CVE-2026-113665Published
ApostropheCMS: Missing Authorization on Notification PATCH/DELETE Endpoints
cve-program ·
Vendor product: apostrophe
Security
Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.
Advisory catalog
Public source statements across vendors. Explicit aliases connect records; each publisher keeps its own state, severity and affected-version evidence.
Collected statements
694240 source statements · aliases may refer to the same vulnerabilityCVE-2026-87360Published
Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated a…
cve-program ·
Vendor product: Oracle WebCenter Content
CVE-2026-114101Published
Coraza before 3.8.1 Multipart filename* Charset Handling FILES Rule Bypass
cve-program ·
Vendor product: coraza
CVE-2026-114106Published
HKUDS Vibe-Trading 0.1.0 before 0.1.7 Path Traversal via read_document and safe_user_path
cve-program ·
Vendor product: Vibe-Trading
CVE-2026-87359Published
Vulnerability in the Oracle Service Bus product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with networ…
cve-program ·
Vendor product: Oracle Service Bus
CVE-2026-114111Published
Sharp before 0.35.5 RCE via librsvg Dependency Memory Vulnerability
cve-program ·
Vendor product: sharp
CVE-2026-87358Published
Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with…
cve-program ·
Vendor product: Oracle General Ledger
CVE-2026-114116Published
Vyper through 0.5.0b1 Literal Value Manipulation via Line Separators
cve-program ·
Vendor product: vyper · Vendor product: vyper
CVE-2026-114096Published
Dulwich 0.24.0 before 1.2.8 Symlink Write-Through via porcelain.checkout paths
cve-program ·
Vendor product: dulwich
CVE-2026-87357Published
Vulnerability in the Order Capture product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network …
cve-program ·
Vendor product: Order Capture
CVE-2026-105489Published
Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)
cve-program ·
Vendor product: Adobe Campaign Classic
CVE-2026-68567Published
WordPress EasyTest – Simplify A/B Testing plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerability
cve-program ·
https://wordpress.org/plugins: convertpro
CVE-2025-63031Published
WordPress EasyTest – Simplify A/B Testing plugin <= 1.0.1 - Broken Access Control vulnerability
cve-program ·
https://wordpress.org/plugins: convertpro
CVE-2026-87355Published
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Panel Processor). Supported versions that are affected are 8.61-8.63. Difficult to exploit vulnerability allows low privileged attacker with ne…
cve-program ·
Vendor product: PeopleSoft Enterprise PeopleTools
CVE-2026-87354Published
Vulnerability in Oracle TimesTen In-Memory Database (component: Kubernetes Operator). Supported versions that are affected are 22.1-22.1.40.0 and 26.1-26.1.1.2.0. Easily exploitable vulnerability allows low privileged attacker with networ…
cve-program ·
Vendor product: Oracle TimesTen In-Memory Database
CVE-2026-87353Published
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Porting). Supported versions that are affected are 8.61-8.63. Difficult to exploit vulnerability allows unauthenticated attacker with logon to …
cve-program ·
Vendor product: PeopleSoft Enterprise PeopleTools
CVE-2026-87350Published
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Security). Supported versions that are affected are 8.61-8.63. Difficult to exploit vulnerability allows low privileged attacker with logon to …
cve-program ·
Vendor product: PeopleSoft Enterprise PeopleTools
CVE-2026-87348Published
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Updates Environment Mgmt). Supported versions that are affected are 8.61-8.63. Easily exploitable vulnerability allows high privileged attacker…
cve-program ·
Vendor product: PeopleSoft Enterprise PeopleTools
CVE-2026-87347Published
Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: OSSL Module). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with…
cve-program ·
Vendor product: Oracle HTTP Server
CVE-2026-87345Published
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Business Interlink). Supported versions that are affected are 8.61-8.63. Easily exploitable vulnerability allows unauthenticated attacker with …
cve-program ·
Vendor product: PeopleSoft Enterprise PeopleTools
CVE-2026-87342Published
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Security). Supported versions that are affected are 8.61-8.63. Difficult to exploit vulnerability allows unauthenticated attacker with network …
cve-program ·
Vendor product: PeopleSoft Enterprise PeopleTools
CVE-2026-87330Published
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: E1 Dev Platform Tech - UNIX). Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows high privileged a…
cve-program ·
Vendor product: JD Edwards EnterpriseOne Tools
CVE-2026-87319Published
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versions that are affected are 9.2.0.0-9.2.26.5. Difficult to exploit vulnerability allows low privilege…
cve-program ·
Vendor product: JD Edwards EnterpriseOne Tools
CVE-2026-87344Published
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: LDAP). Supported versions that are affected are 8.61-8.63. Easily exploitable vulnerability allows unauthenticated attacker with network access…
cve-program ·
Vendor product: PeopleSoft Enterprise PeopleTools
CVE-2026-87343Published
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal). Supported versions that are affected are 8.61-8.63. Difficult to exploit vulnerability allows unauthenticated attacker with network ac…
cve-program ·
Vendor product: PeopleSoft Enterprise PeopleTools
CVE-2026-87340Published
