10937 matches found
CVE-2026-101498
Vulnerability in Oracle Trusted Answer Search component: PLSQL package. The supported version that is affected is 26.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Oracle Net to compromise Oracle Trusted Answer Search. Successful attacks of this...
CVE-2026-101506
A vulnerability exists in Oracle Trusted Answer Search affecting version 26.1 within the Application expert UI component. This easily exploitable flaw allows a low-privileged attacker with network access via HTTP to compromise the system. Successful exploitation can lead to unauthorized access to...
CVE-2026-101507
A vulnerability exists in the PLSQL package component of Oracle Trusted Answer Search version 26.1 . A low-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the system. Successful exploitation may lead to unauthorized access to critical data or provide co...
CVE-2026-101505
A vulnerability exists in the Oracle Trusted Answer Search (specifically the Application expert UI component) in version 26.1 . A low-privileged attacker with network access via HTTP can exploit this issue to compromise the system, though successful exploitation requires human interaction . The v...
CVE-2026-101503
A vulnerability exists in the PLSQL package component of Oracle Trusted Answer Search version 26.1 . This easily exploitable flaw allows a low privileged attacker with network access via Oracle Net to compromise the service. Successful exploitation can result in a full takeover of Oracle Trusted ...
CVE-2026-101504
A vulnerability exists in the Application expert UI component of Oracle Trusted Answer Search (version 26.1). A low-privileged attacker with network access via HTTP can exploit this flaw to compromise the system, although successful attacks require human interaction from a third party. The vulner...
CVE-2026-101501
A vulnerability exists in the Oracle Trusted Answer Search (specifically the PLSQL package component) in version 26.1 . A low-privileged attacker with network access via Oracle Net can exploit this flaw to compromise the service. The impact includes unauthorized creation, deletion, or modificatio...
CVE-2026-101502
A vulnerability exists in the PLSQL package component of Oracle Trusted Answer Search version 26.1 . This issue allows a low-privileged attacker with infrastructure access to compromise the service, potentially gaining unauthorized read, update, insert, or delete access to certain data, or causin...
CVE-2026-101498
A vulnerability exists in the PLSQL package component of Oracle Trusted Answer Search (version 26.1 ). An unauthenticated attacker with network access via Oracle Net can exploit this difficult-to-exploit vulnerability to compromise the software. Successful exploitation can result in a complete ta...
CVE-2026-113470
A flaw was found in Firefox. When dynamic updates for certificate revocation lists are disabled or unavailable, the browser relies on built-in data that fails to block certain compromised intermediate Certificate Authority CA certificates. A remote attacker could exploit this flaw using fraudulen...
emacs security update
1:27.2-18.el98.3 - Generalize trusted-content-p check to all Flymake backends CVE-2026-96442 - Resolves: RHEL-265110...
How Intervention History Changes AI Agent Sabotage on Subsequent Tasks
AI control evaluations often reset agents' memory between tasks, although deployed agents may retain records of prior interventions. We ask whether learning that an earlier attack was caught changes an agent's ability to evade defer-to-trusted DtT, a protocol that replaces suspicious work with a...
CVE-2026-15219
Authorization bypass through User-Controlled key vulnerability in SFM Software Technologies Inc. Costifier allows Exploitation of Trusted Identifiers. This issue affects Costifier: through 2026-10-16. NOTE: The vendor was contacted early about this disclosure but did not respond in any way...
EUVD-2026-102827
Authorization bypass through User-Controlled key vulnerability in SFM Software Technologies Inc. Costifier allows Exploitation of Trusted Identifiers. This issue affects Costifier: through 2026-10-16. NOTE: The vendor was contacted early about this disclosure but did not respond in any way...
CVE-2026-15219: Authorization Bypass Through User-Controlled Key
Authorization bypass through User-Controlled key vulnerability in SFM Software Technologies Inc. Costifier allows Exploitation of Trusted Identifiers. This issue affects Costifier: through 2026-10-16. NOTE: The vendor was contacted early about this disclosure but did not respond in any way...
JupyterLab: Command link trust prompt in JupyterLab can trust a document other than the one clicked
Description A Markdown file or a notebook output can carry a button that runs a JupyterLab command. Since 4.5.7 the first click on such a button opens a prompt naming the command, with Cancel, Run Once and Trust. Choosing Trust runs the command and marks the document trusted, so its later buttons...
Astra Linux – Vulnerability in Linux, Linux 5.10
A use-after-free exists in the drivers/tee/teeshm.c file within the TEE subsystem of the Linux kernel, as of version 5.15.11. This issue arises due to a race condition during the teeshmgetfromid function, when attempting to free a shared memory object...
Astra Linux – Vulnerability in emacs
In Emacs versions before 29.3, the Org mode considers the contents of remote files to be trustworthy. This affects Org Mode in versions prior to 9.6.23...
Astra Linux – Vulnerability in Squid
A vulnerability was discovered in Squid before versions 4.15 and 5.x before version 5.0.6. Due to incorrect parser validation, this vulnerability allows for a Denial of Service attack against the Cache Manager API. This enables a trusted client to trigger memory leaks, which over time can lead to...