CVE-2026-91503

Vulnerability in the VPD component of Oracle Database Server. Supported versions that are affected are 19.3-19.32, 21.3-21.23 and 23.4.0-23.26.3. Easily exploitable vulnerability allows low privileged attacker having Create Table privilege with network access via Oracle Net to compromise VPD...

CVE-2026-91479

Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 23.4.0-23.26.3. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the RDBMS executes to compromi...

CVE-2026-73964

Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 19.3-19.32 and 21.3-21.23. Easily exploitable vulnerability allows high privileged attacker having Query Optimizer privilege with network access via Oracle Net to compromise RDBMS. Successful...

CVE-2026-101510

Vulnerability in the Oracle Net Services component of Oracle Database Server. Supported versions that are affected are 19.3-19.32, 21.3-21.23 and 23.4.0-23.26.3. Easily exploitable vulnerability allows high privileged attacker having None privilege with logon to the infrastructure where Oracle Ne...

CVE-2026-101512

Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 23.4.0-23.26.3. Easily exploitable vulnerability allows low privileged attacker having None privilege with network access via HTTP to compromise RDBMS. Successful attacks of this vulnerability...

CVE-2026-101434

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Database Server. Supported versions that are affected are 8.61-8.63. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise...

CVE-2026-91615

A vulnerability exists in the Java VM component of Oracle Database Server affecting versions 19.3-19.32 , 21.3-21.23 , and 23.4.0-23.26.3 . A low-privileged attacker with network access via SOCKS5 can exploit this difficulty-to-exploit flaw to compromise the Java VM. Successful exploitation may l...

CVE-2026-91568

A vulnerability exists in the RDBMS component of Oracle Database Server versions 23.4.0-23.26.3 . A low-privileged attacker with Create Session privileges and network access via Oracle Net can exploit this flaw to compromise the RDBMS. Successful exploitation may result in unauthorized access to ...

CVE-2026-91563

A vulnerability exists in the Oracle OLAP component of Oracle Database Server , specifically affecting versions 19.3-19.32 , 21.3-21.23 , and 23.4.0-23.26.3 . A low-privileged attacker with DBMS_AW privileges and network access via Oracle Net can exploit this to compromise and potentially take ov...

CVE-2026-91503

A vulnerability exists in the VPD component of Oracle Database Server affecting versions 19.3-19.32 , 21.3-21.23 , and 23.4.0-23.26.3 . A low-privileged attacker with Create Table privileges and network access via Oracle Net can exploit this flaw to compromise the VPD. Successful exploitation may...

CVE-2026-91499

The RDBMS component of Oracle Database Server (affected versions 23.4.0-23.26.3 ) is vulnerable to a high-severity security flaw. A low-privileged attacker possessing DBMS_VECTOR privileges and network access via Oracle Net can exploit this vulnerability to compromise the RDBMS, potentially leadi...

CVE-2026-91479

A vulnerability exists in the RDBMS component of Oracle Database Server (affected versions 23.4.0-23.26.3 ). An unauthenticated attacker with access to the physical communication segment attached to the hardware can exploit this flaw to compromise the RDBMS. Successful exploitation can lead to a ...

CVE-2026-73964

A vulnerability exists in the RDBMS component of Oracle Database Server (affected versions 19.3-19.32 and 21.3-21.23 ). A high-privileged attacker with Query Optimizer privileges and network access via Oracle Net can exploit this issue to compromise the RDBMS. Successful exploitation may lead to ...

CVE-2026-101512

A vulnerability exists in the RDBMS component of Oracle Database Server affecting versions 23.4.0-23.26.3 . A low-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the RDBMS. Successful exploitation may lead to unauthorized access to critical data or comp...

CVE-2026-101510

The Oracle Net Services component of Oracle Database Server is vulnerable in versions 19.3-19.32 , 21.3-21.23 , and 23.4.0-23.26.3 . A high-privileged attacker with local access can exploit this vulnerability to compromise Oracle Net Services, potentially resulting in a hang or a frequently repea...

CVE-2026-101434

The PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft, specifically the Database Server component in versions 8.61-8.63 , is vulnerable to a flaw that allows an unauthenticated attacker with network access via HTTP to compromise the system. Exploitation requires human interaction fro...

[SECURITY] [DLA 4835-1] mariadb security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4835-1 [email protected] https://www.debian.org/lts/security/ Otto Kekäläinen October 14, 2026 https://wiki.debian.org/LTS -...

CVE-2026-100695 Adminer before 6.0.2 XSS via CONNECTION_ID escalating to RCE

Adminer before 6.0.2 contains a cross-site scripting vulnerability where the CONNECTIONID database result is interpolated into JavaScript without proper escaping, allowing a malicious database server to execute arbitrary JavaScript in the authenticated Adminer origin. In co-located deployments...

PT-2026-99366

Name of the Vulnerable Software and Affected Versions Adminer versions prior to 6.0.2 Description An issue exists where the result of the CONNECTION ID database function is interpolated into JavaScript without proper escaping. This allows a malicious database server to execute arbitrary JavaScrip...

Oracle Database Server (September 2026 CSPU)

The versions of Oracle Database Server installed on the remote host are affected by multiple vulnerabilities as referenced in the September 2026 CSPU advisory. - Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 19.3-19.32, 21.3-21.23 and...