CVE-2026-91582

A vulnerability exists in the Oracle Business Intelligence Enterprise Edition product within the BI Search component, specifically affecting version 12.2.1.4.0 . An unauthenticated attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability to cause a partial denial ...

CVE-2026-91588

A vulnerability exists in the BI Search component of Oracle Business Intelligence Enterprise Edition (Oracle Analytics), specifically affecting versions 8.2.0.0.0 and 12.2.1.4.0 . An unauthenticated attacker with network access via HTTP can exploit this flaw to compromise the system, although the...

CVE-2026-91535

The Oracle Business Intelligence Enterprise Edition product of Oracle Analytics is affected by a vulnerability in the BI Search component. Specifically, versions 8.2.0.0.0 , 12.2.1.4.0 , and 26.01.0.0.0 are impacted. A low-privileged attacker with network access via HTTP can exploit this vulnerab...

CVE-2026-60882

A vulnerability exists in the Search Framework component of Oracle PeopleSoft Enterprise PeopleTools affecting versions 8.61 and 8.62 . This high-complexity vulnerability allows an unauthenticated attacker with access to the physical communication segment of the hardware to compromise the softwar...

CVE-2026-60876

The PeopleSoft Enterprise PeopleTools product, specifically the Search Framework component in version 8.62 , is affected by a vulnerability that allows an unauthenticated attacker with network access via HTTP to compromise the system. This is considered a difficult-to-exploit vulnerability as it ...

CVE-2026-101506

A vulnerability exists in Oracle Trusted Answer Search affecting version 26.1 within the Application expert UI component. This easily exploitable flaw allows a low-privileged attacker with network access via HTTP to compromise the system. Successful exploitation can lead to unauthorized access to...

CVE-2026-101507

A vulnerability exists in the PLSQL package component of Oracle Trusted Answer Search version 26.1 . A low-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the system. Successful exploitation may lead to unauthorized access to critical data or provide co...

CVE-2026-101505

A vulnerability exists in the Oracle Trusted Answer Search (specifically the Application expert UI component) in version 26.1 . A low-privileged attacker with network access via HTTP can exploit this issue to compromise the system, though successful exploitation requires human interaction . The v...

CVE-2026-101504

A vulnerability exists in the Application expert UI component of Oracle Trusted Answer Search (version 26.1). A low-privileged attacker with network access via HTTP can exploit this flaw to compromise the system, although successful attacks require human interaction from a third party. The vulner...

CVE-2026-101503

A vulnerability exists in the PLSQL package component of Oracle Trusted Answer Search version 26.1 . This easily exploitable flaw allows a low privileged attacker with network access via Oracle Net to compromise the service. Successful exploitation can result in a full takeover of Oracle Trusted ...

CVE-2026-101502

A vulnerability exists in the PLSQL package component of Oracle Trusted Answer Search version 26.1 . This issue allows a low-privileged attacker with infrastructure access to compromise the service, potentially gaining unauthorized read, update, insert, or delete access to certain data, or causin...

CVE-2026-101501

A vulnerability exists in the Oracle Trusted Answer Search (specifically the PLSQL package component) in version 26.1 . A low-privileged attacker with network access via Oracle Net can exploit this flaw to compromise the service. The impact includes unauthorized creation, deletion, or modificatio...

CVE-2026-101498

A vulnerability exists in the PLSQL package component of Oracle Trusted Answer Search (version 26.1 ). An unauthenticated attacker with network access via Oracle Net can exploit this difficult-to-exploit vulnerability to compromise the software. Successful exploitation can result in a complete ta...

CVE-2026-113232

Memory corruption in Search in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113232

Memory corruption in Search in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113232

Memory corruption in Search in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113232

Google Chrome versions prior to 156.0.8078.47 are vulnerable to a memory corruption flaw within the Search component. This vulnerability allows a remote attacker to potentially execute arbitrary code inside the sandbox by navigating to a crafted HTML page. The security severity is rated as Medium...

CVE-2026-112954

ApostropheCMS is an open-source Node.js content management system. Prior to 4.34.0, a public REST API type that uses publicApiProjection can expose excluded searchable or sortable field information through search membership and sort ordering oracles. Returned fields remain filtered by the...

CVE-2026-112954

The ApostropheCMS Node.js content management system (versions prior to 4.34.0 ) contains a vulnerability in the public REST API. A public REST API type utilizing publicApiProjection can be exploited via search membership and sort ordering oracles to bypass projection restrictions. This allows an ...

CVE-2026-112954 ApostropheCMS: Unauthenticated publicApiProjection bypass via search and sort query builders in the public REST API

ApostropheCMS is an open-source Node.js content management system. Prior to 4.34.0, a public REST API type that uses publicApiProjection can expose excluded searchable or sortable field information through search membership and sort ordering oracles. Returned fields remain filtered by the...