PT-2026-119221

Vulnerability in the Oracle Order Management product of Oracle E-Business Suite component: Product Diagnostic Tools. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Order...

PT-2026-119687

Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware component: Content Server. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

PT-2026-119093

Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM component: Marketing. Supported versions that are affected are 17.0-26.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Siebel Apps - Marketing. Successful...

PT-2026-119443

Name of the Vulnerable Software and Affected Versions MySQL Server versions 8.4.0 through 8.4.12 MySQL Server versions 9.7.0 through 9.7.3 MySQL Server version 26.7.0 through 26.7.1 MySQL Cluster versions 8.0.0 through 8.0.49 MySQL Cluster versions 8.4.0 through 8.4.12 MySQL Cluster versions 9.7....

PT-2026-120035

Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain component: Product Quality Management. The supported version that is affected is 6.2.4. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

PT-2026-120039

Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems component: Core. The supported version that is affected is 8.8. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle ZFS Storage Appliance Kit. Successful...

PT-2026-118369

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 158.0.1 Firefox ESR versions prior to 153.5.1 Firefox ESR versions prior to 115.43.1 Thunderbird versions prior to 158.0.1 Description Compromised intermediate eMudhra certificates were blocked via OneCRL, a mechanism...

PT-2026-119387

Name of the Vulnerable Software and Affected Versions Oracle Agile PLM version 9.3.6 Description A flaw in the Web Client component allows an unauthenticated attacker with network access via HTTP to compromise the system. Exploitation requires human interaction and can lead to unauthorized read,...

PT-2026-119994

Vulnerability in the PeopleSoft Enterprise CC Common Application Objects product of Oracle PeopleSoft component: BAM Framework. The supported version that is affected is 9.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft...

PT-2026-119019

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 156.0.8078.47 Description Memory corruption in Dawn allows a remote attacker to potentially read memory inside the sandbox by using a crafted HTML page. Recommendations Update Google Chrome to version...

PT-2026-118943

Memory corruption in iOSWebView in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

PT-2026-119484

Name of the Vulnerable Software and Affected Versions Oracle Complex Maintenance, Repair and Overhaul versions 12.2.3 through 12.2.15 Description An issue exists in the LOV component of the Oracle Complex Maintenance, Repair and Overhaul product of Oracle E-Business Suite. A low privileged attack...

PT-2026-119194

Vulnerability in Oracle Trusted Answer Search component: PLSQL package. The supported version that is affected is 26.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Trusted Answer Search. Successful attacks of this vulnerability...

PT-2026-119029

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 156.0.8078.47 Description Memory corruption occurs in the GPU component, which allows a remote attacker to execute arbitrary code within the sandbox by inducing the user to visit a specially crafted HTML page...

PT-2026-119133

Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM component: Siebel Cloud Manager. Supported versions that are affected are 22.3-26.9. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Siebel CRM Cloud Applicatio...

PT-2026-119139

Vulnerability in the Siebel Life Sciences product of Oracle Siebel CRM component: Web UI. Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel Life Sciences. Successful attacks require...

PT-2026-118422

Name of the Vulnerable Software and Affected Versions WP User Manager versions prior to 2.9.26 Description A missing authorization flaw in the wp-user-manager plugin allows for the manipulation of user states. Recommendations Update to version 2.9.26 or later...

PT-2026-119578

Vulnerability in the Oracle HRMS US product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle HRMS US. Successful...

PT-2026-119692

Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise WebCenter Content:...

PT-2026-119885

Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware component: Outside In Clean Content SDK. The supported version that is affected is 8.5.8. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Outside...

PT-2026-118339

Chatwoot before 4.14.0 contains a stored cross-site scripting vulnerability that allows account administrators to inject JavaScript by crafting video-embed links in Help Center articles. Attackers can use angle-bracket link destinations with double quotes to break out of the unescaped iframe src...

PT-2026-118362

Nokia 1830 Global Express GX is vulnerable to a CLI ACL Bypass vulnerability where a low-privileged authenticated attacker can bypass the SSH isolation mechanism and gain access to the underlying operating system shell via a custom SSH command. This issue occurs by default in the system and is no...

PT-2026-118361

Nokia 1830 Global Express GX is vulnerable to a local privilege escalation vulnerability which exists in the administrative shell interface. An authenticated local attacker with restricted shell access can exploit this vulnerability to bypass local security restrictions and gain root access on th...

PT-2026-119067

Vulnerability in Oracle REST Data Services component: ADP. Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle REST Data Services. Successful attacks of this vulnerability can...

PT-2026-120017

Name of the Vulnerable Software and Affected Versions Oracle WebCenter Content version 12.2.1.4.0 Oracle WebCenter Content version 14.1.2.0.0 Description An issue exists in the Content Server component of Oracle Fusion Middleware. An unauthenticated attacker with network access via HTTP can explo...

