Symlink Attack

Overview Affected versions of this package are vulnerable to Symlink Attack via ViaTemplateActivator.generate and PyEnvCfg.write, which write generated activation scripts and pyvenv.cfg without first atomically replacing any existing symbolic or hard link at the destination path...

Symlink Attack

Overview Affected versions of this package are vulnerable to Symlink Attack via the onerror handler in src/virtualenv/util/path/sync.py during directory tree removal on Windows. When a read-only file or directory cannot be deleted, the handler widens the entry's permissions using os.chmod before...

dotnet10.0: dotnet9.0: dotnet: dotnet8.0: .NET Denial of Service Vulnerability

Uncontrolled recursion in .NET allows an unauthorized attacker to deny service over a network...

dotnet10.0: dotnet9.0: dotnet: dotnet8.0: .NET Denial of Service Vulnerability

Uncontrolled recursion in .NET allows an unauthorized attacker to deny service over a network...

dotnet10.0: dotnet9.0: dotnet: dotnet8.0: .NET Denial of Service Vulnerability

Uncontrolled recursion in .NET allows an unauthorized attacker to deny service over a network...

CVE-2026-113705 a2aproject a2a-rs error.rs information exposure

A vulnerability was determined in a2aproject a2a-rs up to 0.4.3. This issue affects some unknown processing of the file a2a-server/src/error.rs. Executing a manipulation can lead to information exposure through error message. The attack can be executed remotely. This patch is called...

CVE-2026-91662

Vulnerability in Oracle Essbase component: Java Based Agent. The supported version that is affected is 21.8.3.0.0. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Essbase executes to compromise Oracle Essbase. While the vulnerability...

CVE-2026-91649

Vulnerability in Oracle Essbase component: Java Based Agent. The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Essbase executes to compromise Oracle Essbase. While the vulnerability ...

CVE-2026-91633

Vulnerability in Oracle Essbase component: Security. The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Essbase executes to compromise Oracle Essbase. While the vulnerability is in...

CVE-2026-91627

Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications component: Platform. Supported versions that are affected are 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0 and 15.2.0.0.0. Easily exploitable vulnerability allows low privileged attacker with logon to...

CVE-2026-91617

Vulnerability in the Oracle Middleware Common Libraries and Tools product of Oracle Fusion Middleware component: Remote Diagnostic Agent. Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows low privileged attacker wit...

CVE-2026-91628

Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications component: BRM Server. Supported versions that are affected are 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0 and 15.2.0.0.0. Easily exploitable vulnerability allows low privileged attacker with logon ...

CVE-2026-91629

Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications component: Platform. Supported versions that are affected are 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0 and 15.2.0.0.0. Difficult to exploit vulnerability allows low privileged attacker with logon ...

CVE-2026-91562

Vulnerability in the PeopleSoft Enterprise FIN Inventory Brazil product of Oracle PeopleSoft component: Inventory. The supported version that is affected is 9.1. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where PeopleSoft Enterprise FIN...

CVE-2026-91559

Vulnerability in the PeopleSoft Enterprise FIN Manufacturing Brazil product of Oracle PeopleSoft component: Integration. The supported version that is affected is 9.1. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where PeopleSoft Enterprise FIN...

CVE-2026-91547

Vulnerability in Oracle GoldenGate component: Vendor Access Module. Supported versions that are affected are 19.1.0.0.0-19.32.0.0, 21.3-21.23 and 23.4-23.26.3.0.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle GoldenGate executes to...

CVE-2026-91553

Vulnerability in the PeopleSoft Enterprise FIN Product Configurator Brazil product of Oracle PeopleSoft component: Product Configurator. The supported version that is affected is 9.1. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where PeopleSoft...

CVE-2026-91557

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics component: BI Foundation. The supported version that is affected is 12.2.1.4.0. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Business...

CVE-2026-91539

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics component: Presentation Services. The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle...

CVE-2026-91537

Vulnerability in the Oracle Solaris product of Oracle Systems component: Utility. The supported version that is affected is 11.4. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. Successful...