Known Vulnerabilities for Catalog by Huge-it
Listed below are 2 of the newest known vulnerabilities associated with "Catalog" by "Huge-it".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-62390 json | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Kylin. A backend... | Not Provided | 2026-07-14 | 2026-07-14 |
| CVE-2026-61274 json | Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Item Catalog). Supported versions tha... | Not Provided | 2026-07-21 | 2026-07-22 |
| CVE-2026-61127 json | Vulnerability in the Oracle Communications Service Catalog and Design product of Oracle Communications (component: Solution D... | Not Provided | 2026-07-21 | 2026-07-21 |
| CVE-2026-57360 json | Unauthenticated Cross Site Scripting (XSS) in eCommerce Product Catalog <= 3.5.4 versions. | Not Provided | 2026-07-02 | 2026-07-02 |
| CVE-2026-55550 json | NextCRM is open-source customer relationship management (CRM) software. The CRM product catalog is an organization-wide busin... | Not Provided | 2026-07-20 | 2026-07-20 |
| CVE-2026-54917 json | SeaweedFS is a distributed storage system for object storage (S3), file systems, and Iceberg tables. Prior to 4.30, the S3 AP... | Not Provided | 2026-06-25 | 2026-06-25 |
| CVE-2026-52888 json | NocoBase is an AI-powered no-code/low-code platform for building business applications and enterprise solutions. In 2.0.59 an... | Not Provided | 2026-07-15 | 2026-07-16 |
| CVE-2026-52693 json | Unauthenticated SQL Injection in eCommerce Product Catalog <= 3.5.5 versions. | Not Provided | 2026-06-15 | 2026-06-15 |
| CVE-2026-50226 json | Fixed AES-128-CBC keys inside the AcerConnect OTA application let attackers forge authorization credentials for arbitrary IME... | Not Provided | 2026-06-04 | 2026-06-04 |
| CVE-2026-47019 json | Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Item Catalog). Supported versions tha... | Not Provided | 2026-07-21 | 2026-07-21 |