CVE-2026-98584

A flaw was found in the Linux kernel's network traffic control subsystem. A local user can exploit this vulnerability to cause an information disclosure of kernel stack data. When dumping text search filter configurations, the kernel fails to initialize a stack structure before copying it into...

CVE-2026-102438

An uncontrolled search path element vulnerability in ASUS Armoury Crate allows local users to execute arbitrary code with SYSTEM privileges via replacement of a dynamic-link library DLL that is later loaded by a high-privilege process. Refer to the ' Security Update for Armoury Crate App ' sectio...

CVE-2026-102438

The ASUS Armoury Crate application is susceptible to an uncontrolled search path element vulnerability (CWE-427). This flaw allows local users to execute arbitrary code with SYSTEM privileges by replacing a dynamic-link library (DLL) that is subsequently loaded by a high-privilege process. Remedi...

CVE-2026-102438

An uncontrolled search path element vulnerability in ASUS Armoury Crate allows local users to execute arbitrary code with SYSTEM privileges via replacement of a dynamic-link library DLL that is later loaded by a high-privilege process. Refer to the ' Security Update for Armoury Crate App ' sectio...

CVE-2026-102438

An uncontrolled search path element vulnerability in ASUS Armoury Crate allows local users to execute arbitrary code with SYSTEM privileges via replacement of a dynamic-link library DLL that is later loaded by a high-privilege process. Refer to the ' Security Update for Armoury Crate App ' sectio...

PT-2026-119191

Vulnerability in Oracle Trusted Answer Search component: Application expert UI. The supported version that is affected is 26.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Trusted Answer Search. Successful attacks require human...

PT-2026-119188

Vulnerability in Oracle Trusted Answer Search component: PLSQL package. The supported version that is affected is 26.1. Easily exploitable vulnerability allows low privileged attacker with network access via Oracle Net to compromise Oracle Trusted Answer Search. While the vulnerability is in Orac...

PT-2026-119548

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Search Framework. Supported versions that are affected are 8.61 and 8.62. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment attached to...

PT-2026-119194

Vulnerability in Oracle Trusted Answer Search component: PLSQL package. The supported version that is affected is 26.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Trusted Answer Search. Successful attacks of this vulnerability...

PT-2026-118929

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 156.0.8078.47 Description Memory corruption in the Search component allows a remote attacker to potentially execute arbitrary code inside the sandbox when a user opens a crafted HTML page. Recommendations Update...

PT-2026-120070

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics component: BI Search. The supported version that is affected is 12.2.1.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Busines...

PT-2026-119189

Vulnerability in Oracle Trusted Answer Search component: PLSQL package. The supported version that is affected is 26.1. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Trusted Answer Search executes to compromise Oracle Trusted Answe...

Oracle Trusted Answer Search security vulnerability

Oracle Trusted Answer Search version 26.1 contains a security vulnerability stemming from issues with the PLSQL package component. Exploited by attackers with low privileges, this vulnerability allows them to log in and execute infrastructure tasks requiring user interaction. It may lead to...

CAESAR: Mixed Reality Search-And-Rescue Platform for Cognitive Attack Evaluation

Mixed Reality MR enables immersive training by tightly coupling virtual content with the physical environment and supporting embodied interaction. In safety-critical collaborative tasks such as search-and-rescue, however, users rely heavily on virtual elements for perception, coordination, and...

PT-2026-118095

Name of the Vulnerable Software and Affected Versions ASUS Armoury Crate affected versions not specified Description An uncontrolled search path element issue allows local users to execute arbitrary code with SYSTEM privileges. This occurs through the replacement of a dynamic-link library DLL,...

PT-2026-119545

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Search Framework. The supported version that is affected is 8.62. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise...

PT-2026-118450

Name of the Vulnerable Software and Affected Versions ApostropheCMS versions prior to 4.34.0 Description A public REST API type utilizing publicApiProjection allows the exposure of excluded searchable or sortable field information. This occurs through search membership and sort ordering oracles,...

PT-2026-119190

Vulnerability in Oracle Trusted Answer Search component: PLSQL package. The supported version that is affected is 26.1. Easily exploitable vulnerability allows low privileged attacker with network access via Oracle Net to compromise Oracle Trusted Answer Search. While the vulnerability is in Orac...

PT-2026-118310

The file search of the extension builds its database conditions by wrapping the search term in quotes itself. Only the wildcard characters of the LIKE operator are escaped, quote characters are not. A crafted search term can therefore leave the intended string value and change the database query...

PT-2026-119193

Vulnerability in Oracle Trusted Answer Search component: Application expert UI. The supported version that is affected is 26.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Trusted Answer Search. While the vulnerability is in...