CVE-2019-10086

CVE-2019-10086 affects Apache Commons BeanUtils 1.9.2, where a BeanIntrospector addition could suppress access to the classloader via the class property on Java objects. The issue stems from not applying the suppression by default in PropertyUtilsBean, enabling potential risk across affected depl...

CVE-2020-13956

CVE-2020-13956 affects Apache HttpClient prior to 4.5.13 and 5.0.3. A malformed authority component in request URIs, when passed as a java.net.URI, can cause the client to misinterpret the target host and execute the request against an unintended host. This represents a misrouting vulnerability i...

CVE-2017-18640

CVE-2017-18640 affects SnakeYAML; the vulnerability arises from entity expansion (Billion Laughs style) during load, allowing abuse of the alias feature. Affected versions are before 1.26 (e.g., SnakeYAML 1.25.x onward) with public mentions in multiple advisories showing a fix in 1.26. Fedora/Alm...

CVE-2019-12402

CVE-2019-12402 affects Apache Commons Compress 1.15–1.18, where the internal file-name encoding can loop infinitely and cause DoS when processing crafted archives. Connected docs show multiple vendors referencing this CVE in product advisories (e.g., Atlassian Confluence with dependency notes; IB...

CVE-2021-2218

The CVE-2021-2218 issue affects Oracle PeopleSoft: Health Center in PeopleSoft Enterprise PT PeopleTools, with vulnerable versions 8.56 and 8.57. The flaw allows an unauthenticated attacker with network access via HTTP to compromise the PT PeopleTools component, potentially enabling unauthorized ...

CVE-2021-2408

CVE-2021-2408 affects Oracle PeopleSoft: PT PeopleTools (Notification Configuration) 8.59. Vulnerable component and impact described as unauthorized read/update/delete of certain data, with network access over HTTP and user interaction required. Root cause aligns with a logic/authorization issue ...

CVE-2018-2793

CVE-2018-2793 affects Oracle PeopleSoft Enterprise PeopleTools PsAdmin in PeopleSoft versions 8.54–8.56. An unauthenticated attacker with logon to the infrastructure hosting PeopleTools can gain unauthorized access to data; CVSSv3 base score 6.2 (Confidentiality High). Root cause details are desc...

CVE-2026-35278

Technical details about CVE-2026-35278 are not publicly available in the provided documents. Monitor for updates.

CVE-2026-35271

Technical details for CVE-2026-35271, including affected product, vulnerable components, and remediation, are not publicly available in the provided documents. Monitor for updates from Oracle security alerts and CVE records.

CVE-2026-35272

Technical details for CVE-2026-35272 are not publicly available in the provided documents. Monitor for updates from Oracle and CVE sources.

CVE-2026-35274

Technical details for CVE-2026-35274 are not publicly available in the provided documents; monitor for updates from Oracle and CVE records.

CVE-2026-35276

Technical details about CVE-2026-35276 are not publicly available in the provided documents. Monitor for updates from Oracle CSPU/JUN2026 and related CVE entries.

CVE-2026-35288

Technical details about CVE-2026-35288 are not publicly available in the provided documents. Monitor for updates from Oracle and CVE lists for affected products, impact and remediation once disclosed.

CVE-2026-35279

Technical details for CVE-2026-35279 are not publicly available in the provided documents. Monitor for updates; no explicit affected products, vulnerable components, impact, or remediation are described in the supplied sources.

CVE-2026-35289

Technical details such as affected products, components, root cause, and fixes are not publicly provided in the supplied documents. Monitor for updates.