Archive
September 2026
Vulnerabilities first published in this month (UTC), newest first.
5,174 results · Clear filters · Feed
-
Medium 6.8
Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Application Server). The supported ver…
-
Medium 6.1
Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Web Client). The supported version tha…
-
Medium 6.7
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The support…
-
Medium 6.1
Vulnerability in the Oracle Contract Lifecycle Management for Public Sector product of Oracle E-Business Suite (compone…
-
Medium 6.8
Vulnerability in the Oracle iRecruitment product of Oracle E-Business Suite (component: Internal Operations). Supported…
-
Medium 5.4
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-microprofile-security). Supported …
-
Medium 5.3
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: WebSocket). Supported versions that are af…
-
Medium 5.3
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-media-multipart). Supported versio…
-
Medium 5.3
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: JSON). Supported versions that are affecte…
-
Medium 6.5
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: LRA). Supported versions that are affected…
-
Medium 6.5
miniOrange JWT Authentication for WP REST APIs < 4.8.0 Authentication Downgrade
miniOrange JWT Authentication for WP REST APIs plugin for WordPress before 4.8.0 contains an authentication method downgrade vulnerability that allows unauthenticated attackers to bypass administrator-configured authentication by supplying a specific GET para…
-
Medium 6.5
Vulnerability in the Oracle Assets product of Oracle E-Business Suite (component: Internal Operations). Supported versi…
-
Medium 6.8
Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations). Supported …
-
Medium 5.4
Vulnerability in the Oracle Product Workbench product of Oracle E-Business Suite (component: WebUI). Supported versions…
-
Medium 6.5
Vulnerability in the Oracle Depot Repair product of Oracle E-Business Suite (component: Depot Repair Diagnostics). Supp…
-
Medium 5.4
Vulnerability in the Oracle Communications Cloud Native Core Security Edge Protection Proxy product of Oracle Communica…
-
Medium 4.3
Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that ar…
-
Medium 6.3
Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). The supported version that…
-
Medium 6.5
Vulnerability in the Oracle Net Services component of Oracle Database Server. Supported versions that are affected are …
-
Medium 5.4
Vulnerability in the Oracle Fusion Middleware Control product of Oracle Fusion Middleware (component: Framework). Suppo…
-
Medium 5.5
Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client). The suppor…
-
Medium 6.8
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-integrations-neo4j). Supported ver…
-
Medium 4.0
Newell Brands DYMO Connect Desktop improper file path validation
The LoadImageAsPngBase64 endpoint of the Newell Brands DYMO Connect Desktop local web service accepts a file path parameter without adequate validation, allowing a crafted path to read arbitrary image files from the host filesystem outside the intended scope.…
-
Medium 5.5
Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client). The suppor…
-
Medium 6.5
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (com…
-
Medium 6.5
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (com…
-
Medium 6.5
Vulnerability in the Oracle Process Manufacturing Intelligence product of Oracle E-Business Suite (component: Internal …
-
Medium 5.4
Vulnerability in the Oracle Field Service product of Oracle E-Business Suite (component: Internal Operations). Supporte…
-
Medium 6.5
Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core). Supported …
-
Medium 6.5
Vulnerability in the Oracle Field Service product of Oracle E-Business Suite (component: Internal Operations). Supporte…
-
Medium 5.3
Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component: Forms Services, C/S, Charmode). Suppo…
-
Medium 6.5
Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component: Forms Services, C/S, Charmode). Suppo…
-
Medium 6.8
Vulnerability in the Oracle HR Intelligence product of Oracle E-Business Suite (component: Internal Operations). Suppor…
-
Medium 6.4
Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supp…
-
Medium 6.8
Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Cloud Gateway). Supported versions …
-
Medium 6.5
Vulnerability in the Oracle Web Applications Desktop Integrator product of Oracle E-Business Suite (component: File dow…
-
Medium 6.5
Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Event Man…
-
Medium 5.3
Netmaker has a boolean‑based SQL Injection
Netmaker makes networks with WireGuard. Prior to version 1.5.0, the `sqliteDeleteRecord` function in Netmaker's database layer constructs SQL `DELETE` statements using direct string concatenation of user-supplied input. This allows an authenticated attacker t…
-
Medium 6.7
Go-getter vulnerable to a privilege escalation issue in its archive decompression handling
The go-getter library up to versions 1.8.8 and 2.2.3 is vulnerable to a privilege escalation issue in its archive decompression handling that may allow a crafted archive to cause extracted files to be created with elevated permission bits. Where extraction is…
-
Medium 5.9
Http4s: DigestAuth allows replay of captured requests
Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, DigestAuth replay protection records lastNc plus one instead of the highest nonce-count value it has accepted. When a legitimate client sends noncontiguous nc values because of par…