EUVD-2026-105916

Vulnerability in Oracle Trusted Answer Search component: PLSQL package. The supported version that is affected is 26.1. Easily exploitable vulnerability allows low privileged attacker with network access via Oracle Net to compromise Oracle Trusted Answer Search. While the vulnerability is in Orac...

PT-2026-120856

Name of the Vulnerable Software and Affected Versions Splunk Enterprise versions prior to 10.4.4 Splunk Enterprise versions prior to 10.2.8 Description A user without admin or power roles can derive the PostgreSQL sidecar database superuser password. This occurs because the PostgreSQL sidecar...

WordPress Ajax Search Lite SQL injection vulnerability

WordPress Ajax Search Lite versions 4.14.6 and earlier contain an SQL injection vulnerability. This vulnerability stems from improper handling of special elements within SQL commands, potentially leading to blind SQL injection...

PT-2026-120849

Name of the Vulnerable Software and Affected Versions Splunk Enterprise versions prior to 10.4.4 Splunk Enterprise versions prior to 10.2.8 Splunk Enterprise versions prior to 10.0.11 Splunk Enterprise versions prior to 9.4.16 Description A user with a role possessing the schedule search capabili...

PT-2026-120740

A weakness has been identified in ProjectWorlds Advanced Library Management System 1.0. This affects the function mysqli query of the file returned book search.php of the component Search Form. Executing a manipulation of the argument datefrom/dateto can lead to sql injection. The attack can be...

Linux Distros Unpatched Vulnerability : CVE-2026-113232

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Memory corruption in Search in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a...

PT-2026-120622

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WPdreams Ajax Search Lite ajax-search-lite allows Blind SQL Injection.This issue affects Ajax Search Lite: from n/a through 4.14.6...

PT-2026-120583

Trudesk through 1.2.11 contains a server-side JavaScript injection vulnerability that allows authenticated users to inject code into a MongoDB $where clause via the search parameter. Attackers can close the regular expression in GET /api/v1/tickets/search to loop mongod for denial of service or...

PT-2026-120855

In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, an unauthenticated user could trick a user that holds a role with the edit federated providers capability into turning off all federated search providers. Successful exploitation could temporarily prevent federated searches...

CVE-2026-91582

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics component: BI Search. The supported version that is affected is 12.2.1.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Busines...

CVE-2026-91588

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics component: BI Search. Supported versions that are affected are 8.2.0.0.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2026-91535

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics component: BI Search. Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

CVE-2026-60882

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Search Framework. Supported versions that are affected are 8.61 and 8.62. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment attached to...

CVE-2026-60876

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Search Framework. The supported version that is affected is 8.62. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise...

DEBIAN-CVE-2026-113232

Memory corruption in Search in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113232

Memory corruption in Search in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-101507

Vulnerability in Oracle Trusted Answer Search component: PLSQL package. The supported version that is affected is 26.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Trusted Answer Search. Successful attacks of this vulnerability...

CVE-2026-101506

Vulnerability in Oracle Trusted Answer Search component: Application expert UI. The supported version that is affected is 26.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Trusted Answer Search. While the vulnerability is in...

CVE-2026-101504

Vulnerability in Oracle Trusted Answer Search component: Application expert UI. The supported version that is affected is 26.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Trusted Answer Search. Successful attacks require human...

CVE-2026-101501

Vulnerability in Oracle Trusted Answer Search component: PLSQL package. The supported version that is affected is 26.1. Easily exploitable vulnerability allows low privileged attacker with network access via Oracle Net to compromise Oracle Trusted Answer Search. While the vulnerability is in Orac...