PT-2026-120140

Name of the Vulnerable Software and Affected Versions virtualenv versions 20.26.6 through 21.14.1 Description The ViaTemplateActivator.instantiate template function replaces placeholders sequentially across the activation template. This allows trigger names like VIRTUAL NAME , VIRTUAL ENV , or...

PT-2026-118763

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 156.0.8078.47 Description Memory corruption in Fonts allows a remote attacker to read memory inside the sandbox by using a crafted HTML page. Recommendations Update Google Chrome to version 156.0.8078.47 or late...

PT-2026-119030

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 156.0.8078.47 Description Memory corruption in Extensions allows a remote attacker to potentially read memory inside the sandbox by using a crafted HTML page. A sandbox is a security mechanism for separating...

PT-2026-119292

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: InnoDB. Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. Difficult to exploit vulnerability...

PT-2026-119843

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards component: Installation Security. Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where JD Edwards...

PT-2026-118752

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 156.0.8078.47 Description A type confusion issue exists in the FullScreen component. This allows a remote attacker to execute arbitrary code within the sandbox by enticing a user to visit a specially...

PT-2026-120126

Vulnerability in Oracle Essbase component: Java Based Agent. The supported version that is affected is 21.8.3.0.0. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Essbase executes to compromise Oracle Essbase. While the vulnerability...

PT-2026-120076

Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain component: Product Quality Management. The supported version that is affected is 6.2.4. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to...

PT-2026-119063

Vulnerability in Oracle REST Data Services component: Database Actions. Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle REST Data Services. Successful attacks of this...

PT-2026-119705

Vulnerability in the JD Edwards EnterpriseOne Configurator product of Oracle JD Edwards component: Configuration Management. The supported version that is affected is 9.2. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise JD Edwards...

PT-2026-119450

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Security: Encryption. Supported versions that are affected are MySQL Server: 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 9.7.0-9.7.3 and 26.7.0-26.7.1. Easily exploitable vulnerability allows high privilege...

PT-2026-118372

A HID report descriptor is a sequence of items, each declaring in its header how many data bytes follow. The USBX host walks that sequence by advancing over each header and parsing the data behind it. The walk checked that an item fitted in the descriptor only after it had advanced past the heade...

PT-2026-119214

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics component: Analytics Server. Supported versions that are affected are 8.2.0.0.0 and 26.01.0.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

PT-2026-118873

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 156.0.8078.47 Description Memory corruption occurs in the Omnibox, which is the address and search bar of the browser. This issue allows a remote attacker to potentially execute arbitrary code within the sandbox...

PT-2026-118796

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 156.0.8078.47 Description Improper input validation in the Omnibox allows a remote attacker to potentially execute arbitrary code inside the sandbox by using a crafted HTML page. Recommendations Updat...

PT-2026-118729

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 156.0.8078.47 Description Memory corruption occurs in the Omnibox, which is the address and search bar of the browser. This issue allows a remote attacker to execute arbitrary code within the sandbox ...

PT-2026-118903

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 156.0.8078.47 Description Memory corruption occurs in the Omnibox, which is the address and search bar of the browser. This issue allows a remote attacker to execute arbitrary code within the sandbox by inducing...

PT-2026-119044

Mozilla::CA versions before 20261020 for Perl provide a CA certificate bundle containing a root linked to compromised intermediates. The bundle includes "emSign ECC Root CA - G3", which provides a trust path for intermediate certificates whose private keys are publicly available. An attacker able...

PT-2026-118005

Coraza: Native audit-log format allows CRLF injection and log forgery via request body and header fields in github.com/corazawaf/coraza...

PT-2026-118675

Name of the Vulnerable Software and Affected Versions DedeCMS versions 5.6 through 5.7 Description A reflected cross-site scripting issue allows unauthenticated attackers to inject scripts by providing unsanitized input to the adminDirHand parameter. Attackers can send crafted GET requests to the...

PT-2026-118283

A vulnerability in the bulk port configuration functionality could allow an unauthenticated attacker to crash the service...

PT-2026-117991

An authorization issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27. An app may be able to access sensitive user data...

PT-2026-118398

Name of the Vulnerable Software and Affected Versions filelock versions 3.20.4 through 4.0.8 Description The ReadWriteLock and AsyncReadWriteLock functions resolve the lock path and pass it to SQLite without rejecting a final symbolic link. This allows a local user with permissions to create name...

PT-2026-119509

Vulnerability in the Oracle Contract Lifecycle Management for Public Sector product of Oracle E-Business Suite component: Award/PO. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise...

PT-2026-119157

🚨 CVE-2026-101469 Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain component: Installation Issues. The supported version that is affected is 3.6.1. Difficult to exploit vulnerability allows low privileged attacker with network access via SQL to compromise...