Vulnerability in the Oracle Flow Manufacturing product of Oracle E-Business Suite (component:...
CVE-2026-62497
Vulnerability in the Oracle Flow Manufacturing product of Oracle E-Business Suite (component: Internal Operations). Sup
2026-07-22 归档
今日共收录 2277 条安全情报，包含 1464 个 CVE，419 篇安全通告，以及 96 篇研究论文。
← 返回归档列表Vulnerability in the Oracle Process Manufacturing Process Execution product of Oracle E-Business...
CVE-2026-62495
Vulnerability in the Oracle Process Manufacturing Process Execution product of Oracle E-Business Suite (component: Inter
Vulnerability in the Oracle Self-Service Human Resources product of Oracle E-Business Suite ...
CVE-2026-62470
Vulnerability in the Oracle Self-Service Human Resources product of Oracle E-Business Suite (component: Manager Self-Ser
Vulnerability in the Oracle Human Resources product of Oracle E-Business Suite (component:...
CVE-2026-62469
Vulnerability in the Oracle Human Resources product of Oracle E-Business Suite (component: Enterprise Command Center).
Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: Create...
CVE-2026-62472
Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: Create Item Instance). Suppor
Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: Create...
CVE-2026-62473
Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: Create Item Instance). Suppor
Vulnerability in the Oracle Public Sector Payroll product of Oracle E-Business Suite (component:...
CVE-2026-62476
Vulnerability in the Oracle Public Sector Payroll product of Oracle E-Business Suite (component: Internal Operations).
Vulnerability in the Oracle Contracts Integration product of Oracle E-Business Suite (component:...
CVE-2026-62484
Vulnerability in the Oracle Contracts Integration product of Oracle E-Business Suite (component: Internal Operations).
Vulnerability in the Oracle Public Sector Financials product of Oracle E-Business Suite ...
CVE-2026-62482
Vulnerability in the Oracle Public Sector Financials product of Oracle E-Business Suite (component: Internal Operations)
Vulnerability in the Oracle Human Resources product of Oracle E-Business Suite (component:...
CVE-2026-62468
Vulnerability in the Oracle Human Resources product of Oracle E-Business Suite (component: Enterprise Command Center).
Vulnerability in the Oracle Public Sector Financials product of Oracle E-Business Suite ...
CVE-2026-62478
Vulnerability in the Oracle Public Sector Financials product of Oracle E-Business Suite (component: Internal Operations)
Vulnerability in the Oracle Project Contracts product of Oracle E-Business Suite (component:...
CVE-2026-62483
Vulnerability in the Oracle Project Contracts product of Oracle E-Business Suite (component: Internal Operations). Supp
Vulnerability in the Oracle Public Sector Financials product of Oracle E-Business Suite ...
CVE-2026-62479
Vulnerability in the Oracle Public Sector Financials product of Oracle E-Business Suite (component: Internal Operations)
Vulnerability in the Oracle Lease and Finance Management product of Oracle E-Business Suite ...
CVE-2026-62474
Vulnerability in the Oracle Lease and Finance Management product of Oracle E-Business Suite (component: Lease Authoring)
Vulnerability in the Oracle Public Sector Financials product of Oracle E-Business Suite ...
CVE-2026-62480
Vulnerability in the Oracle Public Sector Financials product of Oracle E-Business Suite (component: Internal Operations)
jackson-databind: @JsonView ypassed for @JsonUnwrapped container properties on deserialization
CVE-2026-59889
## Summary `UnwrappedPropertyHandler.processUnwrapped()` replays the buffered JSON for a `@JsonUnwrapped` property by it
Gitea: Public-Only Personal access tokens scope bypass in Organization and Permission Endpoints
CVE-2026-58429
### Summary A personal access token restricted with the public-only scope can still retrieve private organization member
Gitea: Webhook Authorization Header Returned in Plaintext via API
CVE-2026-58511
## Summary The `ToHook()` function in `services/webhook/general.go` decrypts the webhook's `HeaderAuthorizationEncrypte
Gitea: Public-only API token restriction is not enforced on team API routes
CVE-2026-58431
### Summary Gitea's `/api/v1/teams/{id}` API routes do not correctly enforce the `public-only` access token restriction
Gitea: Fork Synchronization Continues After Parent Repository Changes from Public to Private
CVE-2026-24451
### Summary The `POST /api/v1/repos/{owner}/{repo}/merge-upstream` endpoint continues to synchronize commits from a par