PT-2026-119113

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: SQR. Supported versions that are affected are 8.61-8.63. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where PeopleSoft Enterprise PeopleTools execut...

PT-2026-119092

Name of the Vulnerable Software and Affected Versions Oracle Siebel CRM Siebel Apps - Marketing versions 17.0 through 26.9 Description A flaw in the Marketing component allows a high-privileged attacker with access to the execution infrastructure to compromise the system. This could lead to...

PT-2026-119124

Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM component: Siebel Cloud Manager. Supported versions that are affected are 22.3-26.9. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Siebel CRM Cloud...

PT-2026-119152

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM component: Server Infrastructure. Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Siebel CRM Deployment executes to...

PT-2026-119140

Vulnerability in Oracle Autonomous Health Framework component: AHF Instant Diagnostic Replay. Supported versions that are affected are 26.3-26.8. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Autonomous Health Framework executes to...

PT-2026-119143

Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM component: Integration - Scripting. Supported versions that are affected are 17.0-26.9. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Siebel CRM Development executes...

PT-2026-118377

A security flaw has been discovered in DrayTek Vigor2960 1.5.1.6 Revision 8218. The affected element is the function cgiEscape of the file /cgi-bin/mainfunction.cgi of the component swmconfigupload. The manipulation of the argument multipart results in path traversal. It is possible to launch the...

PT-2026-118395

Name of the Vulnerable Software and Affected Versions filelock versions 3.20.4 through 4.2.0 Description The ReadWriteLock component can open a specially crafted SQLite lock database without bounding schema and query work. This allows a local user who can replace the database to cause the...

PT-2026-118393

Name of the Vulnerable Software and Affected Versions filelock versions 3.32.6 through 4.2.0 Description SoftFileLock can follow a swapped symbolic link during the conditional os.access writability check for a node without its owner-write bit. This allows a local user, on specific platform and...

PT-2026-118396

Name of the Vulnerable Software and Affected Versions filelock versions 4.0.0 through 4.2.0 Description The SoftReadWriteLock function refreshes holder records by name. This behavior allows a local user with rename access to the lock directory to replace a record with a named pipe, which can stal...

On the Vulnerabilities and Data-Free Removal of Watermarks in Batch Normalization Layers

Batch Normalization BN layers have become a common choice for embedding white-box watermarks in Federated Learning FL, providing a simple and effective mechanism for model ownership verification and participant identification. However, previous works have focused on robustness against generic mod...

CVE-2026-91484: Java CPU October 2026 Oracle Java SE vulnerability

Vulnerability in Oracle Java SE component: Java plugin. Supported versions that are affected are Oracle Java SE: 8u503 and 8u503-perf. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Java SE executes to compromise Oracle Java SE. Whi...

Oracle E-Business Suite: CVE-2026-87403: Critical Patch Update

Vulnerability in the Applications DBA product of Oracle E-Business Suite component: AD Utilities. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Applications DBA executes to compromise...

Oracle E-Business Suite: CVE-2026-87356: Critical Patch Update

Vulnerability in the Applications Platform Engineering product of Oracle E-Business Suite component: Valid Session. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Applications Platform...

Oracle E-Business Suite: CVE-2026-87295: Critical Patch Update

Vulnerability in the Oracle HRMS India product of Oracle E-Business Suite component: Indian Payroll. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle HRMS India executes to...

Oracle E-Business Suite: CVE-2026-101566: Critical Patch Update

Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite component: DB Privileges. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Application...

Oracle E-Business Suite: CVE-2026-101545: Critical Patch Update

Vulnerability in the Oracle Inventory Management product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Inventory...

Linux Distros Unpatched Vulnerability : CVE-2026-70007

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Out-of-bounds write in .NET Framework allows an unauthorized attacker to execute code over a network. CVE-2026-70007 Note that Nessus relies on the presence of...

Linux Distros Unpatched Vulnerability : CVE-2026-70161

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper limitation of a pathname to a restricted directory 'path traversal' in .NET allows an authorized attacker to elevate privileges locally. CVE-2026-70161...

PT-2026-118754

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 156.0.8078.47 Description Improper access control in ComputePressure allows a remote attacker to bypass the web origin policy, which is a security mechanism that restricts how a document or script loaded from on...