CWE-284

Vulnerability in the Oracle Performance Management product of Oracle E-Business Suite (component: Appraisals). Supporte

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (comp

Vulnerability in the Oracle Labor Distribution product of Oracle E-Business Suite (component: Internal Operations). Sup

Vulnerability in the Oracle Item Master product of Oracle E-Business Suite (component: iSet-up bugs). Supported version

Vulnerability in the Oracle HRMS (Hong Kong) product of Oracle E-Business Suite (component: Hong Kong Payroll). Support

Vulnerability in the Oracle HRMS (New Zealand) product of Oracle E-Business Suite (component: New Zealand Payroll). Sup

Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: Call Back). Supported versions tha

Vulnerability in the Oracle HRMS (UK) product of Oracle E-Business Suite (component: UK Payroll). Supported versions th

Vulnerability in the Oracle Knowledge Management product of Oracle E-Business Suite (component: User Interface). Suppor

Vulnerability in the Oracle Scripting product of Oracle E-Business Suite (component: Scripting Admin). Supported versio

Vulnerability in the Oracle Call Center Technology product of Oracle E-Business Suite (component: RDBMS and UI). Suppor

Vulnerability in the Oracle Public Sector Financials product of Oracle E-Business Suite (component: Internal Operations)

Vulnerability in the Oracle Public Sector Financials product of Oracle E-Business Suite (component: Internal Operations)

Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Cache Cleaner extension - Admi

The Paid Membership Subscriptions WordPress plugin before 3.0.8 does not verify that the subscription being modified th

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.5.0 until 0.11.0, the stand

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 39.8.8,

The SEO Redirection Plugin WordPress plugin before 9.19 does not perform a capability check in one of its authenticated

Email Management API Bypasses ManageCredentials Feature Restrictions

Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). The support

Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). The support

Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server). The supported

Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server). The supported

Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions

Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions

Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions

Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions

Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions

Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions

The WP Maps WordPress plugin before 4.9.8 does not perform a capability check, nor validate a nonce, in one of its AJAX

Improper access control in CloudStack's annotation functionality allows unauthorized comment creation and disclosure.

The Project Manager WordPress plugin before 4.0.7 does not restrict several of its REST API routes to the projects a us

Winter CMS is a content management system built on the Laravel PHP framework. In versions up to and including 1.2.12, th

An Improper Access Control could allow a malicious actor in Wi-Fi range to the EV Station Lite (v1.5.2 and earlier) to u

n8n is an open source workflow automation platform. From 1.36.0 to before 2.2.0, the Webhook node’s IP whitelist validat

A vulnerability was detected in birkir prime up to 0.4.0.beta.0. This issue affects some unknown processing of the file

A security flaw has been discovered in MineAdmin 1.x/2.x. This affects an unknown function of the component Swagger. The

Horilla is a free and open source Human Resource Management System (HRMS). Versions 1.4.0 and above expose unpublished j

Langfuse is an open source large language model engineering platform. In versions 3.146.0 and below, the /api/public/sla

Hono is a Web application framework that provides support for any JavaScript runtime. Prior to version 4.11.7, Serve sta

TrustTunnel is an open-source VPN protocol with a rule bypass issue in versions prior to 0.9.115. In `tls_listener.rs`,

A security flaw has been discovered in D-Link DIR-605L and DIR-619L 2.06B01/2.13B01. Impacted is an unknown function of

A weakness has been identified in D-Link DIR-605L and DIR-619L 2.06B01/2.13B01. The affected element is an unknown funct

A security vulnerability has been detected in D-Link DIR-605L and DIR-619L 2.06B01/2.13B01. The impacted element is an u

A weakness has been identified in WeKan up to 8.20. This issue affects some unknown processing of the file server/public

A weakness has been identified in Tenda AC21 16.03.08.16. This impacts an unknown function of the file /cgi-bin/Download

A security vulnerability has been detected in Tenda AC21 16.03.08.16. Affected is an unknown function of the file /cgi-b

A vulnerability has been found in Rongzhitong Visual Integrated Command and Dispatch Platform up to 20260206. The impact

Frappe Learning Management System (LMS) is a learning system that helps users structure their content. In versions 2.44.

A vulnerability was detected in Foswiki up to 2.1.10. The affected element is an unknown function of the component Chang