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal). Supported versions that are affected are 8.61-8.63. Difficult to exploit vulnerability allows unauthenticated attacker with network ac…
cve-program ·
Vendor product: PeopleSoft Enterprise PeopleTools
CVE-2026-87339Published
Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: REST). Supported versions that are affected are 17.0-26.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP…
cve-program ·
Vendor product: Siebel CRM Integration
CVE-2026-87338Published
Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: EAI). Supported versions that are affected are 17.0-26.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP …
cve-program ·
Vendor product: Siebel CRM Integration
CVE-2026-87337Published
Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated…
cve-program ·
Vendor product: Oracle Access Manager
CVE-2026-87336Published
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal). Supported versions that are affected are 8.61-8.63. Difficult to exploit vulnerability allows low privileged attacker with network acc…
cve-program ·
Vendor product: PeopleSoft Enterprise PeopleTools
CVE-2026-87335Published
Vulnerability in the Applications DBA product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with networ…
cve-program ·
Vendor product: Applications DBA
CVE-2026-87334Published
Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: ADF Faces). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with lo…
cve-program ·
Vendor product: Oracle JDeveloper
CVE-2026-87333Published
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versions that are affected are 9.2.0.0-9.2.26.5. Difficult to exploit vulnerability allows low privilege…
cve-program ·
Vendor product: JD Edwards EnterpriseOne Tools
CVE-2026-87332Published
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: E1 Dev Platform Tech - Cloud). Supported versions that are affected are 9.2.0.0-9.2.26.5. Difficult to exploit vulnerability allows high privilege…
cve-program ·
Vendor product: JD Edwards EnterpriseOne Tools
CVE-2026-87331Published
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: E1 Dev Platform Tech - UNIX). Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows high privileged a…
cve-program ·
Vendor product: JD Edwards EnterpriseOne Tools
CVE-2026-87329Published
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versions that are affected are 9.2.0.0-9.2.26.5. Difficult to exploit vulnerability allows low privilege…
cve-program ·
Vendor product: JD Edwards EnterpriseOne Tools
CVE-2026-87328Published
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versions that are affected are 9.2.0.0-9.2.26.5. Difficult to exploit vulnerability allows unauthenticat…
cve-program ·
Vendor product: JD Edwards EnterpriseOne Tools
CVE-2026-87327Published
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versions that are affected are 9.2.0.0-9.2.26.5. Difficult to exploit vulnerability allows unauthenticat…
cve-program ·
Vendor product: JD Edwards EnterpriseOne Tools
CVE-2026-87326Published
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versions that are affected are 9.2.0.0-9.2.26.5. Difficult to exploit vulnerability allows unauthenticat…
cve-program ·
Vendor product: JD Edwards EnterpriseOne Tools
CVE-2026-87325Published
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versions that are affected are 9.2.0.0-9.2.26.5. Difficult to exploit vulnerability allows low privilege…
cve-program ·
Vendor product: JD Edwards EnterpriseOne Tools
CVE-2026-87324Published
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versions that are affected are 9.2.0.0-9.2.26.5. Difficult to exploit vulnerability allows low privilege…
cve-program ·
Vendor product: JD Edwards EnterpriseOne Tools
CVE-2026-87323Published
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows low privileged attacker…
cve-program ·
Vendor product: JD Edwards EnterpriseOne Tools
CVE-2026-87322Published
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.20. Easily exploitable vulnerability allows high privileged attacker with access to the physical c…
cve-program ·
Vendor product: Oracle VM VirtualBox
CVE-2026-87321Published
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Package Build SEC). Supported versions that are affected are 9.2.0.0-9.2.26.5. Difficult to exploit vulnerability allows high privileged attacker …
cve-program ·
Vendor product: JD Edwards EnterpriseOne Tools
CVE-2026-87320Published
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: E1 Dev Platform Tech - UNIX). Supported versions that are affected are 9.2.0.0-9.2.26.5. Difficult to exploit vulnerability allows low privileged …
cve-program ·
Vendor product: JD Edwards EnterpriseOne Tools
CVE-2026-87318Published
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versions that are affected are 9.2.0.0-9.2.26.5. Difficult to exploit vulnerability allows low privilege…
cve-program ·
Vendor product: JD Edwards EnterpriseOne Tools
CVE-2026-87316Published
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows low privileged …
cve-program ·
Vendor product: JD Edwards EnterpriseOne Tools
CVE-2026-87317Published
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versions that are affected are 9.2.0.0-9.2.26.5. Difficult to exploit vulnerability allows unauthenticat…
cve-program ·
Vendor product: JD Edwards EnterpriseOne Tools
CVE-2026-87315Published
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows unauthenticated…
cve-program ·
Vendor product: JD Edwards EnterpriseOne Tools
A catalog match establishes published evidence, not applicability to your environment. Check resolved package dependencies, or open a Microsoft CVE for fixing KBs, releases and planning.