2026-05-30 归档

今日共收录 1277 条安全情报，包含 517 个 CVE，386 篇安全通告，以及 105 篇研究论文。

← 返回归档列表

漏洞预警2026-05-28 发布INFO

Vulnerability in the Net Service component of Oracle Database Server. Supported versions that are affected are 23.4.0-23.26.2. Easily exploitable vulnerability allows unauthent...

CVE-2026-46834

Vulnerability in the Net Service component of Oracle Database Server. Supported versions that are affected are 23.4.0-2

历史摘要 · 未重新核验 · NVD

#cve #cwe-400

漏洞预警2026-05-28 发布INFO

Vulnerability in Oracle REST Data Services (component: Mongoapi). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows unauthenticate...

CVE-2026-46830

Vulnerability in Oracle REST Data Services (component: Mongoapi). Supported versions that are affected are 24.2.0-26.1.

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-05-28 发布INFO

Vulnerability in Oracle REST Data Services (component: Mongoapi). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows unauthenticate...

CVE-2026-46829

Vulnerability in Oracle REST Data Services (component: Mongoapi). Supported versions that are affected are 24.2.0-26.1.

历史摘要 · 未重新核验 · NVD

#cve #cwe-400

漏洞预警2026-05-28 发布INFO

Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploit...

CVE-2026-46828

Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). Supported vers

历史摘要 · 未重新核验 · NVD

#cve #cwe-284

漏洞预警2026-05-28 发布INFO

Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Self Service Manager). Supported versions that are affected are 12.2.3-12.2.15. Easily exploi...

CVE-2026-46827

Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Self Service Manager). Supported ver

历史摘要 · 未重新核验 · NVD

#cve #cwe-269 #cwe-284 #cwe-287 #cwe-306

漏洞预警2026-05-28 发布INFO

Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploit...

CVE-2026-46826

Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). Supported vers

历史摘要 · 未重新核验 · NVD

#cve #cwe-306

漏洞预警2026-05-28 发布INFO

Vulnerability in the Oracle Public Sector Financials (International) product of Oracle E-Business Suite (component: Authorization). Supported versions that are affected are 12....

CVE-2026-46823

Vulnerability in the Oracle Public Sector Financials (International) product of Oracle E-Business Suite (component: Auth

历史摘要 · 未重新核验 · NVD

#cve #cwe-863

漏洞预警2026-05-28 发布INFO

Vulnerability in the Oracle Financials Common Modules product of Oracle E-Business Suite (component: Common Components). Supported versions that are affected are 12.2.3-12.2.15...

CVE-2026-46821

Vulnerability in the Oracle Financials Common Modules product of Oracle E-Business Suite (component: Common Components).

历史摘要 · 未重新核验 · NVD

#cve #cwe-284

漏洞预警2026-05-28 发布INFO

Vulnerability in the Oracle Financials Common Modules product of Oracle E-Business Suite (component: Common Components). Supported versions that are affected are 12.2.3-12.2.15...

CVE-2026-46820

Vulnerability in the Oracle Financials Common Modules product of Oracle E-Business Suite (component: Common Components).

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-05-28 发布INFO

Vulnerability in the Oracle Payments product of Oracle E-Business Suite (component: File Transmission). Supported versions that are affected are 12.2.3-12.2.15. Difficult to ex...

CVE-2026-46818

Vulnerability in the Oracle Payments product of Oracle E-Business Suite (component: File Transmission). Supported versi

历史摘要 · 未重新核验 · NVD

#cve #cwe-284

漏洞预警2026-05-28 发布INFO

Mantis Bug Tracker (MantisBT) is an open source issue tracker. Prior to 2.28.2, using show_inline=1 parameter and a valid file_show_inline_token CSRF token on file_download.php,...

CVE-2026-44657

Mantis Bug Tracker (MantisBT) is an open source issue tracker. Prior to 2.28.2, using show_inline=1 parameter and a vali

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-05-28 发布INFO

Mantis Bug Tracker (MantisBT) is an open source issue tracker. From 1.3.0 to 2.28.1, unescaped Project Name allows an attacker that can set it (which typically requires manager ...

CVE-2026-44655

Mantis Bug Tracker (MantisBT) is an open source issue tracker. From 1.3.0 to 2.28.1, unescaped Project Name allows an at

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-05-28 发布INFO

Uncontrolled Resource Consumption (CWE-400) in Kibana can lead to denial of service via Excessive Allocation (CAPEC-130). An authenticated user can send a specially crafted comp...

CVE-2026-42400

Uncontrolled Resource Consumption (CWE-400) in Kibana can lead to denial of service via Excessive Allocation (CAPEC-130)

历史摘要 · 未重新核验 · NVD

#cve #cwe-400

漏洞预警2026-05-28 发布INFO

Uncontrolled Resource Consumption (CWE-400) in Kibana can lead to denial of service via Excessive Allocation (CAPEC-130). An authenticated low-privileged user can cause Kibana t...

CVE-2026-42399

Uncontrolled Resource Consumption (CWE-400) in Kibana can lead to denial of service via Excessive Allocation (CAPEC-130)

历史摘要 · 未重新核验 · NVD

#cve #cwe-400

漏洞预警2026-05-28 发布INFO

Server-Side Request Forgery (CWE-918) in Kibana allows authenticated users with connector management privileges to bypass the operator-configured connection allowlist. By config...

CVE-2026-42398

Server-Side Request Forgery (CWE-918) in Kibana allows authenticated users with connector management privileges to bypas

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

漏洞预警2026-05-28 发布INFO

Mantis Bug Tracker (MantisBT) is an open source issue tracker. From 2.23.0 to 2.28.1, a missing authorization check in MantisBT's file visibility function allows any authenticat...

CVE-2026-42071

Mantis Bug Tracker (MantisBT) is an open source issue tracker. From 2.23.0 to 2.28.1, a missing authorization check in M

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-05-28 发布INFO

Mantis Bug Tracker (MantisBT) is an open source issue tracker. Prior to 2.28.2, the mc_issue_update() function in MantisBT allows users having update_bug_threshold access (UPDAT...

CVE-2026-42070

Mantis Bug Tracker (MantisBT) is an open source issue tracker. Prior to 2.28.2, the mc_issue_update() function in Mantis

历史摘要 · 未重新核验 · NVD

#cve #cwe-863

漏洞预警2026-05-28 发布INFO

Mantis Bug Tracker (MantisBT) is an open source issue tracker. From 1.0.0 to 2.28.1, lack of validation of filter_target parameter on return_dynamic_filters.php (normally used a...

CVE-2026-41897

Mantis Bug Tracker (MantisBT) is an open source issue tracker. From 1.0.0 to 2.28.1, lack of validation of filter_target

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-05-28 发布INFO

Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows low privileged att...

CVE-2026-35277

Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. E

历史摘要 · 未重新核验 · NVD

#cve #cwe-284

漏洞预警2026-05-28 发布INFO

Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. Difficult to exploit vulnerability allows low privileged a...

CVE-2026-35266

Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. D

历史摘要 · 未重新核验 · NVD

#cve #cwe-352