dotnet: dotnet8.0: dotnet9.0: dotnet10.0: .NET Elevation of Privilege Vulnerability

Improper link resolution before file access 'link following' in .NET allows an authorized attacker to elevate privileges locally...

dotnet: dotnet8.0: dotnet9.0: dotnet10.0: .NET Elevation of Privilege Vulnerability

Improper link resolution before file access 'link following' in .NET allows an authorized attacker to elevate privileges locally...

dotnet: dotnet9.0: dotnet10.0: dotnet8.0: .NET Elevation of Privilege Vulnerability

Improper link resolution before file access 'link following' in .NET allows an authorized attacker to elevate privileges locally...

dotnet8.0: dotnet10.0: dotnet9.0: dotnet: .NET Security Feature Bypass Vulnerability

Origin validation error in .NET allows an unauthorized attacker to bypass a security feature over a network...

dotnet10.0: dotnet9.0: dotnet: dotnet8.0: .NET Denial of Service Vulnerability

Uncontrolled recursion in .NET allows an unauthorized attacker to deny service over a network...

dotnet10.0: dotnet8.0: dotnet9.0: dotnet: .NET Information Disclosure Vulnerability

Insertion of sensitive information into sent data in .NET allows an unauthorized attacker to disclose information over a network...

dotnet8.0: dotnet10.0: dotnet9.0: .NET Remote Code Execution Vulnerability

Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to execute code over a network...

Critical: Red Hat Security Advisory: .NET 10.0 security, bug fix, and enhancement update

An update for .NET 10.0 is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

dotnet9.0: dotnet: dotnet10.0: dotnet8.0: .NET Denial of Service Vulnerability

Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network...

dotnet: dotnet9.0: dotnet10.0: dotnet8.0: .NET Elevation of Privilege Vulnerability

Improper link resolution before file access 'link following' in .NET allows an authorized attacker to elevate privileges locally...

dotnet8.0: dotnet10.0: dotnet9.0: .NET Remote Code Execution Vulnerability

Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to execute code over a network...

dotnet8.0: dotnet10.0: dotnet9.0: dotnet: .NET Security Feature Bypass Vulnerability

Origin validation error in .NET allows an unauthorized attacker to bypass a security feature over a network...

CVE-2026-91568

A vulnerability exists in the RDBMS component of Oracle Database Server versions 23.4.0-23.26.3 . A low-privileged attacker with Create Session privileges and network access via Oracle Net can exploit this flaw to compromise the RDBMS. Successful exploitation may result in unauthorized access to ...

CVE-2026-91563

A vulnerability exists in the Oracle OLAP component of Oracle Database Server , specifically affecting versions 19.3-19.32 , 21.3-21.23 , and 23.4.0-23.26.3 . A low-privileged attacker with DBMS_AW privileges and network access via Oracle Net can exploit this to compromise and potentially take ov...

CVE-2026-91503

A vulnerability exists in the VPD component of Oracle Database Server affecting versions 19.3-19.32 , 21.3-21.23 , and 23.4.0-23.26.3 . A low-privileged attacker with Create Table privileges and network access via Oracle Net can exploit this flaw to compromise the VPD. Successful exploitation may...

CVE-2026-91499

The RDBMS component of Oracle Database Server (affected versions 23.4.0-23.26.3 ) is vulnerable to a high-severity security flaw. A low-privileged attacker possessing DBMS_VECTOR privileges and network access via Oracle Net can exploit this vulnerability to compromise the RDBMS, potentially leadi...

CVE-2026-91465

The Oracle PeopleSoft Enterprise FIN Common Objects Argentina product (specifically the Integration component) is affected by a vulnerability in version 9.1 . An unauthenticated attacker with network access via Oracle Net can easily exploit this flaw to compromise the system. Successful exploitat...

CVE-2026-91307

A vulnerability exists in the Installation Security component of the JD Edwards EnterpriseOne Tools product by Oracle JD Edwards , affecting supported versions 9.2.0.0-9.2.26.5 . An unauthenticated attacker with network access via Oracle Net can easily exploit this flaw to compromise the system. ...

CVE-2026-91308

A vulnerability exists in the Installation Security component of Oracle JD Edwards EnterpriseOne Tools (versions 9.2.0.0-9.2.26.5). This easily exploitable flaw allows an unauthenticated attacker with network access via Oracle Net to compromise the system. Successful exploitation can lead to unau...

CVE-2026-83367

A vulnerability exists in the Oracle Shipping Execution product of Oracle E-Business Suite , specifically within the Workflow Events component, affecting supported versions 12.2.3-12.2.15 . An unauthenticated attacker with network access via Oracle Net can exploit this high-complexity vulnerabili...