Oracle WebCenter Content security vulnerabilities

Oracle WebCenter Content versions 12.2.1.4.0 and 14.1.2.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the Content Server component. They may allow low-privilege attackers to access critical data or all data through HTTP network interactions, without user...

Oracle PeopleSoft Enterprise FIN General Ledger Brazil security vulnerabilities

Oracle PeopleSoft Enterprise FIN General Ledger Brazil version 9.1 contains a security vulnerability stemming from issues within the General Ledger component. This vulnerability may allow low-privilege attackers to log in and execute infrastructure tasks, thereby unauthorizedly updating, insertin...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 have security vulnerabilities. These vulnerabilities stem from issues with the Portal component. Unauthorized attackers may gain access through the HTTP network, resulting in unauthorized updates, insertions, or deletions of some...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

A security vulnerability exists in Oracle PeopleSoft Enterprise PeopleTools versions 8.61 through 8.63. This vulnerability stems from issues in the Portal component and may allow unauthenticated attackers to access it via HTTP, enabling unauthorized updates, insertions, or deletions of certain...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 have security vulnerabilities. These vulnerabilities stem from issues with the LDAP component. They may allow unauthorized attackers to access through the HTTP network, to perform unauthorized updates, insert or delete certain...

Oracle Business Intelligence Enterprise Edition security vulnerabilities

Oracle Business Intelligence Enterprise Edition 12.2.1.4.0 has a security vulnerability. This vulnerability stems from issues with the Analytics Server component, which may allow low-privilege attackers to access critical data or all accessible data through HTTP network access without proper...

Security Bulletin: IBM Guardium Data Protection is affected by a security vulnerability (CVE-2026-82891)

Summary IBM Guardium Data Protection has addressed this vulnerability in an update. Vulnerability Details CVEID:CVE-2026-82891 DESCRIPTION: IBM Guardium Data Protection could allow a remote attacker to obtain sensitive information due to use of a hard-coded cryptographic key. CWE:CWE-321: Use of...

CVE-2026-12254

The Netskope Client (NSClient) is vulnerable to a WebView Persistence issue in all versions prior to R142 . When a system connects to an access point with a Captive Portal and subsequently switches to a network with existing internet connectivity, the Captive Portal fails to close. This gap allow...

CVE-2026-12254 Netskope Client Captive Portal WebView Persistence allowing SWG bypass issue

Netskope is notified about a potential gap in its agent NSClient where a system with Netskope Client while connecting to an access point with Captive Portal switches to a Network which already has internet connectivity, the Captive Portal does not close. This allows the possibility of abuse via t...

EUVD-2026-104411

Netskope is notified about a potential gap in its agent NSClient where a system with Netskope Client while connecting to an access point with Captive Portal switches to a Network which already has internet connectivity, the Captive Portal does not close. This allows the possibility of abuse via t...

CVE-2026-112308 crewai-tools through 1.15.28 SSRF via SeleniumScrapingTool

crewai-tools through 1.15.28 contains a server-side request forgery vulnerability in SeleniumScrapingTool that allows attackers to fetch internal resources because it never applies the validateurl private-address check. Attackers influencing agent tool input through prompt injection can direct...

EUVD-2026-104400

crewai-tools through 1.15.28 contains a server-side request forgery vulnerability in SeleniumScrapingTool that allows attackers to fetch internal resources because it never applies the validateurl private-address check. Attackers influencing agent tool input through prompt injection can direct...

CVE-2026-112308

The crewai-tools library (through version 1.15.28 ) contains a Server-Side Request Forgery (SSRF) vulnerability within the SeleniumScrapingTool . The root cause is a failure to apply the validate_url private-address check, allowing attackers who can influence agent tool input via prompt injection...

CVE-2026-112308

crewai-tools through 1.15.28 contains a server-side request forgery vulnerability in SeleniumScrapingTool that allows attackers to fetch internal resources because it never applies the validateurl private-address check. Attackers influencing agent tool input through prompt injection can direct...

CVE-2026-86375

Dell Application Installer, versions prior to 26.09.0.1, contain a Missing Encryption of Sensitive Data vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Unauthorized access...

EUVD-2026-104389

Dell Application Installer, versions prior to 26.09.0.1, contain a Missing Encryption of Sensitive Data vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Unauthorized access...

CVE-2026-86375

Dell Application Installer , versions prior to 26.09.0.1 , contains a Missing Encryption of Sensitive Data vulnerability (CWE-311). An unauthenticated attacker with local access could potentially exploit this flaw to gain Unauthorized access to sensitive information. Remediation is available via ...

CVE-2026-86375

Dell Application Installer, versions prior to 26.09.0.1, contain a Missing Encryption of Sensitive Data vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Unauthorized access...

CLSA-2026-1792421347 TuxCare security update for org.springframework.data:spring-data-keyvalue (1 CVE)

TuxCare rebuilt org.springframework.data:spring-data-keyvalue to address 1 CVE. Fixed in 2.7.16-tuxcare.3...

CVE-2026-112284

libaribcaption 1.1.0 through 1.1.2 contains a global out-of-bounds read in DecoderImpl::HandleGLGR that reads past the 78-entry kLatinSpecialTable without an upper bound check. Attackers can supply crafted captions designating the Latin special set with ESC 28 4C followed by bytes 0x6F-0x7E to le...