200724 matches found
PT-2026-78244
Name of the Vulnerable Software and Affected Versions Bamboo Data Center versions 10.0.0 through 10.2.0 Bamboo Data Center version 11.0.0 Bamboo Data Center versions 12.0.0 through 12.1.0 Description An improper authorization issue allows an authenticated attacker to gain unintended access to...
PT-2026-77730
Vulnerability in Oracle Autonomous Health Framework component: Trace File Analyzer. Supported versions that are affected are 26-26.1.0, 26.2.0, 26.3.1, 26.5.0 and 26.5.2. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Autonomous Healt...
PT-2026-77758
Vulnerability in the Oracle Operations Intelligence product of Oracle E-Business Suite component: Daily Business Intelligence. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Orac...
PT-2026-77814
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion component: Security. The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via SQL to compromise Oracle Hyperion Financial...
PT-2026-77754
Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion component: Server. The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Financial...
PT-2026-77788
Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion component: Server. The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial...
PT-2026-77285
Lemur manages TLS certificate creation. Prior to 1.9.3, CertificateExport placed its CertificatePermission ownership check inside the plugin.requires key branch for POST /api/1/certificates//export. A plugin declaring requires key false bypassed that check, and the handler still passed cert.priva...
PT-2026-77124
Unauthenticated Arbitrary File Upload in Masteriyo - LMS = 2.3.2 versions...
PT-2026-77561
Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion component: Common Events. The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion...
PT-2026-76916
A flaw was found in the group policy provider of Keycloak authorization services, which is used to manage fine-grained access control to resources. The issue occurs when the system evaluates group-based policies using tokens that only contain group names rather than full paths. If two groups in...
PT-2026-77548
Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion component: Security. The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Calculation...
PT-2026-77054
Unauthenticated Server Side Request Forgery SSRF in OttoKit = 1.1.35 versions...
PT-2026-77220
ePA 3.x Integration implements the authorization workflow and writes Medical Information Objects to Germany's electronic patient record. Prior to 1.3.0, ePA 3.x Integration leaves request counter unchanged in app/vau/VAUProtokoll.py while constructing VAU messages. The frozen client request count...
PT-2026-77628
Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion component: Security. The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the...
PT-2026-77228
Dell PowerStore SDNAS contains a Buffer Copy without Checking Size of Input vulnerability in the NFS/RPC. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Command execution and Denial of service...
PT-2026-77677
Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion component: Security. The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Calculation...
PT-2026-77672
Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware component: Security and Authentication. The supported version that is affected is 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Report...
PT-2026-77671
Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware component: Security and Authentication. The supported version that is affected is 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...
PT-2026-77218
Saleor is an e-commerce platform. From 3.14.67 until 3.21.67, 3.22.63, and 3.23.22, a broken authorization check in saleor/permission/utils.py can incorrectly authorize unauthenticated GraphQL requests. The flaw permits anonymous callers to use the channelUpdate mutation to change channel order...
PT-2026-77219
ePA 3.x Integration implements the authorization workflow and writes Medical Information Objects to Germany's electronic patient record. Prior to 1.3.0, ePA 3.x Integration does not neutralize CRLF characters in values used by app/vau/VAUProtokoll.py to construct VAU inner HTTP requests. The buil...
PT-2026-76905
A vulnerability has been found in SourceCodester Onlne Examination & Learning Management System 1.0. Affected by this vulnerability is an unknown functionality. The manipulation leads to cross-site request forgery. The attack can be initiated remotely...
PT-2026-78251
A weakness has been identified in TRENDnet TEW-823DRU 1.1.02b01. Impacted is the function strcpy of the file /cgi-bin/wan.cgi of the component NVRAM. This manipulation of the argument wan l2tp password causes stack-based buffer overflow. The attack can be initiated remotely. The exploit has been...
PT-2026-77589
Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion component: Installation and Configuration. The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...
PT-2026-77701
Vulnerability in the Oracle Payments product of Oracle E-Business Suite component: File Transmission. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Payments. Successful...
PT-2026-77553
Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion component: Common Events. The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperio...
PT-2026-77763
Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion component: Server. The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Financial...
PT-2026-77744
Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion component: Server. The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Financial...
PT-2026-77094
Unauthenticated SQL Injection in Affiliates Manager = 2.9.53 versions...
PT-2026-77087
Unauthenticated Cross Site Scripting XSS in WP Multilang = 2.4.31 versions...
PT-2026-77097
Subscriber Cross Site Scripting XSS in WP Cookie Notice for GDPR, CCPA & ePrivacy Consent = 4.3.9 versions...
PT-2026-77113
Unauthenticated SQL Injection in Super Store Finder = 7.8 versions...
PT-2026-77091
Unauthenticated Broken Authentication in SupportCandy = 3.5.1 versions...
PT-2026-77100
Unauthenticated Cross Site Scripting XSS in URL Shortify = 2.5.0 versions...
PT-2026-77109
Unauthenticated PHP Object Injection in Popup by Supsystic = 1.13.0 versions...
PT-2026-77104
Unauthenticated Cross Site Scripting XSS in Ultimate Maps by Supsystic 1.5.0 versions...
PT-2026-77105
Unauthenticated PHP Object Injection in Ultimate Maps by Supsystic 1.5.0 versions...
PT-2026-77110
Unauthenticated Broken Authentication in Popup by Supsystic = 1.13.0 versions...
PT-2026-77949
Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion component: Installation and Configuration. The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...
PT-2026-77058
Unauthenticated SQL Injection in Depicter Slider = 4.8.0 versions...
PT-2026-77694
Vulnerability in the Oracle Payments product of Oracle E-Business Suite component: File Transmission. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Payments. While the...
PT-2026-77774
Vulnerability in the Oracle iSupplier Portal product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iSupplier...
PT-2026-77117
Unauthenticated Deserialization of untrusted data in Youzify = 1.3.7 versions...
PT-2026-77074
Unauthenticated Broken Access Control in MultiVendorX = 5.0.14 versions...
PT-2026-77119
Unauthenticated Broken Authentication in Flutterwave WooCommerce = 3.3.0 versions...
PT-2026-77107
Unauthenticated Cross Site Scripting XSS in Contact Form by Supsystic 1.10.0 versions...
PT-2026-77789
Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion component: Server. The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Hyperion Financial...
PT-2026-77590
Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion component: Installation and Configuration. The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Orac...
PT-2026-77229
Improper input validation in the capabilities route handler in OpenSearch Dashboards - the size of the request payload is not bounded - might allow remote attackers to cause a denial of service via a crafted HTTP request...
PT-2026-77313
Blueprint Studio is a VS Code-like file editor for Home Assistant configuration files. Prior to 2.5.2, Blueprint Studio exposed administrator-intended backend API actions to any authenticated Home Assistant user because the backend did not consistently enforce the panel's admin-only authorization...