41178 matches found
Google Chrome Vulnerability: CVE-2026-113232
Memory corruption in Search in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...
Oracle Trusted Answer Search security vulnerability
Oracle Trusted Answer Search version 26.1 contains a security vulnerability stemming from issues with the PLSQL package component. This vulnerability may allow low-privilege attackers to gain unauthorized access via HTTP, resulting in unauthorized access to critical data or full access to all...
PT-2026-119192
Vulnerability in Oracle Trusted Answer Search component: Application expert UI. The supported version that is affected is 26.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Trusted Answer Search. Successful attacks require human...
Oracle Trusted Answer Search security vulnerability
Oracle Trusted Answer Search version 26.1 contains a security vulnerability stemming from issues in the Application Expert UI component. This vulnerability may allow low-privilege attackers to create, delete, or modify critical data or all accessible data via HTTP network access and user...
PT-2026-120044
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics component: BI Search. Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...
PT-2026-118313
A security flaw has been discovered in mcollina mcp-ripgrep up to 0.4.0. Affected is an unknown function of the file src/index.ts of the component Advanced Search Tool. The manipulation of the argument fileType results in os command injection. The attack requires a local approach. The exploit has...
PT-2026-119185
Vulnerability in Oracle Trusted Answer Search component: PLSQL package. The supported version that is affected is 26.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Oracle Net to compromise Oracle Trusted Answer Search. Successful attacks of this...
PT-2026-120071
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics component: BI Search. Supported versions that are affected are 8.2.0.0.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...
VulnCheck KEV: CVE-2023-34545
A SQL injection vulnerability in CSZCMS 1.3.0 allows remote attackers to run arbitrary SQL commands via p parameter or the search URL...
Siemens Software Center Uncontrolled Search Path Element Vulnerability
Siemens Software Center contains an uncontrolled search path element vulnerability that could allow an authenticated local attacker to place a specially crafted DLL in a directory that the application searches, leading to arbitrary code execution with the privileges of the affected application...
CVE-2026-112152
A security vulnerability has been detected in vraj404 Criminal-Management-System up to 2808d057e7ddc5295519a487365b0cacfd0ba8c4. Affected by this issue is the function mysqliquery of the file Officers/searchOff.php of the component Search Page. Such manipulation of the argument Search leads to sq...
Oracle Business Intelligence Enterprise Edition security vulnerabilities
Oracle Business Intelligence Enterprise Edition versions 8.2.0.0.0, 12.2.1.4.0, and 26.01.0.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the BI Search component, which may allow attackers with low privileges to gain control of Oracle Business Intelligence...
Oracle Business Intelligence Enterprise Edition security vulnerabilities
The Oracle Business Intelligence Enterprise Edition 12.2.1.4.0 version has a security vulnerability. This vulnerability stems from issues with the BI Search component, which may allow unauthenticated attackers to access through the HTTP network, potentially causing certain types of...
Oracle Business Intelligence Enterprise Edition security vulnerabilities
Oracle Business Intelligence Enterprise Edition versions 8.2.0.0.0 and 12.2.1.4.0 have security vulnerabilities. These vulnerabilities stem from issues with the BI Search component. Unauthenticated attackers can access the system via the HTTP network, and require interaction from non-attacker...
Oracle Trusted Answer Search security vulnerability
Oracle Trusted Answer Search version 26.1 contains a security vulnerability stemming from issues in the Application Expert UI component. This vulnerability may allow low-privilege attackers to access critical or all accessible data via HTTP over the network, as well as unauthorized updates,...
Oracle Trusted Answer Search security vulnerability
Oracle Trusted Answer Search version 26.1 contains a security vulnerability stemming from issues with the PLSQL package component. This vulnerability may allow attackers with low privileges and network access to create, delete, or modify critical data or all accessible data via Oracle Net without...
Oracle Trusted Answer Search security vulnerability
Version 26.1 of Oracle Trusted Answer Search contains a security vulnerability stemming from issues in the Application Expert UI component. This vulnerability may allow attackers with limited privileges to access HTTP-based networks, resulting in unauthorized access to critical data or all...
TYPO3 File Manager SQL Injection Vulnerability
Versions of the TYPO3 File Manager prior to 3.1.3 have a SQL injection vulnerability. This vulnerability arises from the file search function, which escapes LIKE wildcards only when constructing database query conditions, but does not escape quotes. Attackers can alter the database queries with...
Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities
Oracle PeopleSoft Enterprise PeopleTools versions 8.61 and 8.62 have security vulnerabilities. These vulnerabilities stem from issues with the Search Framework component. They are difficult to exploit, and it is possible for unauthenticated attackers to access critical data or all accessible data...
Google Chrome buffer error vulnerability
Google Chrome versions prior to 156.0.8078.47 contain a buffer error vulnerability. This vulnerability stems from memory corruption in the Search component, potentially allowing remote attackers to execute arbitrary code within a sandbox via specially crafted HTML pages...