CVE-2026-31192

Insufficient validation of Chrome extension identifiers in Raindrop.io Bookmark Manager Web App 5.6.76.0 allows attackers to obtain sensitive user data via a crafted request...

PT-2026-34409

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the packet release function where a NETDEV UP event can re-register a socket into a fanout group's arr array. Because packet release does not zero the po-num...

Unity Linux 20.1050e / 20.1060e Security Update: kernel (UTSA-2026-013401)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013401 advisory. In the Linux kernel, the following vulnerability has been resolved: r8169: Fix possible ring buffer corruption on fragmented Tx packets. An issue was found on the...

WordPress plugin Fast & Fancy Filter – 3F 跨站请求伪造漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

PT-2026-34362

In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs: check contexts-nr in repeat call fn damon sysfs repeat call fn calls damon sysfs upd tuned intervals, damon sysfs upd schemes stats, and damon sysfs upd schemes effective quotas without checking contexts-nr. If nr...

CVE-2026-35244

...

CVE-2026-35241

...

CVE-2026-34323

The CVE affects Oracle Life Sciences InForm (IDM Authentication) in Oracle Life Sciences Applications, with affected versions 7.0.1.0 and 7.0.1.1. It is exploitable over HTTP by an unauthenticated network attacker and requires user interaction for a successful attack. Impact includes unauthorized...

CVE-2026-34314

...

CVE-2026-34314

Oracle Financial Services Analytical Applications Infrastructure (OFSAAI), specifically the Platform component, is affected in versions 8.0.7.9, 8.0.8.7, and 8.1.2.5. The vulnerability allows a low-privilege, unauthenticated attacker with network access via HTTP to cause unauthorized creation, de...

CVE-2026-34312

...

CVE-2026-34310

...

CVE-2026-34307

...

CVE-2026-34303

CVE-2026-34303 affects Oracle MySQL Server (component: Server: Optimizer). Affected versions are MySQL 8.0.0–8.0.45, 8.4.0–8.4.8, and 9.0.0–9.6.0. The vulnerability allows a low-privileged attacker with network access via multiple protocols to cause a hang or a frequently repeatable crash (comple...

CVE-2026-34299

...

CVE-2026-34296

CVE-2026-34296 affects Oracle Agile Product Lifecycle Management for Process (Product Quality Management) in version 6.2.4. The vulnerability, exploitable by a low-privileged user with network access over HTTP, can lead to unauthorized read access to a subset of data. The provided documents speci...

CVE-2026-34285

...

CVE-2026-34275

...

CVE-2026-34274

A vulnerability (CVE-2026-34274) affects Oracle Configurator in Oracle E-Business Suite, specifically the UI component, for versions 12.2.3–12.2.15. The issue allows an unauthenticated attacker with network access over HTTP to compromise Oracle Configurator, with user interaction required. The im...

CVE-2026-22011

The CVE-2026-22011 entry describes a vulnerability in Oracle Applications DBA (ADPatch) within Oracle E-Business Suite, affecting 12.2.3 through 12.2.15. The vulnerability can be exploited by a network-accessible attacker over HTTP and requires user interaction; it enables takeover of Oracle Appl...