaustion via reply-to queue name decoding

A flaw was found in RabbitMQ, a messaging and streaming broker. An authenticated AMQP Advanced Message Queuing Protocol client can trigger an atom-table exhaustion by sending specially crafted reply-to queue names for decoding. This can lead to the entire Erlang Virtual Machine VM crashing,...

SUSE CVE-2026-90467

aiosmtplib before 5.1.3 fails to properly validate email addresses supplied by callers, allowing attackers to inject ESMTP parameters into MAIL FROM and RCPT TO command lines. Attackers can craft malicious addresses containing spaces and angle brackets to append parameters like AUTH, NOTIFY, or...

SUSE CVE-2026-90778

SIPp through 3.7.7 contains a buffer overflow vulnerability in getpeertag function when processing SIP To headers with tag parameters of 2049 bytes or more. Unauthenticated remote attackers can send crafted SIP messages with oversized tag parameters to overflow the static buffer and crash the...

CVE-2026-79410

Webkul Bagisto v2.4.9 is vulnerable to a vulnerability where improper validation of the quantity parameter in the add-to-cart path allows authenticated attackers to manipulate order totals. By providing a negative quantity , an attacker can reduce the total order amount below the legitimate price...