118 matches found
SUSE CVE-2026-47304
unknown...
CVE-2026-61099
...
CVE-2026-61088
...
CVE-2026-60886
CVE-2026-60886 affects Oracle E-Business Suite Oracle Work in Process (Internal Operations) on versions 12.2.3–12.2.15. The vulnerability allows a low-privileged, network-accessible attacker (HTTP) to compromise Work in Process, requiring user interaction. Attacks can lead to unauthorized access ...
CVE-2026-60776
CVE-2026-60776 affects the Oracle Application Object Library (AOL) Generic Loader within Oracle E-Business Suite. Affected vendor/product: Oracle E-Business Suite AOL; affected component: AOL Generic Loader; affected versions: 12.2.3–12.2.15. Exploitation scenario: a highly privileged attacker wi...
CVE-2026-60668
...
CVE-2026-60547
CVE-2026-60547 : Vulnerability in Oracle Fusion Middleware’s Oracle Managed File Transfer (MFT Runtime Server). Affected: 12.2.1.4.0 and 14.1.2.0.0. An attacker with network access over HTTP and low privileges can compromise MFT, with potential impact across confidentiality, integrity, and availa...
CVE-2026-60378
CVE-2026-60378 affects Oracle Fusion Middleware Service Delivery Platform, Messaging Enabler component. Affected versions: 12.2.1.4.0 and 14.1.2.0.0. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the Service Delivery Platform, potentially taking o...
CVE-2026-60336
The CVE concerns Oracle E-Business Suite’s Oracle Project Manufacturing (PJM Command Center) on V16. It enables a highly privileged local attacker to compromise PJM, potentially creating/deleting/modifying critical data and gaining access to all PJM data. The CVSS v3.1 base score is 5.7 (Confiden...
CVE-2026-60212
The CVE affects Oracle Coherence (Core) within Oracle Fusion Middleware. Affected versions are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. The vulnerability allows an unauthenticated attacker with network access via TCP to compromise Oracle Coherence, potentially taking over the affected ...
CVE-2026-47013
...
SUSE CVE-2026-53583
unknown...
CVE-2026-45071
Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 5.4.52, 6.4.40, 7.4.12, and 8.0.12, Crawler::addXmlContent set DOMDocument::$validateOnParse = true before loadXML, re-enabling external entity resolution and allowing attacker-supplied XML ...
CVE-2026-45064
Symfony is a PHP framework for web and console applications and a set of reusable PHP components. From 6.1.0-BETA1 until 6.4.40, 7.4.12, and 8.0.12, UrlSanitizer::parse passes Unicode explicit-direction BiDi formatting characters through into sanitized href and src attributes, allowing sanitized...
CVE-2026-45066
Symfony is a PHP framework for web and console applications and a set of reusable PHP components. From 6.1.0-BETA1 until 6.4.40, 7.4.12, and 8.0.12, HtmlSanitizer URL sanitization can allow off-allowlist URLs through allowLinkHosts or allowMediaHosts because UrlSanitizer::parse follows RFC 3986...
UBUNTU-CVE-2026-14741
HTTP::Date versions before 6.08 for Perl allow CPU exhaustion via polynomial regex backtracking in parsedate. parsedate matches the date string against a chain of alternative regexes, and str2time delegates to it. Several of these patterns place unbounded quantifiers next to each other before a...
UBUNTU-CVE-2026-33630
Unknown description...