EUVD-2026-105915

Vulnerability in the Oracle Global Lifecycle Management OPatchAuto product of Oracle Global Lifecycle Management component: Database extensions. Supported versions that are affected are 12.2.0.1.16-12.2.0.1.52. Easily exploitable vulnerability allows high privileged attacker with logon to the...

CVE-2026-101500

Vulnerability in the Oracle Global Lifecycle Management OPatchAuto product of Oracle Global Lifecycle Management component: Database extensions. Supported versions that are affected are 12.2.0.1.16-12.2.0.1.52. Easily exploitable vulnerability allows high privileged attacker with logon to the...

CVE-2026-101500

A vulnerability exists in the Oracle Global Lifecycle Management OPatchAuto product (component: Database extensions ), specifically affecting supported versions 12.2.0.1.16-12.2.0.1.52 . A high-privileged attacker with access to the infrastructure where OPatchAuto executes can compromise the prod...

PT-2026-119187

Name of the Vulnerable Software and Affected Versions Oracle Global Lifecycle Management OPatchAuto versions 12.2.0.1.16 through 12.2.0.1.52 Description An issue exists in the Database extensions component of the Oracle Global Lifecycle Management OPatchAuto product. A high privileged attacker wi...

Oracle Global Lifecycle Management OPatchAuto security vulnerability

The Oracle Global Lifecycle Management OPatchAuto version 12.2.0.1.16 to 12.2.0.1.52 contains security vulnerabilities. These vulnerabilities stem from issues with the Database extensions component. They may allow attackers with high privileges to log in and execute infrastructure tasks, thereby...

CVE-2026-92938

A flaw was found in vm2. Untrusted code running within the sandbox environment can bypass isolation restrictions when the host SQLite module is accessible. By crafting module import requests and loading native database extensions, an attacker can escape the sandbox and achieve arbitrary code...

Arbitrary Code Execution

org.openrefine, database is vulnerable to Arbitrary Code Execution. The vulnerability is due to improper configuration in the database extension of OpenRefine, specifically the enableloadextension property that permits loading local or remote extension DLLs...

Possibility of manipulated condition when unfiltered input is passed to `yii\elasticsearch\ActiveRecord::findOne()` and `::findAll()`

More info at https://www.yiiframework.com/news/168/releasing-yii-2-0-15-and-database-extensions-with-security-fixes/...

Potential SQL injection in methods `yii\db\ActiveRecord::findOne()` and `::findAll()`

More info at https://www.yiiframework.com/news/168/releasing-yii-2-0-15-and-database-extensions-with-security-fixes/...