401396 matches found
CVE-2026-101369
A vulnerability exists in the Oracle REST Data Services (component: Backend-as-a-Service ) affecting supported versions 24.2.0-26.1.0 . An unauthenticated attacker with network access via HTTP can exploit this flaw to compromise the service, requiring human interaction from a user other than the ...
CVE-2026-101368
A vulnerability exists in the Backend-as-a-Service component of Oracle REST Data Services affecting versions 24.2.0-26.1.0 . An unauthenticated attacker with network access via HTTP can exploit this issue, although successful execution requires human interaction from a third party. The impact inc...
CVE-2026-101365
A vulnerability exists in Oracle REST Data Services (component: Database Actions ) affecting versions 24.2.0-26.1.0 . A high-privileged attacker with network access via HTTP can exploit this flaw to compromise the service. Impact includes unauthorized read, update, insert, or delete access to acc...
CVE-2026-101366
A vulnerability exists in the Oracle REST Data Services (component: ADP ) affecting supported versions 24.2.0-26.1.0 . A low-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the service. Successful exploitation results in unauthorized read access to a su...
CVE-2026-101364
A vulnerability exists in Oracle REST Data Services (component: Database Actions ) affecting versions 24.2.0-26.1.0 . A low-privileged attacker with network access via HTTP can exploit this flaw to compromise the service, though the attack requires human interaction from another person. Due to a ...
CVE-2026-101362
A vulnerability exists in the Core component of Oracle REST Data Services (affected versions 24.2.0-26.1.0 ). An unauthenticated attacker with network access via HTTP can exploit this difficult to exploit vulnerability, though it requires human interaction from a person other than the attacker. S...
CVE-2026-101363
A vulnerability exists in the Graph QL component of Oracle REST Data Services affecting supported versions 24.2.0-26.1.0 . An unauthenticated attacker with network access via HTTP can exploit this flaw to compromise the service, potentially resulting in unauthorized read access to a subset of acc...
CVE-2026-101361
A vulnerability exists in the Oracle REST Data Services (component: Core ) affecting supported versions 24.2.0-26.1.0 . A low-privileged attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability to compromise the service. Successful exploitation may lead to unautho...
CVE-2026-101360
A vulnerability exists in the Oracle REST Data Services (component: Core ) affecting versions 24.2.0-26.1.0 . A low-privileged attacker with network access via HTTP can exploit this flaw to compromise the service, potentially gaining unauthorized read , update , insert , or delete access to some ...
CVE-2026-101359
A vulnerability exists in the Oracle REST Data Services (Core component) in versions 24.2.0-26.1.0 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability to compromise the service. Successful exploitation can lead to unauthorized update, insert, or delete access...
DEBIAN-CVE-2026-92389
libcurl's TFTP state machine fails to validate state transitions against the requested transfer direction, accepting opening server responses for both reads and writes interchangeably. A malicious TFTP server can respond to a download request in a way that forces the client into transmit mode,...
AZL-110013 CVE-2026-92389 affecting package mysql 8.0.46-2
libcurl's TFTP state machine fails to validate state transitions against the requested transfer direction, accepting opening server responses for both reads and writes interchangeably. A malicious TFTP server can respond to a download request in a way that forces the client into transmit mode,...
AZL-110235 CVE-2026-92389 affecting package rust 1.96.1-2
libcurl's TFTP state machine fails to validate state transitions against the requested transfer direction, accepting opening server responses for both reads and writes interchangeably. A malicious TFTP server can respond to a download request in a way that forces the client into transmit mode,...
CVE-2026-92389
libcurl's TFTP state machine fails to validate state transitions against the requested transfer direction, accepting opening server responses for both reads and writes interchangeably. A malicious TFTP server can respond to a download request in a way that forces the client into transmit mode,...
ALPINE-CVE-2026-92389
libcurl's TFTP state machine fails to validate state transitions against the requested transfer direction, accepting opening server responses for both reads and writes interchangeably. A malicious TFTP server can respond to a download request in a way that forces the client into transmit mode,...
AZL-110301 CVE-2026-92389 affecting package tensorflow 2.16.1-11
libcurl's TFTP state machine fails to validate state transitions against the requested transfer direction, accepting opening server responses for both reads and writes interchangeably. A malicious TFTP server can respond to a download request in a way that forces the client into transmit mode,...
AZL-110190 CVE-2026-92389 affecting package rust 1.75.0-31
libcurl's TFTP state machine fails to validate state transitions against the requested transfer direction, accepting opening server responses for both reads and writes interchangeably. A malicious TFTP server can respond to a download request in a way that forces the client into transmit mode,...
AZL-109929 CVE-2026-92389 affecting package cmake 3.30.3-15
libcurl's TFTP state machine fails to validate state transitions against the requested transfer direction, accepting opening server responses for both reads and writes interchangeably. A malicious TFTP server can respond to a download request in a way that forces the client into transmit mode,...
AZL-109950 CVE-2026-92389 affecting package curl 8.11.1-12
libcurl's TFTP state machine fails to validate state transitions against the requested transfer direction, accepting opening server responses for both reads and writes interchangeably. A malicious TFTP server can respond to a download request in a way that forces the client into transmit mode,...
AZL-109986 CVE-2026-87863 affecting package curl 8.11.1-12
An authenticated HTTPS origin can supply an HSTS max-age value that the parser accepts, but time serialization later fails to process. On 64-bit systems, extreme max-age values compute an absolute expiry within standard time integer limits that exceeds calendar time structure bounds. During cache...