Aggregator

A vulnerability was found in Oracle GoldenGate up to 19.30.0.0/21.21/23.26.2. It has been rated as problematic. This vulnerability affects unknown code of the component Libraries. Performing a manipulation results in improper privilege management. This vulnerability is identified as CVE-2026-61079. The attack is only possible with local access. There is not any exploit available.

A vulnerability was found in Oracle GoldenGate up to 19.30.0.0/21.21/23.26.2. It has been declared as problematic. This affects an unknown part of the component Libraries. Such manipulation leads to improper authorization. This vulnerability is referenced as CVE-2026-61084. The attack can only be performed from a local environment. No exploit is available.

A vulnerability was found in Oracle Communications BRM Elastic Charging Engine 15.0.0.0.0/15.0.1.0.0/15.1.0.0.0/15.2.0.0.0. It has been classified as very critical. Affected by this issue is some unknown functionality of the component Diameter Gateway/SDK. This manipulation causes improper privilege management. The identification of this vulnerability is CVE-2026-61053. The attack can only be executed locally. There is no exploit available.

A vulnerability was found in Oracle Billing and Revenue Management and classified as very critical. Affected by this vulnerability is an unknown functionality of the component Platform. The manipulation results in Local Privilege Escalation. This vulnerability was named CVE-2026-61126. The attack needs to be approached locally. There is no available exploit.

A vulnerability has been found in Oracle Communications Billing and Revenue Management 15.0.0.0.0/15.0.1.0.0/15.1.0.0.0/15.2.0.0.0 and classified as very critical. Affected is an unknown function of the component BRM Server. The manipulation leads to improper privilege management. This vulnerability is uniquely identified as CVE-2026-61091. Local access is required to approach this attack. No exploit exists.

A vulnerability, which was classified as problematic, was found in Oracle Production Scheduling up to 12.2.15. This impacts an unknown function of the component Internal Operations. Executing a manipulation can lead to improper authorization. This vulnerability is handled as CVE-2026-61043. It is possible to launch the attack on the local host. There is not any exploit available.

A vulnerability, which was classified as problematic, has been found in Oracle Inventory Management up to 12.2.15. This affects an unknown function of the component Internal Operations. Performing a manipulation results in denial of service. This vulnerability is known as CVE-2026-61028. Attacking locally is a requirement. No exploit is available.

Хакеры успевают выкрасть цифровые ключи от сервера буквально одним запросом.

A vulnerability classified as critical was found in Oracle Production Scheduling up to 12.2.15. The impacted element is an unknown function of the component Internal Operations. Such manipulation leads to Remote Code Execution. This vulnerability is traded as CVE-2026-61049. The attack may be launched remotely. There is no exploit available.

A vulnerability classified as problematic has been found in Oracle Commerce Platform 11.4.0. The affected element is an unknown function of the component Dynamo Application Framework. This manipulation causes improper authorization. This vulnerability appears as CVE-2026-61133. The attack may be initiated remotely. There is no available exploit.

A vulnerability described as critical has been identified in Oracle Solaris 11.4. Impacted is an unknown function of the component Filesystems. The manipulation results in denial of service. This vulnerability is reported as CVE-2026-61052. The attack requires a local approach. No exploit exists.

A vulnerability marked as problematic has been reported in Oracle Application Object Library up to 12.2.15. This issue affects some unknown processing of the component Core. The manipulation leads to improper authorization. This vulnerability is documented as CVE-2026-61111. The attack needs to be performed locally. There is not any exploit available.

A vulnerability labeled as problematic has been found in Oracle MySQL Cluster and MySQL Server. This vulnerability affects unknown code of the component Pluggable Auth. Executing a manipulation can lead to an unknown weakness. This vulnerability is registered as CVE-2026-61096. The attack needs to be launched locally. No exploit is available.

An employee opens a company service portal, searches the knowledge base, and drops a file onto a ticket. Someone who never signed in can send a request to that same portal and get records back. Bishop Fox ran that test across 166 ServiceNow instances during authorized penetration tests. The firm published the results along with the Go tool it used, Snowpick. Findings came back from 31% of the instances. Those instances returned records or confirmed … More →

The post Snowpick: Open-source ServiceNow exposure scanner appeared first on Help Net Security.

A vulnerability identified as critical has been detected in Oracle Banking Trade Finance Process Management up to 14.8.0. This affects an unknown part of the component Common. Performing a manipulation results in improper authorization. This vulnerability is cataloged as CVE-2026-61097. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability categorized as problematic has been discovered in Oracle Production Scheduling up to 12.2.15. Affected by this issue is some unknown functionality of the component Internal Operations. Such manipulation leads to improper authorization. This vulnerability is listed as CVE-2026-61047. The attack must be carried out locally. There is no available exploit.

A vulnerability was found in Oracle MySQL Connectors up to 9.7.0. It has been rated as problematic. Affected by this vulnerability is an unknown functionality of the component Connector J. This manipulation causes information disclosure. This vulnerability is tracked as CVE-2026-61082. The attack is possible to be carried out remotely. No exploit exists.

A vulnerability was found in Oracle MySQL Server and MySQL Cluster. It has been declared as problematic. Affected is an unknown function of the component Server Performance Schema. The manipulation results in information disclosure. This vulnerability is identified as CVE-2026-61081. The attack can be executed remotely. There is not any exploit available.

A vulnerability was found in Oracle Access Manager 12.2.1.4.0/14.1.2.1.0. It has been classified as critical. This impacts an unknown function of the component Authentication Engine. The manipulation leads to privilege escalation. This vulnerability is referenced as CVE-2026-61067. Remote exploitation of the attack is possible. No exploit is available.

A vulnerability was found in Oracle JDeveloper 12.2.1.4.0/14.1.2.0.0 and classified as problematic. This affects an unknown function of the component Security Framework. Executing a manipulation can lead to improper privilege management. The identification of this vulnerability is CVE-2026-61061. The attack can only be executed locally. There is no exploit available.