CVE-2026-101375

A vulnerability exists in Oracle REST Data Services (component: Database Actions ) affecting supported versions 24.2.0-26.1.0 . A low-privileged attacker with network access via HTTP can exploit this flaw to compromise the service. Successful exploitation may lead to unauthorized read, update, in...

CVE-2026-101372

A vulnerability exists in the Oracle REST Data Services (component: Core ) affecting versions 24.2.0-26.1.0 . An unauthenticated attacker with network access via HTTP can exploit this difficulty-to-exploit vulnerability to compromise the service. Successful exploitation may lead to unauthorized r...

CVE-2026-101373

A vulnerability exists in Oracle REST Data Services (component: Core ) in supported versions 24.2.0-26.1.0 . A high-privileged attacker with network access via HTTP can compromise the service, but the attack requires human interaction from a third party. Successful exploitation can result in unau...

CVE-2026-101374

A vulnerability exists in Oracle REST Data Services (component: Backend-as-a-Service ) affecting supported versions 24.2.0-26.1.0 . An unauthenticated attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability to compromise the service. Successful exploitation may l...

CVE-2026-101370

A vulnerability exists in the Core component of Oracle REST Data Services , affecting versions 24.2.0-26.1.0 . This high-complexity vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the service, though it requires human interaction from a user other than ...

CVE-2026-101371

A vulnerability exists in the Core component of Oracle REST Data Services affecting versions 24.2.0-26.1.0 . A high privileged attacker with network access via HTTP can compromise the service, though the attack is difficult to exploit and requires human interaction from a person other than the at...

CVE-2026-101368

A vulnerability exists in the Backend-as-a-Service component of Oracle REST Data Services affecting versions 24.2.0-26.1.0 . An unauthenticated attacker with network access via HTTP can exploit this issue, although successful execution requires human interaction from a third party. The impact inc...

CVE-2026-101367

A vulnerability exists in Oracle REST Data Services (component: ADP ) affecting supported versions 24.2.0-26.1.0 . A low privileged attacker with network access via HTTP can easily exploit this flaw to compromise the service. Successful exploitation allows for unauthorized read access to a subset...

CVE-2026-101369

A vulnerability exists in the Oracle REST Data Services (component: Backend-as-a-Service ) affecting supported versions 24.2.0-26.1.0 . An unauthenticated attacker with network access via HTTP can exploit this flaw to compromise the service, requiring human interaction from a user other than the ...

CVE-2026-101364

A vulnerability exists in Oracle REST Data Services (component: Database Actions ) affecting versions 24.2.0-26.1.0 . A low-privileged attacker with network access via HTTP can exploit this flaw to compromise the service, though the attack requires human interaction from another person. Due to a ...

CVE-2026-101365

A vulnerability exists in Oracle REST Data Services (component: Database Actions ) affecting versions 24.2.0-26.1.0 . A high-privileged attacker with network access via HTTP can exploit this flaw to compromise the service. Impact includes unauthorized read, update, insert, or delete access to acc...

CVE-2026-101366

A vulnerability exists in the Oracle REST Data Services (component: ADP ) affecting supported versions 24.2.0-26.1.0 . A low-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the service. Successful exploitation results in unauthorized read access to a su...

CVE-2026-101363

A vulnerability exists in the Graph QL component of Oracle REST Data Services affecting supported versions 24.2.0-26.1.0 . An unauthenticated attacker with network access via HTTP can exploit this flaw to compromise the service, potentially resulting in unauthorized read access to a subset of acc...

CVE-2026-101361

A vulnerability exists in the Oracle REST Data Services (component: Core ) affecting supported versions 24.2.0-26.1.0 . A low-privileged attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability to compromise the service. Successful exploitation may lead to unautho...

CVE-2026-101362

A vulnerability exists in the Core component of Oracle REST Data Services (affected versions 24.2.0-26.1.0 ). An unauthenticated attacker with network access via HTTP can exploit this difficult to exploit vulnerability, though it requires human interaction from a person other than the attacker. S...

CVE-2026-101360

A vulnerability exists in the Oracle REST Data Services (component: Core ) affecting versions 24.2.0-26.1.0 . A low-privileged attacker with network access via HTTP can exploit this flaw to compromise the service, potentially gaining unauthorized read , update , insert , or delete access to some ...

CVE-2026-101359

A vulnerability exists in the Oracle REST Data Services (Core component) in versions 24.2.0-26.1.0 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability to compromise the service. Successful exploitation can lead to unauthorized update, insert, or delete access...

Important: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

certipy-merged

certipy-merged This repository contains a fork of ly4k/Certipy with many open pull requests merged, made compatible with each other, and tested to a certain degree. As this is a work in progress , some features may or may not work as expected and things might break. Installation Using pipx...

Malicious code in @platform-services/hrm-mfe-core (npm)

Source: ossf-package-analysis c7552efe145088950a0df7a5c63da92a309a040fba2062a4d32bb59cadc9ec47 The OpenSSF Package Analysis project identified '@platform-services/hrm-mfe-core' @ 99.9.1 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with...