Total
420942 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2026-87168 | 1 Oracle | 1 Purchasing | 2026-09-22 | N/A | 8.1 HIGH |
| Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: G-Invoicing). Supported versions that are affected are 12.2.10-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Purchasing. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Purchasing accessible data as well as unauthorized access to critical data or complete access to all Oracle Purchasing accessible data. CVSS 3.1 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N). | |||||
| CVE-2026-25294 | 1 Qualcomm | 150 Cologne, Cologne Firmware, Congo and 147 more | 2026-09-22 | N/A | 7.4 HIGH |
| Transient DOS while parsing frame during channel usage. | |||||
| CVE-2026-25290 | 1 Qualcomm | 14 Cologne, Cologne Firmware, Fastconnect 7800 and 11 more | 2026-09-22 | N/A | 7.8 HIGH |
| Memory Corruption when validating large data buffers from external sources using addition to check buffer length. | |||||
| CVE-2026-25284 | 1 Qualcomm | 14 Cologne, Cologne Firmware, Fastconnect 7800 and 11 more | 2026-09-22 | N/A | 7.3 HIGH |
| Information Disclosure when a pointer is reused after being deallocated. | |||||
| CVE-2026-25283 | 1 Qualcomm | 14 Cologne, Cologne Firmware, Fastconnect 7800 and 11 more | 2026-09-22 | N/A | 8.8 HIGH |
| Memory Corruption when copying unverified data from an external source exceeds the allocated buffer size. | |||||
| CVE-2026-25282 | 1 Qualcomm | 14 Cologne, Cologne Firmware, Fastconnect 7800 and 11 more | 2026-09-22 | N/A | 7.9 HIGH |
| Transient DOS when processing unverified data from a neighboring system causes out of bound memory access. | |||||
| CVE-2026-25281 | 1 Qualcomm | 14 Cologne, Cologne Firmware, Fastconnect 7800 and 11 more | 2026-09-22 | N/A | 7.4 HIGH |
| Transient DOS when processing large or numerous request buffers without sufficient memory allocation validation. | |||||
| CVE-2026-25280 | 1 Qualcomm | 40 Cologne, Cologne Firmware, Fastconnect 6700 and 37 more | 2026-09-22 | N/A | 7.8 HIGH |
| Memory corruption when processing escape handling flow with insufficient user buffer sizes. | |||||
| CVE-2026-87265 | 1 Oracle | 1 Purchasing | 2026-09-22 | N/A | 8.1 HIGH |
| Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Other issue). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Purchasing. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Purchasing accessible data as well as unauthorized access to critical data or complete access to all Oracle Purchasing accessible data. CVSS 3.1 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N). | |||||
| CVE-2026-81642 | 1 Nlnetlabs | 1 Unbound | 2026-09-22 | N/A | 9.8 CRITICAL |
| In NLnet Labs Unbound up to and including 1.26.0, a vulnerability was found in the DNSSEC validator that enables denial of service and possible remote code execution as a result of digesting DNSKEYs. A DNSKEY with an owner compression pointer to its own RDATA can overflow the digest buffer. Remote code execution is possible through attacker controlled data. An adversary can exploit the vulnerability by controlling a malicious zone and querying a vulnerable Unbound. | |||||
| CVE-2026-87184 | 1 Oracle | 1 Hyperion Financial Management | 2026-09-22 | N/A | 9.8 CRITICAL |
| Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via SQL to compromise Oracle Hyperion Financial Management. Successful attacks of this vulnerability can result in takeover of Oracle Hyperion Financial Management. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). | |||||
| CVE-2026-64195 | 1 Ni | 1 Dasylab | 2026-09-22 | N/A | 7.8 HIGH |
| There is an out-of-bounds write vulnerability in DASYLab due to lack of proper validation of user-supplied data. Successful exploitation requires an attacker to get a user to open a specially crafted .DSB file. This issue affects all versions before 2026.0.0. | |||||
| CVE-2026-64196 | 1 Ni | 1 Dasylab | 2026-09-22 | N/A | 7.8 HIGH |
| There is an out-of-bounds write vulnerability in DASYLab due to improper validation of user-supplied data, resulting in a write past the end of an allocated heap. Successful exploitation requires an attacker to get a user to open a specially crafted .DSB file. This issue affects all versions before 2026.0.0. | |||||
| CVE-2026-64197 | 1 Ni | 1 Dasylab | 2026-09-22 | N/A | 7.8 HIGH |
| There is an out-of-bounds write vulnerability in DASYLab due to improper validation of user-supplied data, resulting in a write past the end of an allocated data structure. Successful exploitation requires an attacker to get a user to open a specially crafted .DSB file. This issue affects all versions before 2026.0.0. | |||||
| CVE-2026-64198 | 1 Ni | 1 Dasylab | 2026-09-22 | N/A | 7.8 HIGH |
| There is an out-of-bounds read vulnerability in DASYLab due to improper validation of user-supplied data. This results in a read a few bytes past the end of an allocated heap buffer during file handling. Successful exploitation requires an attacker to get a user to open a specially crafted .DSB file. This issue affects all versions before 2026.0.0. | |||||
| CVE-2026-64199 | 1 Ni | 1 Dasylab | 2026-09-22 | N/A | 7.8 HIGH |
| There is an out-of-bounds read vulnerability in DASYLab due to improper validation of user-supplied data. This results in a read outside the bounds of an allocated data structure. Successful exploitation requires an attacker to get a user to open a specially crafted .DSB file. This issue affects all versions before 2026.0.0. | |||||
| CVE-2026-64200 | 1 Ni | 1 Dasylab | 2026-09-22 | N/A | 7.8 HIGH |
| There is an out-of-bounds read vulnerability in DASYLab due to improper validation of user-supplied data. This results in a read a past the end of an allocated heap buffer during string conversion. Successful exploitation requires an attacker to get a user to open a specially crafted .DSB file. This issue affects all versions before 2026.0.0. | |||||
| CVE-2026-93959 | 2026-09-22 | 7.5 HIGH | 7.3 HIGH | ||
| A vulnerability was determined in SourceCodester Online Reviewer Management System 1.0. This issue affects some unknown processing of the file /reviewer_0/admins/assessments/course/btn_functions.php. This manipulation of the argument Course causes sql injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized. | |||||
| CVE-2026-87238 | 1 Oracle | 1 Hyperion Financial Management | 2026-09-22 | N/A | 8.8 HIGH |
| Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via SQL to compromise Oracle Hyperion Financial Management. Successful attacks of this vulnerability can result in takeover of Oracle Hyperion Financial Management. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). | |||||
| CVE-2026-87207 | 1 Oracle | 1 Hyperion Financial Management | 2026-09-22 | N/A | 7.2 HIGH |
| Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows high privileged attacker with network access via SQL to compromise Oracle Hyperion Financial Management. Successful attacks of this vulnerability can result in takeover of Oracle Hyperion Financial Management. CVSS 3.1 Base Score 7.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H). | |||||