2026

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Agent Next

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Agent Next

Vulnerability in Oracle Java SE (component: JavaFX). The supported version that is affected is Oracle Java SE: 8u491.

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE

Vulnerability in Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 8u491,

Vulnerability in Oracle APEX (component: General). Supported versions that are affected are 24.1, 24.2 and 26.1. Easily

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that ar

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that ar

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that ar

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supp

Vulnerability in Oracle GoldenGate (component: Admin Server Executable). Supported versions that are affected are 21.3-

Vulnerability in the PeopleSoft Enterprise CS Campus Community product of Oracle PeopleSoft (component: Security). The

Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). Supported versions th

Vulnerability in the Oracle Work in Process product of Oracle E-Business Suite (component: Internal Operations). Suppor

Vulnerability in the Oracle Production Scheduling product of Oracle E-Business Suite (component: User Interface). Suppo

Vulnerability in the PeopleSoft Enterprise FIN Common Objects Argentina product of Oracle PeopleSoft (component: Cash Ma

Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Install). The

Vulnerability in the Oracle Contracts Integration product of Oracle E-Business Suite (component: Internal Operations).

Vulnerability in the Oracle Time and Labor product of Oracle E-Business Suite (component: Internal Operations). Support

Vulnerability in the Oracle Production Scheduling product of Oracle E-Business Suite (component: Internal Operations).

A vulnerability was identified in jsforce up to 3.10.16. This issue affects the function _execCommand in the library lib

The Timetics WordPress plugin before 1.0.57 does not enforce a pending or unpaid status for new bookings created throug

There is a information disclosure vulnerability in some Hikvision cameras, allowing unauthenticated attackers to obtain

n8n before 2.28.0 (and before 2.27.4 on the 2.27.x branch) registers the DELETE /${restEndpoint}/test-webhook/:id endpoi

Traefik versions <= v2.11.51, >= v3.6.0 <= v3.6.22, and >= v3.7.0 <= v3.7.6 contain an authentication bypass via path tr

In Progress® Telerik® UI for AJAX prior to v2026.2.708, the internal LayoutBuilder control processes client-state XML wi

A heap-buffer-overflow flaw was found in Directory Server (389-ds-base). When a DN contains a legacy-quoted value, the s

In NLnet Labs Unbound 1.22.0 up to and including 1.25.1, a single client query for a deeply nested name under a DNSSEC-s

In NLnet Labs Unbound up to and including version 1.25.1, when 'unwanted-reply-threshold' is enabled (set to any value g

InvokeAI before 6.13.7 contains an unauthenticated directory enumeration vulnerability in the GET /api/v2/models/scan_fo

IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.2.0.0 through 6.2.0.5_2,  6.2.1.0 through 6.2.1.1_2, and  6.

An issue in the server’s Atlas Search integration allows an authenticated user to bypass per-user access controls. In

A MongoDB server initiating an outbound TLS connection may terminate abnormally when processing a malformed OCSP respons

An unauthenticated remote client can cause excessive CPU consumption on a MongoDB server by sending a specific combinati

A vulnerability was detected in oclif up to 4.23.16. Affected by this vulnerability is the function child_process.exec o

A vulnerability was identified in danger danger-js up to 13.0.7. Impacted is the function danger.git.diffForFile of the

A security vulnerability has been detected in syncfusion ej2-javascript-ui-controls up to 33.2.3. This affects the funct

A vulnerability was detected in publint up to 0.1.4. This impacts the function child_process.exec of the file src/node/p

A security flaw has been discovered in boazsegev facil.io up to 0.7.58. This affects the function http_sendfile2 of the

The alertmanager templates test endpoint (/api/alertmanager/grafana/config/api/v1/templates/test) can execute templates

@fastify/static evaluates the allowedPath callback before normalizing dot segments and duplicate path separators in the

The GutenKit Blocks plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check

Unauthenticated Broken Access Control in WP Go Maps <= 10.1.04 versions.

Unauthenticated Broken Access Control in Ditty <= 3.1.66 versions.

Unauthenticated Broken Access Control in MarketKing <= 2.1.40 versions.

Unauthenticated Broken Access Control in WP Fast Total Search <= 1.81.282 versions.

Unauthenticated Broken Access Control in YT Player <= 2.0.9 versions.

Unauthenticated Arbitrary File Deletion in Broadcast Live Video <= 7.2.4 versions.

Unauthenticated Broken Access Control in ShopLentor Pro <= 2.8.5 versions.

Unauthenticated Broken Access Control in Ebook Store <= 6.19 versions.