Aggregator

A vulnerability labeled as critical has been found in Oracle Hyperion Planning. Affected is an unknown function of the component Security. The manipulation results in improper input validation. This vulnerability is cataloged as CVE-2021-44832. The attack may be launched remotely. There is no exploit available. The affected component should be upgraded.

A vulnerability marked as critical has been reported in Oracle Hyperion Profitability and Cost Management. Affected by this vulnerability is an unknown functionality of the component Install. This manipulation causes improper input validation. This vulnerability is registered as CVE-2021-44832. Remote exploitation of the attack is possible. No exploit is available. It is suggested to upgrade the affected component.

A vulnerability described as critical has been identified in Oracle Hyperion Tax Provision. Affected by this issue is some unknown functionality of the component Tax Provision. Such manipulation leads to improper input validation. This vulnerability is documented as CVE-2021-44832. The attack can be executed remotely. There is not any exploit available. Upgrading the affected component is recommended.

A vulnerability was found in Oracle Insurance Data Gateway 1.0.1. It has been classified as critical. This affects an unknown function of the component Security. Performing a manipulation results in improper input validation. This vulnerability was named CVE-2021-44832. The attack may be initiated remotely. There is no available exploit. Upgrading the affected component is recommended.

A vulnerability was found in Oracle Insurance Insbridge Rating and Underwriting 5.2.0/5.6.0/5.6.1. It has been declared as critical. This impacts an unknown function of the component Framework Administrator IBFA. Executing a manipulation can lead to improper input validation. The identification of this vulnerability is CVE-2021-44832. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Oracle MySQL Enterprise Monitor up to 8.0.29. It has been rated as critical. Impacted is an unknown function of the component Monitoring. Performing a manipulation results in improper input validation. This vulnerability was named CVE-2021-44832. The attack may be initiated remotely. There is no available exploit. Upgrading the affected component is advised.

A vulnerability, which was classified as critical, has been found in MediaTek MT6761, MT6765, MT6768, MT6779, MT6781, MT6785, MT6789, MT6833, MT6853, MT6855, MT6873, MT6877, MT6879, MT6883, MT6885, MT6889, MT6893, MT6895, MT6983, MT8675, MT8766, MT8781 and MT8791. The impacted element is an unknown function of the component gpu drm. Performing a manipulation results in stack-based buffer overflow. This vulnerability was named CVE-2022-32646. The attack needs to be approached locally. There is no available exploit. To fix this issue, it is recommended to deploy a patch.

A vulnerability has been found in MediaTek MT6735, MT6737, MT6739, MT6753, MT6757, MT6761, MT6763, MT6765, MT6768, MT6771, MT6779, MT6785 and MT6789 and classified as problematic. This impacts an unknown function of the component disp. The manipulation leads to use after free. This vulnerability is referenced as CVE-2022-32648. The attack can only be performed from a local environment. No exploit is available. Applying a patch is the recommended action to fix this issue.

A vulnerability was found in MediaTek MT6789, MT6833, MT6853, MT6855, MT6873, MT6875, MT6877, MT6879, MT6883, MT6885, MT6891, MT6893, MT6895, MT6983, MT8781, MT8791, MT8791T and MT8797. It has been classified as problematic. This affects an unknown function of the component vow. The manipulation leads to information disclosure. This vulnerability is listed as CVE-2022-32645. The attack must be carried out locally. There is no available exploit. It is suggested to install a patch to address this issue.

A vulnerability classified as problematic was found in MediaTek MT6789, MT6833, MT6853, MT6855, MT6873, MT6875, MT6877, MT6879, MT6883, MT6885, MT6891, MT6893, MT6895, MT6983, MT8781, MT8791, MT8791T and MT8797. The affected element is an unknown function of the component vow. Such manipulation leads to use after free. This vulnerability is uniquely identified as CVE-2022-32644. Local access is required to approach this attack. No exploit exists. A patch should be applied to remediate this issue.

A vulnerability has been found in MediaTek MT6879, MT6895 and MT6983 and classified as problematic. This issue affects some unknown processing of the component ccd. This manipulation causes use after free. The identification of this vulnerability is CVE-2022-32643. The attack can only be executed locally. There is no exploit available. It is recommended to apply a patch to fix this issue.

A malicious Codex UI npm package with 27,000 weekly downloads was caught exfiltrating OpenAI refresh tokens, exposing developers to account takeover risks.

Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware Newsletter Ghost CMS Mass Compromised via CVE-2026-26980, Now Fueling ClickFix Attacks   TrapDoor Crypto Stealer Supply Chain Attack Hits 34 Packages and Hundreds of Versions Across npm, PyPI, and Crates.io   RemotePE: The Lazarus RAT that lives […]

A vulnerability labeled as critical has been found in Apache Airflow up to 3.2.1. Affected by this issue is the function revoke_token of the component FabAuthManager/KeycloakAuthManager. The manipulation results in improper access controls. This vulnerability is identified as CVE-2026-48726. The attack can be executed remotely. There is not any exploit available. The affected component should be upgraded.

A vulnerability identified as problematic has been detected in Apache Airflow up to 3.2.1. Affected by this vulnerability is an unknown functionality of the component Event Log Detail Endpoint. The manipulation leads to permission issues. This vulnerability is referenced as CVE-2026-46764. Remote exploitation of the attack is possible. No exploit is available. You should upgrade the affected component.

A vulnerability categorized as critical has been discovered in Apache Airflow up to 3.2.1. Affected is the function lstrip of the component JWT. Executing a manipulation can lead to authorization bypass. The identification of this vulnerability is CVE-2026-45426. The attack may be launched remotely. There is no exploit available. It is advisable to upgrade the affected component.

大量证据表明，动物大脑会受到高温的影响。天气炎热时，鸟类学习能力下降，狗咬人的次数增多，羚羊等体型较大的动物更容易挑衅打架。西澳大利亚大学的行为生态学家 Amanda Ridley 说，如果动物无法保持足够的警觉去寻找食物或躲避天敌，它们的生存几率会急剧下降。随着气候变化导致热浪日益频繁，动物王国的认知障碍可能会波及整个生态系统，本已脆弱的物种会面临更大的风险。如果授粉昆虫忘记该拜访哪些花朵，农作物和野生植物可能会歉收。如果鸟类难以觅食，其幼鸟可能无法存活。在一个气候暖化的行星上，敏锐的思维尤为重要。Ridley 指出气候变化意味着适应能力变得更重要。高温影响人类的大脑，有研究发现，对于在无空调学校学习的学生，学年气温每升高华氏 1 度，考试成绩会下降 1 %。对美国近 7 万起狗咬人报告的分析发现，32 摄氏度的天气狗咬人的风险比 16 摄氏度的天气高 10%，但研究人员并不确定是天热的条件下狗变得更具有攻击性，还是人类更暴躁而容易引发攻击，很可能是两个因素的组合。中国的一项研究发现，蛇和猫在天气变热时也更可能咬人。

A vulnerability was found in Apache Airflow up to 3.2.1. It has been rated as problematic. This impacts an unknown function of the component Import. Performing a manipulation results in deserialization. This vulnerability was named CVE-2026-45360. The attack may be initiated remotely. There is no available exploit. Upgrading the affected component is advised.

A vulnerability was found in Apache Airflow up to 3.2.1. It has been declared as problematic. This affects an unknown function. Such manipulation leads to information disclosure. This vulnerability is uniquely identified as CVE-2026-42360. The attack can be launched remotely. No exploit exists. It is recommended to upgrade the affected component.