dotnet8.0: Active Directory Federation Services (AD FS) Spoofing Vulnerability

Improper certificate validation in Active Directory Federation Services AD FS allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-91609

A vulnerability exists in the Oracle REST Data Services (component: Graph QL ) affecting supported versions 24.2.0-26.2.1 . This easily exploitable flaw allows a low-privileged attacker with network access via HTTP to compromise the service. Successful exploitation can lead to unauthorized access...

CVE-2026-91610

A vulnerability exists in Oracle REST Data Services (component: General) affecting supported versions 24.2.0-26.2.2 . A low-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the service. Successful exploitation may lead to a complete takeover of Oracle RE...

CVE-2026-91539

A vulnerability exists in the Presentation Services component of Oracle Business Intelligence Enterprise Edition (Oracle Analytics), specifically affecting version 12.2.1.4.0 . A low-privileged attacker with local access to the infrastructure can exploit this vulnerability to compromise the syste...

CVE-2026-91256

A vulnerability exists in the Services component of Oracle Solaris version 11.4 . A low-privileged attacker with network access via HTTP can exploit this flaw to compromise the system. Successful exploitation can lead to a complete Denial of Service (DoS) , characterized by a hang or frequently r...

CVE-2026-91252

A vulnerability exists in the Services component of Oracle Solaris version 11.4 . An unauthenticated attacker with network access via HTTP can easily exploit this flaw to cause a complete Denial of Service (DoS) by inducing a hang or a frequently repeatable crash. Additionally, the vulnerability ...

CVE-2026-91244

A vulnerability exists in the Services component of Oracle Solaris version 11.4 . This difficult to exploit flaw allows a low privileged attacker with logon access to the underlying infrastructure to compromise the system. Successful exploitation can result in a hang or a frequently repeatable cr...

CVE-2026-91208

A vulnerability exists in the Services component of Oracle Solaris version 11.4 . This difficult to exploit vulnerability allows an unauthenticated attacker with access to the infrastructure where Oracle Solaris executes to compromise the system. A successful attack can result in a hang or a freq...

CVE-2026-87422

A vulnerability exists in the Services component of Oracle Solaris version 11.4 . This difficult-to-exploit vulnerability allows an unauthenticated attacker with access to the underlying infrastructure to compromise the system. The attack requires human interaction from a user other than the atta...

CVE-2026-60662

A vulnerability exists in the Services component of Oracle Solaris version 11.4 . This easily exploitable flaw allows a low privileged attacker with logon access to the underlying infrastructure to compromise the system. Successful exploitation can result in a full takeover of Oracle Solaris . Mi...

CVE-2026-101795

A vulnerability exists in the Server: Components Services of MySQL Server and MySQL Cluster products by Oracle MySQL. Affected versions include MySQL Server 8.4.0-8.4.12, 9.7.0-9.7.3, and 26.7.0-26.7.1, and MySQL Cluster 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3, and 26.7.0-26.7.1. A high-privilege...

CVE-2026-101752

A vulnerability exists in the MySQL Server and MySQL Cluster products of Oracle MySQL, specifically within the Server: Components Services component. Affected versions include MySQL Server 9.7.0-9.7.3 and 26.7.0-26.7.1 , as well as MySQL Cluster 9.7.0-9.7.3 and 26.7.0-26.7.1 . A high privileged a...

USN-8944-2: ca-certificates update

USN-8944-1 updated ca-certificates. This update provides the corresponding changes for Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS by removing the "emSign ECC Root CA - G3" and "Comodo AAA Services root" CA certificates. Original advisory details: This update remove...

CVE-2026-101510

The Oracle Net Services component of Oracle Database Server is vulnerable in versions 19.3-19.32 , 21.3-21.23 , and 23.4.0-23.26.3 . A high-privileged attacker with local access can exploit this vulnerability to compromise Oracle Net Services, potentially resulting in a hang or a frequently repea...

CVE-2026-101494

A vulnerability in the Core component of Oracle REST Data Services affects supported versions 24.2.0-26.2.2 . A low-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the service. Successful exploitation may lead to unauthorized access to critical data or ...

CVE-2026-101493

A vulnerability exists in the Core component of Oracle REST Data Services affecting versions 24.2.0-26.2.1 . A low-privileged attacker with network access via HTTP can exploit this issue to gain unauthorized read , update , insert , or delete access to some of the accessible data within Oracle RE...

CVE-2026-101386

A vulnerability exists in Oracle REST Data Services (component: Core ) affecting supported versions 24.2.0-26.1.0 . A low-privileged attacker with network access via HTTP can exploit this difficult-to-exploit flaw to compromise the service. Successful exploitation may result in unauthorized read ...

CVE-2026-101385

A vulnerability exists in the Oracle REST Data Services (Core component) affecting supported versions 24.2.0-26.1.0 . A high privileged attacker with network access via HTTP can exploit this flaw to compromise the service. Successful exploitation may result in unauthorized creation, deletion, or ...

CVE-2026-101384

A vulnerability exists in the Core component of Oracle REST Data Services affecting versions 24.2.0-26.1.0 . A low-privileged attacker with network access via HTTP can exploit this to compromise the service, potentially impacting additional products due to a scope change . Successful exploitation...

CVE-2026-101382

A vulnerability exists in the Core component of Oracle REST Data Services affecting supported versions 24.2.0-26.1.0 . This high-complexity vulnerability allows a low privileged attacker with network access via HTTP to compromise the service. Successful exploitation can lead to unauthorized read ...