PT-2026-63526

Name of the Vulnerable Software and Affected Versions Oracle Platform Security for Java version 12.2.1.4.0 Oracle Platform Security for Java version 14.1.2.0.0 Description An issue exists in the Centralized Thirdparty Jars component of Oracle Platform Security for Java. A low privileged attacker...

PT-2026-64050

These are all security issues fixed in the agama-web-ui-23+0.f26ed5eab-49.1 package on the GA media of openSUSE Tumbleweed...

EUVD-2025-210501

BandiZip v.7.37 is affected by a Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass the Mark-of-the-Web protection mechanism on affected installations of BandiZip...

CVE-2025-50327

An issue in Franco Corbelli ZPAQFRANZ v.61.3 and before allows a remote attacker to escalate privileges and execute arbitrary code via a bypass of the Mark-of-the-Web protection mechanism...

ROS-20260722-73-0009

The vulnerability of the Audio component in Google Chrome and Microsoft Edge relates to the possibility of using memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code using a specially crafted HTML page...

The vulnerability of the webService() method in the Calculation/Web/Service.php PHP library allows a attacker to perform an SSRF attack.

The vulnerability of the webService method in the Calculation/Web/Service.php PHP library of the PhpSpreadsheet framework is related to insufficient validation of requests on the server side. Exploiting this vulnerability could allow a malicious actor to perform an SSRF attack remotely...

ROS-20260722-73-0018

The vulnerability of the WebRTC component in Google Chrome and Microsoft Edge relates to the possibility of using memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code through a specially created HTML page...

CVE-2025-50325

CVE-2025-50325 relates to Bandizip v7.37 and is described as an Authentication Bypass vulnerability that allows remote attackers to bypass the Mark-of-the-Web protection on affected installations. The CVSS 3.1 vector is CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N with a base score of 5.4 (Medium...

CVE-2026-16317

creationtimestamp| type| source ---|---|--- 2026-07-21 23:52:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr6yw4265r2a 2026-07-22 13:13:59+00:00| seen| https://bsky.app/profile/eyalestrin.bsky.social/post/3mrafotbn332r...

CVE-2026-60254

creationtimestamp| type| source ---|---|--- 2026-07-21 23:26:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6xgiapqi2k 2026-07-23 16:49:41+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-07-25 19:37:07+00:00| seen|...

CVE-2026-60244

creationtimestamp| type| source ---|---|--- 2026-07-21 23:18:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6wy5huul2r 2026-07-23 16:49:18+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-07-25 21:37:06+00:00| seen|...

CVE-2026-16413

Out of bounds write in ANGLE in Google Chrome prior to 150.0.7871.182 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

CVE-2026-16486 SourceCodester Class and Exam Timetabling System BSIS.php cross site scripting

A vulnerability was found in SourceCodester Class and Exam Timetabling System 1.0. This affects an unknown part of the file /BSIS.php. Performing a manipulation of the argument day results in cross site scripting. The attack may be initiated remotely. The exploit has been made public and could be...

CVE-2026-60229

creationtimestamp| type| source ---|---|--- 2026-07-21 22:26:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6u36yys42a 2026-07-23 16:48:54+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-07-26 03:37:07+00:00| seen|...

CVE-2026-62559

Vulnerability in the Oracle HRMS US product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle HRMS US. While the...

CVE-2026-62521

Vulnerability in the Oracle HRMS US product of Oracle E-Business Suite component: US Payroll - General. Supported versions that are affected are 12.2.7-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle HRMS US. Successful...

CVE-2026-62530

Vulnerability in the Oracle HRMS France product of Oracle E-Business Suite component: French HR. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle HRMS France. Successful attac...

CVE-2026-62527

Vulnerability in the Oracle Learning Management product of Oracle E-Business Suite component: Import And Export. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Learning...

CVE-2026-62524

Vulnerability in the Oracle HRMS US product of Oracle E-Business Suite component: US Payroll - General. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle HRMS US. Successful...

CVE-2026-62515

Vulnerability in the Oracle Advanced Planning Command Center product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Orac...