22255 matches found
PT-2026-120614
Name of the Vulnerable Software and Affected Versions WP Mailster versions prior to 1.9.1.1 Description An unrestricted file upload flaw allows an unauthenticated attacker to upload files of dangerous types, such as a web shell, to the web server. A web shell is a malicious script that allows...
CVE-2026-91608
Vulnerability in the Oracle BI Publisher product of Oracle Analytics component: Web Server. Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle BI...
CVE-2026-91554
Vulnerability in the Oracle BI Publisher product of Oracle Analytics component: Web Server. The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle BI Publisher. Successful attacks of...
CVE-2026-91555
Vulnerability in the Oracle BI Publisher product of Oracle Analytics component: Web Server. Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle BI...
CVE-2026-91526
Vulnerability in the Oracle BI Publisher product of Oracle Analytics component: Web Server. Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle BI...
CVE-2026-91514
Vulnerability in the Oracle BI Publisher product of Oracle Analytics component: Web Server. Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle BI Publishe...
CVE-2026-60500
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Web Server. Supported versions that are affected are 8.61-8.63. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise...
CVE-2026-91608
A vulnerability exists in the Web Server component of the Oracle BI Publisher product within Oracle Analytics. Affected versions include 8.2.0.0.0 , 12.2.1.4.0 , and 26.01.0.0.0 . An unauthenticated attacker with network access via HTTP can easily exploit this flaw to compromise the product, pote...
CVE-2026-91555
The Oracle BI Publisher product of Oracle Analytics (specifically the Web Server component) is vulnerable in versions 8.2.0.0.0 , 12.2.1.4.0 , and 26.01.0.0.0 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability to compromise the product, though successful att...
CVE-2026-91554
The Oracle BI Publisher product within Oracle Analytics (specifically the Web Server component) is affected by a vulnerability in version 12.2.1.4.0 . An unauthenticated attacker with network access via HTTP can exploit this flaw to compromise the system. Successful exploitation can result in una...
CVE-2026-91526
A vulnerability exists in the Web Server component of Oracle BI Publisher (part of Oracle Analytics) affecting versions 8.2.0.0.0 , 12.2.1.4.0 , and 26.01.0.0.0 . This high-complexity vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the product, though i...
CVE-2026-91514
A vulnerability exists in the Web Server component of the Oracle BI Publisher product within Oracle Analytics. Affected versions include 8.2.0.0.0 , 12.2.1.4.0 , and 26.01.0.0.0 . A low-privileged attacker with network access via HTTP can exploit this vulnerability to compromise the product, pote...
CVE-2026-60500
A vulnerability exists in the Web Server component of Oracle PeopleSoft Enterprise PeopleTools affecting supported versions 8.61-8.63 . An unauthenticated attacker with network access via HTTP can easily exploit this flaw to compromise the system, potentially resulting in unauthorized read access...
CVE-2026-111406
Unrestricted Upload of File with Dangerous Type vulnerability in PT Norther Lights Production MapSVG mapsvg-lite-interactive-vector-maps allows Upload a Web Shell to a Web Server.This issue affects MapSVG: from n/a through 8.16.1...
EUVD-2026-104131
Unrestricted Upload of File with Dangerous Type vulnerability in PT Norther Lights Production MapSVG mapsvg-lite-interactive-vector-maps allows Upload a Web Shell to a Web Server.This issue affects MapSVG: from n/a through 8.16.1...
CVE-2026-111406 WordPress MapSVG plugin <= 8.16.1 - Arbitrary File Upload vulnerability
Unrestricted Upload of File with Dangerous Type vulnerability in PT Norther Lights Production MapSVG mapsvg-lite-interactive-vector-maps allows Upload a Web Shell to a Web Server.This issue affects MapSVG: from n/a through 8.16.1...
CVE-2026-111406
The MapSVG WordPress plugin (versions
EUVD-2026-104031
A vulnerability is in Web Server default connection ports under the process name GeoWebServer.exe...
EUVD-2026-104030
A vulnerability is in Web Server default connection ports under the process name GeoWebServer.exe...
PT-2026-117300
Unrestricted Upload of File with Dangerous Type vulnerability in PT Norther Lights Production MapSVG mapsvg-lite-interactive-vector-maps allows Upload a Web Shell to a Web Server.This issue affects MapSVG: from n/a through 8.16.1...