CVE-2026-95704Published
Authenticated Remote Code Execution allows Unauthorized System Control in Wireless Network Management Interface
cve-program ·
Vendor product: ArubaOS (AOS)
Advisory catalog
Public source statements across vendors. Explicit aliases connect records; each publisher keeps its own state, severity and affected-version evidence.
Collected statements
677617 source statements · aliases may refer to the same vulnerabilityCVE-2026-83363Published
Vulnerability in the Oracle Contract Lifecycle Management for Public Sector product of Oracle E-Business Suite (component: Award/PO). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low priv…
cve-program ·
Vendor product: Oracle Contract Lifecycle Management for Public Sector
CVE-2026-95705Published
Authenticated Command Injection Vulnerabilities in AOS-8
cve-program ·
Vendor product: ArubaOS (AOS)
CVE-2026-95706Published
Authenticated Command Injection Vulnerabilities in AOS-8
cve-program ·
Vendor product: ArubaOS (AOS)
CVE-2026-115785Published
Zimbra Collaboration Suite Data Source Test SMTP Command Injection via Unsanitized Email Address
cve-program ·
Vendor product: Zimbra Collaboration Suite
CVE-2026-50056Published
Zimbra Collaboration Suite Local Privilege Escalation via zmmailboxdmgr JVM Argument Injection
cve-program ·
Vendor product: Zimbra Collaboration Suite
CVE-2026-95707Published
Authenticated Buffer Overflow Vulnerability leads to Remote Code Execution in AOS-8
cve-program ·
Vendor product: ArubaOS (AOS)
CVE-2026-95708Published
Authenticated File Write leads to Command Injection Vulnerabilities in AOS-10
cve-program ·
Vendor product: ArubaOS (AOS)
CVE-2026-95709Published
Authenticated Command Injection Vulnerabilities in AOS-10
cve-program ·
Vendor product: ArubaOS (AOS)
CVE-2026-95711Published
Authentication Bypass Leading to Remote Code Execution in AOS-10 Web-Based Management Interface
cve-program ·
Vendor product: ArubaOS (AOS)
CVE-2026-95714Published
Authenticated Adjacent Buffer Overflow Vulnerability leads to Remote Code Execution in AOS-10
cve-program ·
Vendor product: ArubaOS (AOS)
CVE-2026-79852Published
Unauthenticated SQL Injection allows Remote Code Execution in AOS Web-Based Management Interface
cve-program ·
Vendor product: ArubaOS (AOS)
CVE-2026-50057Published
Zimbra Collaboration Suite Local Privilege Escalation via Unrestricted Postfix Sudo Permissions
cve-program ·
Vendor product: Zimbra Collaboration Suite
CVE-2026-93640Published
Zimbra Collaboration Suite Local Privilege Escalation via Unrestricted zmunbound Sudo Configuration
cve-program ·
Vendor product: Zimbra Collaboration Suite
CVE-2026-75775Published
Improper Neutralization of Special Elements used in an OS Command in certain ASUS routers allows remote user to execute arbitrary commands with root privileges via crafted parameters sent to the router while the device is in its factory-def…
cve-program ·
Vendor product: Router
CVE-2026-101809Published
Vulnerability in the Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with netw…
cve-program ·
Vendor product: Workflow
CVE-2026-101736Published
Vulnerability in the Primavera Unifier product of Oracle Construction and Engineering (component: Core). Supported versions that are affected are 21.12.0-21.12.17. Difficult to exploit vulnerability allows unauthenticated attacker with net…
cve-program ·
Vendor product: Primavera Unifier
MAL-2026-18247Published
Malicious code in @liauto/win32-x64 (npm)
osv · GHSA-32x9-4g9x-5cxj
npm: @liauto/win32-x64
RUSTSEC-2026-0387Published
Multiple timing variability issues in operations intended to be constant-time
osv ·
crates.io: crypto-bigint
CVE-2026-91504Published
Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Portal Suite). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows low privile…
cve-program ·
Vendor product: Oracle WebCenter Content
CVE-2026-91503Published
Vulnerability in the VPD component of Oracle Database Server. Supported versions that are affected are 19.3-19.32, 21.3-21.23 and 23.4.0-23.26.3. Easily exploitable vulnerability allows low privileged attacker having Create Table privileg…
cve-program ·
Vendor product: Oracle Database Server
CVE-2026-91502Published
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthe…
cve-program ·
Vendor product: Oracle WebLogic Server
CVE-2026-91501Published
Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: Installer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker w…
cve-program ·
Vendor product: Oracle Identity Manager
CVE-2026-91499Published
Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 23.4.0-23.26.3. Easily exploitable vulnerability allows low privileged attacker having DBMS_VECTOR privilege with network access via O…
cve-program ·
Vendor product: Oracle Database Server
CVE-2026-91496Published
Vulnerability in the Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with net…
cve-program ·
Vendor product: Workflow
CVE-2026-91494Published
Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: LDAP Gateway). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Difficult to exploit vulnerability allows unauthenti…
cve-program ·
Vendor product: Oracle Identity Manager Connector
CVE-2026-91493Published
Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: LDAP Gateway). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthentica…
cve-program ·
Vendor product: Oracle Identity Manager Connector
CVE-2026-91492Published
Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: SAP ERP+). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Difficult to exploit vulnerability allows unauthenticate…
cve-program ·
