CVE-2026-79005

A flaw was found in Google Chrome's StorageAccessAPI. A remote attacker, after compromising the renderer process, could exploit an incorrect authorization vulnerability by using a specially crafted HTML page. This could allow the attacker to bypass the web origin policy, potentially leading to...

PT-2023-28683

Name of the Vulnerable Software and Affected Versions Dell SmartFabric Storage Software versions 1.4 and earlier Description The issue is related to an Improper Input Validation vulnerability in the RADIUS configuration of the software. This could allow an authenticated remote attacker to gain...

CVE-2023-43073: Improper Input Validation

Dell SmartFabric Storage Software v1.4 and earlier contains an Improper Input Validation vulnerability in RADIUS configuration. An authenticated remote attacker could potentially exploit this vulnerability, leading to gaining unauthorized access to data...

PT-2023-2646

Name of the Vulnerable Software and Affected Versions Oracle Health Sciences InForm versions prior to 6.3.1.3 Oracle Health Sciences InForm versions prior to 7.0.0.1 Description The issue is related to insufficient input validation in the Core component of Oracle Health Sciences InForm. It allows...

PT-2022-4280

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise PeopleTools versions 8.58 through 8.59 Description The issue is related to insufficient input validation in the XML Publisher component. It allows a high-privileged attacker with network access via HTTP to compromise...

PT-2021-6731

Name of the Vulnerable Software and Affected Versions Oracle Communications Operations Monitor versions 3.4, 4.2, 4.3, 4.4, 5.0 Description The issue is related to insufficient input validation in the Mediation Engine component of Oracle Communications Operations Monitor. This can be exploited by...

PT-2021-7176

Name of the Vulnerable Software and Affected Versions Oracle Commerce Guided Search / Oracle Commerce Experience Manager version 11.3.1.5 Description The issue is related to insufficient input validation in the Tools and Frameworks component of Oracle Commerce Guided Search and Oracle Commerce...

PT-2021-9010

Name of the Vulnerable Software and Affected Versions Micro Focus Solutions Business Manager versions prior to 11.7.1 Description The issue concerns XML External Entity Processing XXE on certain operations. This means that the software is susceptible to attacks where an external entity is...

PT-2021-1642

Name of the Vulnerable Software and Affected Versions: Oracle Database Server version prior to 20.2 Description: The issue is related to the Oracle Application Express Survey Builder component. It allows a low-privileged attacker with a valid user account and network access via HTTP to compromise...

PT-2021-1734

Name of the Vulnerable Software and Affected Versions: Oracle Database Server versions prior to 20.2 Description: The issue is related to insufficient access control in the Oracle Application Express Opportunity Tracker component. It allows a low-privileged attacker with a valid user account and...

PT-2020-4411

Name of the Vulnerable Software and Affected Versions: Oracle Database Server versions prior to 20.2 Description: The issue is related to insufficient input validation in the Oracle Application Express Data Reporter component. It allows a low-privileged attacker with a valid user account and...

PT-2020-3264

Name of the Vulnerable Software and Affected Versions Oracle Enterprise Communications Broker versions 3.0.0 through 3.2.0 Description The issue is related to insufficient input validation in the WebGUI component of Oracle Enterprise Communications Broker, allowing an unauthenticated attacker wit...

PT-2020-1533

Name of the Vulnerable Software and Affected Versions Oracle HTTP Server versions 11.1.1.9.0, 12.1.3.0.0, and 12.2.1.3.0 Description The issue is related to inadequate access control in the Web Listener component of Oracle HTTP Server, allowing an unauthenticated attacker with network access via...

CVE-2019-9699: Undefined Security Weakness

Symantec Messaging Gateway prior to 10.7.0, may be susceptible to an information disclosure issue, which is a type of vulnerability that could potentially allow unauthorized access to data...

PT-2019-11461

Name of the Vulnerable Software and Affected Versions: Dancer::Plugin::SimpleCRUD versions 1.14 and earlier Description: The issue is related to Incorrect Access Control, which may lead to unauthorized access to data. This occurs due to incorrect calls to the ensure auth wrapper, resulting in...

PT-2018-2262

Name of the Vulnerable Software and Affected Versions Oracle Outside In Technology versions 8.5.3 through 8.5.4 Description The issue is related to inadequate access control in the Oracle Outside In Technology component, which can be exploited by a remote attacker to gain unauthorized access to...

CVE-2017-5801: Exposure of Sensitive Information to an Unauthorized Actor

A Remote Unauthorized Access to Data vulnerability in HPE Business Process Monitor version v09.2x, v09.30 was found...

PT-2017-11329

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 10.3.6.0.0 through 12.2.1.3.0 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server, potentially causing a hang or crash, as well as...

CVE-2017-10373: Exposure of Sensitive Information to an Unauthorized Actor

Vulnerability in the PeopleSoft Enterprise PT PeopleTools component of Oracle PeopleSoft Products subcomponent: Health Center. Supported versions that are affected are 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

PT-2017-11138

Name of the Vulnerable Software and Affected Versions Java Advanced Management Console version 2.6 Description The issue allows a low-privileged attacker with network access via multiple protocols to compromise Java Advanced Management Console, potentially impacting additional products. Successfu...