425 matches found
Zoho ManageEngine OpManager - SQL Injection
Zoho ManageEngine OpManager before 12.3 Build 123196 does not require authentication for /oputilsServlet requests, as demonstrated by a /oputilsServlet?action=getAPIKey request that can be leveraged against Firewall Analyzer to add an admin user via /api/json/v2/admin/addUser or conduct a SQL...
CVE-2026-47361
creationtimestamp| type| source ---|---|--- 2026-08-07 18:30:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/6ljmigjkgmyjs...
ROOT-OS-DEBIAN-12-CVE-2025-39751 CVE-2025-39751 in linux - Patched by Root
Root has patched CVE-2025-39751 in the linux package for Root:Debian:12. Multiple fixed versions available...
CVE-2026-14446
creationtimestamp| type| source ---|---|--- 2026-07-28 22:50:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrqipfxtf72o 2026-07-28 23:50:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrqlzqm5id2q 2026-07-30 04:48:06+00:00| seen|...
Siemens SIMATIC S7-1500 CPU 1518 MFP Improper Input Validation (CVE-2026-31563)
This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid505707; scriptversion"1.3"; scriptsetattributeattribute:"pluginmodificationdate",...
Siemens SIMATIC S7-1500 CPU 1518 MFP NULL Pointer Dereference (CVE-2026-23084)
This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid505731; scriptversion"1.3"; scriptsetattributeattribute:"pluginmodificationdate",...
CVE-2026-60323
creationtimestamp| type| source ---|---|--- 2026-07-23 16:51:52+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-08-01 11:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrzdb5dbxc22...
CVE-2026-60367
...
CVE-2026-62524
...
CVE-2026-61279
CVE-2026-61279 affects Oracle E-Business Suite Proposals (component: Proposals). Affected versions are 12.2.3 through 12.2.15. The vulnerability allows a low-privileged attacker with network access via HTTP to compromise Oracle Proposals, potentially enabling unauthorized update/insert/delete and...
CVE-2026-61172
...
CVE-2026-61141
...
CVE-2026-61132
...
CVE-2026-61087
CVE-2026-61087 affects Oracle PeopleSoft Enterprise FIN Payables (v9.2) — a vulnerability in the Security component that an unauthenticated, network-accessing attacker can exploit via HTTP to access or compromise FIN Payables data. The CVSSv3.1 base score is 7.5 (Impact: Confidentiality) with vec...
CVE-2026-61084
...
CVE-2026-61009
...
CVE-2026-60984
CVE-2026-60984 affects Oracle E-Business Suite, Oracle Project Portfolio Analysis (Internal Operations) for versions 12.2.3–12.2.15. The vulnerability permits a low-privileged, unauthenticated attacker with network access via HTTP to modify or delete data or read a subset of data, indicating Conf...
CVE-2026-60962
CVE-2026-60962 affects Oracle Flow Manufacturing within Oracle E-Business Suite (versions 12.2.3–12.2.15). The vulnerability is in Internal Operations and can be triggered by a low-privileged user with network access over HTTP, requiring user interaction. Successful exploitation may allow unautho...
CVE-2026-60864
CVE-2026-60864 affects Oracle E-Business Suite Order Management (component: Product Diagnostic Tools) in versions 12.2.3–12.2.15. The vulnerability allows a low-privileged, network-accessible attacker (via HTTP) to compromise Oracle Order Management, with potential unauthorized update/insert/dele...