python: python: Arbitrary file deletion via race condition during temporary directory cleanup

A flaw was found in Python. A race condition during the cleanup of temporary directories allows a local attacker with write access to replace a directory with a symbolic link a reference pointing to another location. This can lead to unauthorized deletion or alteration of files outside the...

CVE-2026-112190 Webkul Aureus ERP composer.json insertion of sensitive information into debugging code

A security vulnerability has been detected in Webkul Aureus ERP up to 1.6.0. This issue affects some unknown processing of the file composer.json. Such manipulation leads to insertion of sensitive information into debugging code. The attack may be launched remotely. The exploit has been disclosed...

EUVD-2026-104456

A security vulnerability has been detected in Webkul Aureus ERP up to 1.6.0. This issue affects some unknown processing of the file composer.json. Such manipulation leads to insertion of sensitive information into debugging code. The attack may be launched remotely. The exploit has been disclosed...

CVE-2026-112190

A security vulnerability exists in Webkul Aureus ERP up to version 1.6.0 . The issue stems from unknown processing of the composer.json file, which can be manipulated to insert sensitive information into debugging code. This vulnerability can be exploited remotely , and the exploit has been discl...

CVE-2026-112190 Webkul Aureus ERP composer.json insertion of sensitive information into debugging code

A security vulnerability has been detected in Webkul Aureus ERP up to 1.6.0. This issue affects some unknown processing of the file composer.json. Such manipulation leads to insertion of sensitive information into debugging code. The attack may be launched remotely. The exploit has been disclosed...

Oracle MySQL Server security vulnerabilities

Security vulnerabilities exist in Oracle MySQL Server versions 8.4.0 to 8.4.12, 9.7.0 to 9.7.3, and 26.7.0 to 26.7.1, as well as in Oracle MySQL Cluster versions 8.0.0 to 8.0.49, 8.4.0 to 8.4.12, 9.7.0 to 9.7.3, and 26.7.0 to 26.7.1. These vulnerabilities stem from issues with the Server: Optimiz...

Google Chrome buffer error vulnerability

Google Chrome versions prior to 156.0.8078.47 have a buffer error vulnerability. This vulnerability stems from memory corruption in WebAppInstalls, which may allow remote attackers to read memory within a sandbox through a specially crafted HTML page...

Oracle GoldenGate security vulnerabilities

A security vulnerability exists in Oracle GoldenGate versions 21.3 through 21.23. This vulnerability stems from issues within the Vendor Access Module component and may allow low-privilege attackers to log in to Oracle GoldenGate Infrastructure, thereby gaining unauthorized access to critical dat...

Google Chrome resource management error vulnerability

Google Chrome versions prior to 156.0.8078.47 contain a resource management error vulnerability. This vulnerability stems from use-after-free issues in ContextualSearch; remote attackers can exploit it by sending specially crafted HTML pages to execute arbitrary code within a sandbox...

Oracle PeopleSoft Enterprise FIN Manufacturing Brazil security vulnerabilities

The Oracle PeopleSoft Enterprise FIN Manufacturing Brazil 9.1 version has a security vulnerability. This vulnerability stems from issues with the Integration component. It could allow low-privilege attackers to exploit the vulnerability by logging in as the user who operates the infrastructure on...

Oracle MySQL Server security vulnerabilities

Oracle MySQL Server, versions 9.7.0 to 9.7.3 and 26.7.0 to 26.7.1 have security vulnerabilities. These vulnerabilities stem from issues with the Server: GIS component. They may allow high-privilege attackers to access the system via various protocols, causing the MySQL Server and MySQL Cluster...

Oracle Product Lifecycle Analytics security vulnerability

Version 3.6.1 of Oracle Product Lifecycle Analytics contains a security vulnerability stemming from issues within the Installation Issues component. This vulnerability may allow privileged attackers to log in and execute infrastructure tasks, thereby unauthorizedly creating, deleting, or modifyin...

Google Chrome buffer error vulnerability

Google Chrome versions prior to 156.0.8078.47 contain a buffer error vulnerability. This vulnerability stems from memory corruption in CacheStorage, which may allow remote attackers to read memory within the sandbox via specially crafted HTML pages...

tox-dev filelock backend link vulnerability

The tox-dev filelock version 3.20.4 to 4.0.9 contains security vulnerabilities. These vulnerabilities stem from the way ReadWriteLock and AsyncReadWriteLock handle lock paths, which allow them to pass the final symbolic link to SQLite without being rejected. This may lead to other local users...

Google Chrome permission and access control issue vulnerability

Versions of Google Chrome prior to 156.0.8078.47 contain a vulnerability related to permission escalation and access control. This issue stems from improper access control within ComputePressure; remote attackers can exploit it by using specially crafted HTML pages to bypass web source policies...

Google Chrome buffer error vulnerability

Google Chrome versions prior to 156.0.8078.47 contain a buffer error vulnerability. This vulnerability stems from memory corruption in DevTools, potentially allowing remote attackers to read memory within a sandbox via specially crafted HTML pages...

Google Chrome buffer error vulnerability

Google Chrome versions prior to 156.0.8078.47 contain a buffer error vulnerability. This vulnerability stems from memory corruption in V8, which may allow remote attackers to read memory within the sandbox via specially crafted HTML pages...

ASUS Armoury Crate permissions and access control issues

ASUS Armoury Crate V3.0.0 version to V6.5.10 and ASUS Armoury Crate SE V2.1.17 version to V2.2.17 have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from uncontrolled search path elements. Local users can execute arbitrary code by replacing the...

Oracle MySQL Server security vulnerabilities

Security vulnerabilities exist in Oracle MySQL Server versions 8.4.0 to 8.4.12, 9.7.0 to 9.7.3, and 26.7.0 to 26.7.1, as well as in Oracle MySQL Cluster versions 8.0.0 to 8.0.49, 8.4.0 to 8.4.12, 9.7.0 to 9.7.3, and 26.7.0 to 26.7.1. These vulnerabilities stem from issues with the Server:...

Oracle Solaris security vulnerabilities

Oracle Solaris 11.4 has security vulnerabilities, which stem from issues with the Plugins component. These vulnerabilities could allow high-privilege attackers to log in and execute actions on the infrastructure, requiring user interaction. This could result in unauthorized creation, deletion, or...