CVE-2026-62456

...

CVE-2026-61329

...

CVE-2026-61287

...

CVE-2026-61257

...

CVE-2026-61257

...

CVE-2026-61226

...

CVE-2026-61188

...

CVE-2026-60907

...

CVE-2026-60789

CVE-2026-60789 affects Oracle Sales Offline in Oracle E-Business Suite (Internal Operations) for versions 12.2.3–12.2.15. The flaw allows a low-privilege, network-authenticated attacker over HTTP to take over Oracle Sales Offline, per CVSS 3.1 base score 8.8 (High). No exploitation details are pr...

CVE-2026-60776

...

CVE-2026-60756

...

CVE-2026-60736

...

CVE-2026-60572

The CVE-2026-60572 entry concerns Oracle E-Business Suite Integrated SOA Gateway (Web Service Provider) with affected versions 12.2.3–12.2.15. The vulnerability, described as easily exploitable, allows a low-privilege, network-accessible attacker over HTTP to compromise data: unauthorized update/...

CVE-2026-60567

CVE-2026-60567 affects Oracle Fusion Middleware’s Oracle Identity Manager (OIM) Legacy UI component. Affected versions are 12.2.1.4.0 and 14.1.2.1.0. The vulnerability allows unauthenticated, network-accessible attackers via HTTP to compromise OIM, potentially enabling creation, deletion, or modi...

CVE-2026-60275

CVE-2026-60275 affects Oracle Coherence (Core) in Oracle Fusion Middleware. Affected versions: 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. The vulnerability allows an unauthenticated, network-accessible attacker over HTTP to take over Oracle Coherence. CVSS 3.1 base score 9.8 (HIGH impact...

BELL-CVE-2026-46184

Bulletin has no description...

CVE-2026-34282

Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition are affected (Networking component) with multiple supported versions listed. The vulnerability allows an unauthenticated attacker with network access via multiple protocols to cause a hang or frequent crash (DOS) of the...

CVE-2026-22264

Suricata is a network IDS, IPS and NSM engine. Prior to version 8.0.3 and 7.0.14, an unsigned integer overflow can lead to a heap use-after-free condition when generating excessive amounts of alerts for a single packet. Versions 8.0.3 and 7.0.14 contain a patch. As a workaround, do not run...

EUVD-2026-4295

BloofoxCMS 0.5.2.1 contains a stored cross-site scripting vulnerability in the articles text parameter that allows authenticated attackers to inject malicious scripts. Attackers can insert malicious javascript payloads in the text field to execute scripts and potentially steal authenticated users...

EUVD-2026-4348

Missing Authorization vulnerability in WisdmLabs Edwiser Bridge edwiser-bridge allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Edwiser Bridge: from n/a through = 4.3.2...