Splunk Enterprise authorization issue vulnerability

Versions prior to Splunk Enterprise 10.4.4, 10.2.8, 10.0.11, and 9.4.16, as well as versions prior to Splunk Secure Gateway 3.10.12, 3.9.26, and 3.8.73 are affected by an authorization issue vulnerability. This vulnerability arises because the Splunk Secure Gateway App Key Value Store fails to...

Cisco AnyConnect: CVE-2026-76462: Cisco Secure Client Secure Firewall Posture Module Privilege Escalation Vulnerability

A vulnerability in the interprocess communication IPC channel of the Secure Firewall Posture module in Cisco Secure Client could allow an authenticated, local attacker to elevate privileges on an affected device. This vulnerability is due to insufficient validation of user-supplied input. An...

SUSE CVE-2026-111063

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, the Secure attribute for a shared cookie is not enforced. An attacker can consequently cause a shared cookie marked Secure to be sent with an unencrypted request. This issue is fixed in version 3.14.4...

CVE-2026-9825

IBM Cyber Fraud 1.0.0 through 1.0.2 has a missing secure attribute allowing sensitive cookies to be transmitted over unencrypted connections, potentially enabling an attacker to intercept session data through network-based attacks...

CVE-2026-101482

Vulnerability in Oracle Secure Backup component: Device Management and Support. Supported versions that are affected are 19.1.0.0.0 and 19.1.0.1.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Secure Backup executes to compromise...

CVE-2026-101483

Vulnerability in Oracle Secure Backup component: Device Management and Support. Supported versions that are affected are 19.1.0.0.0 and 19.1.0.1.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Secure Backup executes to compromise...

CVE-2026-101481

Vulnerability in Oracle Secure Backup component: Device Management and Support. Supported versions that are affected are 19.1.0.0.0 and 19.1.0.1.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Secure Backup executes to compromise...

CVE-2026-101480

Vulnerability in Oracle Secure Backup component: NDMP daemon. Supported versions that are affected are 19.1.0.0.0 and 19.1.0.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Secure Backup. Successful attacks of this vulnerabili...

CVE-2026-101484

Vulnerability in Oracle Secure Backup component: Backup and Restore. Supported versions that are affected are 19.1.0.0.0 and 19.1.0.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Secure Backup. Successful attacks of this...

CVE-2026-101479

Vulnerability in Oracle Secure Backup component: Backup and Restore. Supported versions that are affected are 19.1.0.0.0 and 19.1.0.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Secure Backup. While the vulnerability is in...

CVE-2026-9825

IBM Cyber Fraud versions 1.0.0 through 1.0.2 are affected by a vulnerability where a missing secure attribute allows sensitive cookies to be transmitted over unencrypted connections. This flaw could enable an attacker to intercept session data via network-based attacks. The issue is associated wi...

CVE-2026-9825 IBM Cyber Fraud Reachable Assertion

IBM Cyber Fraud 1.0.0 through 1.0.2 has a missing secure attribute allowing sensitive cookies to be transmitted over unencrypted connections, potentially enabling an attacker to intercept session data through network-based attacks...

CVE-2026-9825 IBM Cyber Fraud Reachable Assertion

IBM Cyber Fraud 1.0.0 through 1.0.2 has a missing secure attribute allowing sensitive cookies to be transmitted over unencrypted connections, potentially enabling an attacker to intercept session data through network-based attacks...

CVE-2026-101484

A vulnerability exists in the Backup and Restore component of Oracle Secure Backup affecting versions 19.1.0.0.0 and 19.1.0.1.0 . An unauthenticated attacker with network access via TCP can easily exploit this flaw to compromise the system, potentially leading to a full takeover of Oracle Secure ...

CVE-2026-101483

A vulnerability exists in the Device Management and Support component of Oracle Secure Backup (affected versions 19.1.0.0.0 and 19.1.0.1.0 ). A low-privileged attacker with local access to the infrastructure can exploit this flaw to compromise the software. Successful exploitation can lead to a c...

CVE-2026-101481

A vulnerability exists in the Device Management and Support component of Oracle Secure Backup affecting versions 19.1.0.0.0 and 19.1.0.1.0 . A low-privileged attacker with local access to the infrastructure can exploit this vulnerability to compromise and potentially take over Oracle Secure Backu...

CVE-2026-101480

A vulnerability exists in the NDMP daemon component of Oracle Secure Backup affecting versions 19.1.0.0.0 and 19.1.0.1.0 . An unauthenticated attacker with network access via TCP can exploit this issue to compromise the system, potentially resulting in unauthorized read access to a subset of acce...

CVE-2026-101482

A vulnerability exists in the Device Management and Support component of Oracle Secure Backup affecting versions 19.1.0.0.0 and 19.1.0.1.0 . A low-privileged attacker with logon access to the underlying infrastructure can easily exploit this flaw to compromise the software, potentially resulting ...

CVE-2026-101479

A vulnerability exists in the Backup and Restore component of Oracle Secure Backup (versions 19.1.0.0.0 and 19.1.0.1.0 ). An unauthenticated attacker with network access via TCP can exploit this flaw to cause a hang or a frequently repeatable crash , resulting in a complete Denial of Service (DoS...

CVE-2026-95210

A flaw was found in GnuTLS. Improper certificate validation causes the library to accept certificates containing invalid extensions. A remote attacker could exploit this flaw by presenting a specially crafted certificate during a secure connection. Successful exploitation may allow an attacker to...