Known Vulnerabilities for Knowledge by Oracle
Listed below are 10 of the newest known vulnerabilities associated with "Knowledge" by "Oracle".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-113714 json | virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, download_wheel() writes package-ind... | Not Provided | 2026-10-20 | 2026-10-20 |
| CVE-2026-111702 json | ChatOllama through commit 96c3ce5 contains an insecure direct object reference vulnerability that allows remote attackers to ... | Not Provided | 2026-10-16 | 2026-10-16 |
| CVE-2026-111363 json | BISHENG through 3.0.0-beta4 contains an insecure direct object reference vulnerability that allows authenticated low-privileg... | Not Provided | 2026-10-15 | 2026-10-16 |
| CVE-2026-110775 json | Nexent through 2.7.0 contains a missing authorization vulnerability in check_file_access that allows authenticated users to r... | Not Provided | 2026-10-14 | 2026-10-16 |
| CVE-2026-109298 json | Open WebUI 0.11.0 before 0.11.4 compiles user-chosen grep patterns for its knowledge and chat file search tools with a regex ... | Not Provided | 2026-10-12 | 2026-10-13 |
| CVE-2026-109287 json | Open WebUI from 0.9.6 before 0.11.4 contains an authorization flaw where the knowledge base file listing does not verify that... | Not Provided | 2026-10-12 | 2026-10-15 |
| CVE-2026-109285 json | Open WebUI from 0.6.0 before 0.11.4 contains an improper access control vulnerability in has_access_to_file that lets former ... | Not Provided | 2026-10-12 | 2026-10-13 |
| CVE-2026-108878 json | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragAppController queryById handler that allow... | Not Provided | 2026-10-11 | 2026-10-13 |
| CVE-2026-108669 json | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the embeddingSearch handler of AiragKnowledgeContro... | Not Provided | 2026-10-10 | 2026-10-13 |
| CVE-2026-108499 json | Missing Authorization vulnerability in WebberZone Knowledge Base knowledgebase allows Exploiting Incorrectly Configured Acces... | Not Provided | 2026-10-15 | 2026-10-15 |