CVE-2025-60494

The GPAC Project/MP4Box software, versions before 2.5 , is vulnerable to a segmentation violation in the gf_props_equal_internal function located in /filter_core/filter_props.c. An attacker can exploit this flaw by supplying a crafted data file to cause a Denial of Service (DoS) . The vulnerabili...

Oracle SOA Suite security vulnerabilities

Oracle SOA Suite versions 12.2.1.4.0 and 14.1.2.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the Fabric Layer component. They may allow low-privilege attackers to access critical data or all accessible data via the HTTP network, as well as to update, insert, or...

Oracle REST Data Services security vulnerabilities

Oracle REST Data Services versions 24.2.0 to 26.1.0 have security vulnerabilities. These vulnerabilities stem from issues with the Database Actions component. They may allow low-privilege attackers to access through the HTTP network, enabling them to update, insert, or delete certain data without...

Oracle HTTP Server security vulnerabilities

Oracle HTTP Server versions 12.2.1.4.0 and 14.1.2.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the Oracle WebLogic Server Proxy Plug-in for Oracle HTTP Server component. Unauthorized attackers may access other products via the HTTP network, resulting in...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 have security vulnerabilities. These vulnerabilities stem from issues with the Test Framework component. Attackers with low privileges can access data through the HTTP network, requiring user interaction. This may lead to unauthorized...

Oracle Siebel Life Sciences security vulnerability

A security vulnerability exists in Oracle Siebel Life Sciences versions 17.0 through 26.9. This vulnerability stems from issues within the Web UI component. Attackers with relatively low privileges can access this component over the network; however, interaction requires non-attacker involvement...

Oracle REST Data Services security vulnerabilities

A security vulnerability exists in Oracle REST Data Services versions 24.2.0 through 26.1.0. This vulnerability stems from issues within the Core component and may allow low-privilege attackers to access certain accessible data via HTTP. They can then make unauthorized updates, insert, or delete...

PT-2026-119150

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM component: Server Infrastructure. Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Siebel CRM Deployment executes to...

PT-2026-133844

TuxCare rebuilt org.springframework.data:spring-data-keyvalue to address 1 CVE. Fixed in 2.6.10-tuxcare.3...

PT-2026-119953

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM component: Server Infrastructure. Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Siebel CRM Deployment executes to...

Oracle MySQL Vulnerability CVE-2026-101774

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Pluggable Auth. Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. Difficult to explo...

PT-2026-119569

Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, and 27 Oracle GraalVM for JDK versions 17.0.20.1 and 21.0.12.1 Oracle GraalVM Enterprise Edition version 21.3.19.1.1 Description An issue in the Security...

Azul Zulu: CVE-2026-83374: Vulnerability in Azul Zulu

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Security. Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20....

PT-2026-119240

Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite component: Approvals. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Purchasing. Successful attack...

Oracle MySQL Vulnerability CVE-2026-101775

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Replication. Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. Difficult to exploit...

PT-2026-119264

Vulnerability in the Helidon product of Oracle Fusion Middleware component: helidon-webclient-websocket. Supported versions that are affected are 4.0.0-4.5.5 and 27.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful...

PT-2026-119657

Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM component: EAI. Supported versions that are affected are 17.0-26.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM Integration. Successful attacks...

PT-2026-119519

Vulnerability in the Installed Base product of Oracle E-Business Suite component: Data Provider UI. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Installed Base. Successful attack...

PT-2026-119069

Vulnerability in Oracle REST Data Services component: ADP. Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle REST Data Services. Successful attacks of this vulnerability can...

On the Vulnerabilities and Data-Free Removal of Watermarks in Batch Normalization Layers

Batch Normalization BN layers have become a common choice for embedding white-box watermarks in Federated Learning FL, providing a simple and effective mechanism for model ownership verification and participant identification. However, previous works have focused on robustness against generic mod...