WordPress TS Poll < 2.4.0 - SQL Injection

WordPress TS Poll plugin 2.4.0 contains a SQL injection caused by lack of sanitization and escaping of a parameter before using it in a SQL statement, letting attackers perform SQL injection attacks, exploit requires admin privileges. id: CVE-2024-8625 info: name: WordPress TS Poll 2.4.0 - SQL...

CVE-2026-17066

IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information and modify or delete data belonging to other tenants due to missing authorization...

CVE-2026-17066

IBM API Connect versions 12.1.0.0 through 12.1.1.2 are susceptible to multiple vulnerabilities caused by missing authorization . A remote authenticated attacker could exploit these flaws to obtain sensitive information and modify or delete data belonging to other tenants. The issue is associated ...

CVE-2026-17066 Multiple Vulnerabilities in IBM API Connect

IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information and modify or delete data belonging to other tenants due to missing authorization...

CVE-2026-88034

A flaw was found in the MongoDB C++ Driver. This flaw, located in the GridFS component, allows an authenticated user to perform query-operator injection by influencing file identifiers. This can lead to unauthorized access to stored file content or the deletion of all GridFS file chunks, making...

CVE-2026-88023

A flaw was found in the GridFS component of the MongoDB PHP Library. This vulnerability allows an authenticated user to inject special elements into file identifiers, causing them to be interpreted as query conditions. This can lead to unauthorized access to stored file content, the deletion of a...

CVE-2026-118668

A flaw was found in langgraph-api. In deployments using JavaScript or TypeScript custom authorization handlers, rewritten storage namespaces intended to isolate tenant data are not properly enforced across the runtime boundary before storage operations execute. An authenticated remote attacker ca...

openjdk: Improve Pack200 handling (Oracle CPU 2026-10)

A flaw was found in the Utility component of OpenJDK. An unauthenticated remote attacker can exploit this vulnerability by supplying untrusted data to component APIs over the network. A successful attack can allow unauthorized modification or deletion of accessible data and cause a partial Denial...

openjdk: Enhance TLS certificate handling (Oracle CPU 2026-10)

A flaw was found in the Java Secure Socket Extension JSSE component of OpenJDK. An unauthenticated remote attacker could exploit this vulnerability over a Transport Layer Security TLS connection to perform unauthorized modification, insertion, or deletion of accessible data. Exploitation occurs...

openjdk: Improve Pack200 handling (Oracle CPU 2026-10)

A flaw was found in the Utility component of OpenJDK. An unauthenticated remote attacker can exploit this vulnerability by supplying untrusted data to component APIs over the network. A successful attack can allow unauthorized modification or deletion of accessible data and cause a partial Denial...

openjdk: Enhance Pack200 unpacking (Oracle CPU 2026-10)

A flaw was found in the Utility component of Java SE and GraalVM. An unauthenticated remote attacker with network access could exploit this vulnerability by submitting crafted data to exposed application programming interfaces APIs. A successful attack allows unauthorized modification or deletion...

openjdk: Improve Pack200 handling (Oracle CPU 2026-10)

A flaw was found in the Utility component of OpenJDK. An unauthenticated remote attacker can exploit this vulnerability by supplying untrusted data to component APIs over the network. A successful attack can allow unauthorized modification or deletion of accessible data and cause a partial Denial...

openjdk: Enhance PKCS5 padding (Oracle CPU 2026-10)

A flaw was found in OpenJDK. An unauthenticated remote attacker could exploit this vulnerability by sending crafted requests across network protocols to exposed application programming interfaces APIs within the Security component. A successful attack can result in unauthorized modification,...

Important: Red Hat Security Advisory: Red Hat build of Cryostat security update

An update is now available for the Red Hat build of Cryostat 4 on RHEL 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fro...

CVE-2026-101806

A flaw was found in mysql-connector-odbc. Under specific conditions, a low-privileged attacker with network access can exploit this vulnerability to compromise database connections. Successful exploitation allows an attacker to gain unauthorized read, modification, or deletion access to sensitive...

openjdk: Enhance diagnostic sessions (Oracle CPU 2026-10)

A flaw was found in OpenJDK's Serviceability component. An unauthenticated attacker with local access to the host system can exploit this vulnerability with user interaction, such as by supplying crafted input to Serviceability application programming interfaces APIs. A successful attack can resu...

openjdk: Enhance PKCS5 padding (Oracle CPU 2026-10)

A flaw was found in OpenJDK. An unauthenticated remote attacker could exploit this vulnerability by sending crafted requests across network protocols to exposed application programming interfaces APIs within the Security component. A successful attack can result in unauthorized modification,...

openjdk: Enhance diagnostic sessions (Oracle CPU 2026-10)

A flaw was found in OpenJDK's Serviceability component. An unauthenticated attacker with local access to the host system can exploit this vulnerability with user interaction, such as by supplying crafted input to Serviceability application programming interfaces APIs. A successful attack can resu...

openjdk: Enhance diagnostic sessions (Oracle CPU 2026-10)

A flaw was found in OpenJDK's Serviceability component. An unauthenticated attacker with local access to the host system can exploit this vulnerability with user interaction, such as by supplying crafted input to Serviceability application programming interfaces APIs. A successful attack can resu...

openjdk: Enhance HTTP Client Response Handling (Oracle CPU 2026-10)

A flaw was found in OpenJDK. An unauthenticated remote attacker with network access could exploit this vulnerability by submitting crafted data to networking application programming interfaces APIs. A successful attack could allow unauthorized modification or deletion of accessible data, or resul...