2894073 matches found
CVE-2026-60722
CVE-2026-60722 affects Oracle Identity Manager's OIM Legacy UI in versions 12.2.1.4.0 and 14.1.2.1.0. A low-privileged attacker can exploit T3/IIOP network access to fully compromise the application (CVSS 8.8, HIGH). No exploitation evidence or patch version is provided; monitor Oracle's August 2...
CVE-2026-60715
Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware component: OIM Legacy UI. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Identity...
CVE-2026-60707
A CVSS 8.7 HIGH vulnerability in Oracle Identity Manager's Security component (versions 12.2.1.4.0 and 14.1.2.1.0) allows a high-privileged network attacker to compromise the product via HTTP, enabling unauthorized read, creation, deletion, and modification of critical data, with potential cross-...
CVE-2026-60679
A HIGH-severity flaw (CVSS 7.5) in Oracle WebLogic Server Core allows a low-privileged remote attacker to fully take over the server via T3/IIOP protocols. Affected versions: 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, 15.1.1.0.0. No exploit code or in-the-wild exploitation is documented. Patch details a...
CVE-2026-60592
Vulnerability in the MySQL Cluster product of Oracle MySQL component: Cluster: NDB Operator. Supported versions that are affected are 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromi...
CVE-2026-60412
Oracle Outside In Technology (component: Outside In Core, version 8.5.8) contains a vulnerability exploitable by an unauthenticated attacker with local access. CVSS 3.1 score 7.8 (HIGH) indicates potential full confidentiality, integrity, and availability impact. Exploitation requires human inter...
CVE-2026-60391
An unauthenticated, network-accessible attacker can exploit Oracle Hyperion Financial Reporting Server (version 11.2.25.0.000) via HTTP to gain unauthorized access to critical data, with no user interaction required (CVSS 7.5, HIGH). No exploitation or patch details are provided in the documents.
CVE-2026-75936
creationtimestamp| type| source ---|---|--- 2026-08-18 20:44:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/dridjv7wdtbcm 2026-08-18 21:00:57+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtf4enwne42z...
CVE-2026-75935
creationtimestamp| type| source ---|---|--- 2026-08-18 20:42:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/7pb5qyqpsi44k 2026-08-18 21:00:51+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtf4eh7nmj26...
CVE-2026-74979
creationtimestamp| type| source ---|---|--- 2026-08-18 20:40:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtf37ecf7h2j...
CVE-2026-74956
creationtimestamp| type| source ---|---|--- 2026-08-18 20:40:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtf37cwmsx2j...
CVE-2026-69160
creationtimestamp| type| source ---|---|--- 2026-08-18 20:35:03+00:00| published-proof-of-concept| https://github.com/OpenListTeam/OpenList/security/advisories/GHSA-86cx-wwf4-phq4...
CVE-2025-9210
creationtimestamp| type| source ---|---|--- 2026-08-18 20:30:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/csbkkewf77pfs 2026-08-18 21:32:20+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mtf64snzq42w...
CVE-2026-74938
creationtimestamp| type| source ---|---|--- 2026-08-18 20:30:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtf2niepx22e...
CVE-2026-75874
creationtimestamp| type| source ---|---|--- 2026-08-18 20:30:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtf2nh52c42m...
CVE-2026-54284 vulnerabilities
Vulnerabilities for packages: authentik-fips, openstack-nova-2025.2, openstack-glance-2025.2-fips, openstack-nova-2025.1, label-studio, openstack-placement-2025.1-fips, mlflow, openstack-horizon-2026.1-fips, openstack-horizon-2025.1, openstack-keystone-2025.1, authentik, openstack-keystone-2025.2...
GHSA-8C42-7QJ2-3J46 vulnerabilities
Vulnerabilities for packages: opensearch, request-9047-keycloak-fips, knative-kafka-broker, floci, kayenta-fips, apache-nifi, elasticsearch, apicurio-registry-fips, keycloak-fips, s3proxy, airbyte-platform-fips, reposilite, wavefront-proxy, camunda, kayenta, apache-pulsar, camunda-zeebe, druid,...
CVE-2026-74990
creationtimestamp| type| source ---|---|--- 2026-08-18 20:20:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtf23mac2525...
