2026

Vulnerability in the Oracle HRMS (UK) product of Oracle E-Business Suite (component: Internal Operations). Supported ve

Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Payroll). Supported versions that ar

Vulnerability in the Oracle Advanced Inbound Telephony product of Oracle E-Business Suite (component: Servers). Support

Vulnerability in the Oracle Supply Chain Globalization product of Oracle E-Business Suite (component: Copy Inventory Org

Vulnerability in the Oracle Product Workbench product of Oracle E-Business Suite (component: WebUI). Supported versions

Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Item Catalog). Supported version

Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Role Based Security). Supported

Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Audience). Supported versions that

Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer). Supp

Vulnerability in the Oracle Proposals product of Oracle E-Business Suite (component: Proposals). Supported versions tha

Vulnerability in the Oracle Sales for Handhelds product of Oracle E-Business Suite (component: Outlook Sync Win 32). Su

Vulnerability in the Oracle Advanced Benefits product of Oracle E-Business Suite (component: Self Service Benefits). Su

Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Web Services). Supported v

Vulnerability in the Oracle Common Applications Calendar product of Oracle E-Business Suite (component: Calendar Synchro

Vulnerability in the Oracle Price Protection product of Oracle E-Business Suite (component: Internal Operations). Suppo

Vulnerability in the Oracle HRMS (UK) product of Oracle E-Business Suite (component: Internal Operations). Supported ve

Vulnerability in the Oracle Lease and Finance Management product of Oracle E-Business Suite (component: Lease Authoring)

Vulnerability in the Oracle Succession planning product of Oracle E-Business Suite (component: Succession plan). Suppor

Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: US Payroll - General). Supported v

Vulnerability in the Oracle Quality product of Oracle E-Business Suite (component: Quality Workbench HTML system). Supp

Vulnerability in the Oracle Learning Management product of Oracle E-Business Suite (component: Import And Export). Supp

Vulnerability in the Oracle HCM Configuration Workbench product of Oracle E-Business Suite (component: Install). Suppor

Vulnerability in the Oracle Advanced Benefits product of Oracle E-Business Suite (component: Self Service Benefits). Su

Missing Authorization (CWE-862) in Kibana allows an authenticated user to access and modify Cloud Connect configuration

A security flaw has been discovered in itsourcecode Hospital Management System 1.0. Impacted is an unknown function of t

When PROXY protocol v2 is used on the Unix domain socket path, roles derived from X.509 client certificates may not be v

The Premium Packages – Sell Digital Products Securely plugin for WordPress is vulnerable to Authentication Bypass in all

Subscriber Broken Access Control in Sunshine Photo Cart <= 3.6.10.1 versions.

Contributor Broken Access Control in Style Kits <= 2.6.5 versions.

A vulnerability was identified in OWASP DefectDojo 2.59.0. This issue affects the function UserSerializer of the file do

Jan through 0.8.4, fixed in commit 3e1c1e7, contains a CORS misconfiguration vulnerability in its local API server that

A flaw has been found in nanocoai NanoClaw up to 2.0.64. Affected is the function handleAddMcpServer of the file src/mod

A vulnerability was found in mf-yang openclaw-cn up to 0.2.1. This affects the function clickViaPlaywright of the file s

A vulnerability was identified in AstrBotDevs AstrBot up to 4.25.5. Affected is an unknown function of the file astrbot/

A security flaw has been discovered in AstrBotDevs AstrBot up to 4.25.5. Affected by this vulnerability is the function

Tanium addressed a SQL injection vulnerability in Patch.

GNU Bison improperly handles grammar‑defined output paths. Grammar directives such as %output and %header allow specifyi

MathLive provides web components for math display and input. Prior to 0.110.0, MathLive fails to escape text-mode conten

Inappropriate implementation in Isolated Web Apps in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to b

An incomplete fix has been identified in Node.js: HTTPS Agent TLS session reuse skips hostname verification across ident

IBM Operations Analytics - Log Analysis 1.3.5.0, 1.3.5.1, 1.3.5.2, 1.3.5.3, 1.3.6.0, 1.3.6.1, 1.3.7.0, 1.3.7.1, 1.3.7.2,

Cloudreve is a self-hosted file management and sharing system. Prior to 4.17.0, ViewerSessionValidation uses only the se

FreeRDP before 3.29.0 fails to properly validate server-supplied RDPDR paths in drive redirection, allowing attackers to

Wazuh 5.0.0-beta1 (fixed in 5.0.0-beta3) does not validate or override the cluster_name and cluster_node fields in inven

A vulnerability was determined in Wavlink WL-NU516U1 708c073-mt7628. Affected is the function set_sys_adm of the file ad

A vulnerability was identified in jeequan jeepay up to 3.2.9. This vulnerability affects the function WebSecurityConfig

A security flaw has been discovered in langgenius dify up to 1.14.2. This issue affects the function jinja2.Template of

A vulnerability was detected in cemtan sar2html 4.0.0. This affects an unknown part of the file sar2html.py of the compo

A vulnerability was found in diaowen DWSurvey up to 6.14.0. Impacted is the function in DwDeisgnSurveyController.devSurv

A vulnerability was determined in diaowen DWSurvey up to 6.14.0. The affected element is an unknown function of the file