CVE-2026-66058

Frappe is a full-stack web application framework. Prior to 16.20.0 and 15.112.0, unrestricted access to a Document Follow API updatefollow is possible for an authenticated user. This issue is fixed in versions 16.20.0 and 15.112.0...

CVE-2026-66058

Frappe is a full-stack web application framework. Prior to 16.20.0 and 15.112.0, unrestricted access to a Document Follow API updatefollow is possible for an authenticated user. This issue is fixed in versions 16.20.0 and 15.112.0...

CVE-2026-47185 Frappe Has Broken Access Control in its Workspace Save API

Frappe is a full-stack web application framework. Prior to 16.18.0, the Workspace Save API accepts a controlled workspace identifier from any authenticated user without enforcing workspace ownership, allowing modification of another user's private workspace and persistent script injection. This...

CLEANSTART-2026-OA47039 Security fixes in postgresql 16.11-r0

Package postgresql version 16.11-r0 fixes 2 vulnerabilities: CVE-2025-51476, CVE-2025-51477...

CLEANSTART-2026-RW65132 Security fixes in postgresql 16.1-r0

Package postgresql version 16.1-r0 fixes 3 vulnerabilities: CVE-2023-5868, CVE-2023-5869, CVE-2023-5870...

EUVD-2026-50027

Dompdf is an HTML to PDF converter for PHP. In versions 3.15 and prior, if a malicious actor can supply unrestricted content for rendering by Dompdf they can utilize the SVG rendering functionality to leak filesystem information when rendering PDF files using image references within a data-URI...

EUVD-2026-46939

Vulnerability in the Oracle Enterprise Command Center Framework product of Oracle E-Business Suite component: Core. The supported version that is affected is V16. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Enterprise Command...

EUVD-2026-46754

Vulnerability in the Oracle Project Manufacturing product of Oracle E-Business Suite component: PJM Command Center. The supported version that is affected is V16. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Project...

EUVD-2026-46752

Vulnerability in the Oracle Project Manufacturing product of Oracle E-Business Suite component: PJM Command Center. The supported version that is affected is V16. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Project Manufacturing...

EUVD-2026-46751

Vulnerability in the Oracle Project Manufacturing product of Oracle E-Business Suite component: PJM Command Center. The supported version that is affected is V16. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Project Manufacturing...

EUVD-2026-46571

Vulnerability in the Oracle Cost Management product of Oracle E-Business Suite component: Enterprise Command Center. The supported version that is affected is V16. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Cost Management...

CVE-2026-60582

Vulnerability in the Oracle Enterprise Command Center Framework product of Oracle E-Business Suite component: Core. The supported version that is affected is V16. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Enterprise Command...

CVE-2026-60580

Vulnerability in the Oracle Enterprise Command Center Framework product of Oracle E-Business Suite component: Core. The supported version that is affected is V16. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the...

CVE-2026-60579

Vulnerability in the Oracle Enterprise Command Center Framework product of Oracle E-Business Suite component: Core. The supported version that is affected is V16. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the...

CVE-2026-60577

Vulnerability in the Oracle Enterprise Command Center Framework product of Oracle E-Business Suite component: Core. The supported version that is affected is V16. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Enterprise Command...

CVE-2026-60576

Vulnerability in the Oracle Enterprise Command Center Framework product of Oracle E-Business Suite component: Core. The supported version that is affected is V16. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Enterprise Command...

CVE-2026-60336

Vulnerability in the Oracle Project Manufacturing product of Oracle E-Business Suite component: PJM Command Center. The supported version that is affected is V16. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Project Manufacturing...

CVE-2026-60338

Vulnerability in the Oracle Project Manufacturing product of Oracle E-Business Suite component: PJM Command Center. The supported version that is affected is V16. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Project Manufacturing...

CVE-2026-60165

Vulnerability in the Oracle Cost Management product of Oracle E-Business Suite component: Enterprise Command Center. The supported version that is affected is V16. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Cost Management...

PT-2026-62403

Name of the Vulnerable Software and Affected Versions Oracle Project Manufacturing version V16 Description An issue exists in the PJM Command Center component of the Oracle Project Manufacturing product within Oracle E-Business Suite. A high privileged attacker with access to the infrastructure...