Vendor product: Oracle Identity Manager Connector
CVE-2026-91489Published
Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: LDAP Gateway). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileg…
cve-program ·
Vendor product: Oracle Identity Manager Connector
CVE-2026-91488Published
Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Generic REST). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileg…
cve-program ·
Vendor product: Oracle Identity Manager Connector
CVE-2026-91487Published
Vulnerability in Oracle Java SE (component: Compiler). Supported versions that are affected are Oracle Java SE: 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and 21.0.12.1; Oracle GraalVM Ent…
cve-program ·
Vendor product: Oracle Java SE
CVE-2026-91486Published
Vulnerability in the PeopleSoft Enterprise FIN General Ledger Brazil product of Oracle PeopleSoft (component: General Ledger). The supported version that is affected is 9.1. Easily exploitable vulnerability allows low privileged attacker …
cve-program ·
Vendor product: PeopleSoft Enterprise FIN General Ledger Brazil
CVE-2026-91485Published
Vulnerability in the PeopleSoft Enterprise FIN Cash Management product of Oracle PeopleSoft (component: Cash Management). The supported version that is affected is 9.2. Difficult to exploit vulnerability allows high privileged attacker wi…
cve-program ·
Vendor product: PeopleSoft Enterprise FIN Cash Management
CVE-2026-91484Published
Vulnerability in Oracle Java SE (component: Java plugin). Supported versions that are affected are Oracle Java SE: 8u503 and 8u503-perf. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure wh…
cve-program ·
Vendor product: Oracle Java SE
CVE-2026-91483Published
Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core). The supported version that is affected is 8.5.8. Easily exploitable vulnerability allows unauthenticated attacker with log…
cve-program ·
Vendor product: Oracle Outside In Technology
CVE-2026-91482Published
Vulnerability in the PeopleSoft Enterprise SCM Strategic Sourcing product of Oracle PeopleSoft (component: Bidder Registration). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacke…
cve-program ·
Vendor product: PeopleSoft Enterprise SCM Strategic Sourcing
CVE-2026-91481Published
Vulnerability in the PeopleSoft Enterprise SCM Purchasing product of Oracle PeopleSoft (component: Supplier Registration). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with…
cve-program ·
Vendor product: PeopleSoft Enterprise SCM Purchasing
CVE-2026-91480Published
Vulnerability in the PeopleSoft Enterprise SCM Strategic Sourcing product of Oracle PeopleSoft (component: Strategic Sourcing). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker…
cve-program ·
Vendor product: PeopleSoft Enterprise SCM Strategic Sourcing
CVE-2026-91479Published
Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 23.4.0-23.26.3. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical communication segment att…
cve-program ·
Vendor product: Oracle Database Server
CVE-2026-91477Published
Vulnerability in the Oracle JavaFX product of Oracle Java SE (component: JavaFX). Supported versions that are affected are Oracle JavaFX: 25.0.4 and 27. Difficult to exploit vulnerability allows unauthenticated attacker with network acces…
cve-program ·
Vendor product: Oracle JavaFX
CVE-2026-91476Published
Vulnerability in the PeopleSoft Enterprise FIN Common Objects Brazil product of Oracle PeopleSoft (component: eProcurement). The supported version that is affected is 9.1. Easily exploitable vulnerability allows unauthenticated attacker w…
cve-program ·
Vendor product: PeopleSoft Enterprise FIN Common Objects Brazil
CVE-2026-91475Published
Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK). The supported version that is affected is 8.5.8. Easily exploitable vulnerability allows low privileged attac…
cve-program ·
Vendor product: Oracle Outside In Technology
CVE-2026-91474Published
Vulnerability in the PeopleSoft Enterprise FIN Common Objects Brazil product of Oracle PeopleSoft (component: eProcurement). The supported version that is affected is 9.1. Easily exploitable vulnerability allows high privileged attacker w…
cve-program ·
Vendor product: PeopleSoft Enterprise FIN Common Objects Brazil
CVE-2026-91473Published
Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: Web Listener). The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with logon to the…
cve-program ·
Vendor product: Oracle HTTP Server
CVE-2026-91471Published
Vulnerability in the PeopleSoft Enterprise CC Common Application Objects product of Oracle PeopleSoft (component: BAM Framework). The supported version that is affected is 9.2. Difficult to exploit vulnerability allows unauthenticated att…
cve-program ·
Vendor product: PeopleSoft Enterprise CC Common Application Objects
CVE-2026-91467Published
Vulnerability in the Oracle Fusion Middleware Control product of Oracle Fusion Middleware (component: Framework). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows physical access …
cve-program ·
Vendor product: Oracle Fusion Middleware Control
CVE-2026-91466Published
Vulnerability in the PeopleSoft Enterprise FIN Common Objects Argentina product of Oracle PeopleSoft (component: Asset Management). The supported version that is affected is 9.1. Easily exploitable vulnerability allows high privileged att…
cve-program ·
Vendor product: PeopleSoft Enterprise FIN Common Objects Argentina
A catalog match establishes published evidence, not applicability to your environment. Check resolved package dependencies, or open a Microsoft CVE for fixing KBs, releases and planning.