Everything Firewall Scoop has reported about NVD: 4 stories, newest first. Part of our Vulnerabilities coverage.
A critical remote code execution flaw in Oracle WebCenter Content allows unauthenticated attackers to seize control of affected servers without credentials.
A CVSS 9.9 flaw in Oracle Essbase allows low-privileged attackers to seize full control via HTTP, exposing environments running version 21.8.3.0.0 to immediate compromise.
A high-severity flaw in Craft CMS allows logged-in users to execute arbitrary code by abusing the Twig group filter without proper safeguards.
A high-severity stack-based buffer overflow in SQL Server allows network-based privilege escalation for attackers who already have authorization.