2026-10-22 归档

今日共收录 1761 条安全情报，包含 937 个 CVE，415 篇安全通告，以及 100 篇研究论文。

← 返回归档列表

漏洞预警2026-10-20 发布INFO

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Weblogic). Supported versions that are affected are 8.61-8.63. Difficult to expl...

CVE-2026-60809

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Weblogic). Supported ve

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-10-20 发布INFO

Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools). Supported versions that are affected are 12.2.3-12.2.15. ...

CVE-2026-60746

Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools).

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-10-20 发布INFO

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Application Server - JRE). Supported versions that are affected are 8.61-8.63. E...

CVE-2026-60745

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Application Server - JRE

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-10-20 发布INFO

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Weblogic). Supported versions that are affected are 8.61-8.63. Difficult to expl...

CVE-2026-60743

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Weblogic). Supported ve

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-10-20 发布INFO

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Services). The supported version that is affected is 11.4. Easily exploitable vulnerability allows lo...

CVE-2026-60662

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Services). The supported version that is aff

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-10-20 发布INFO

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Web Server). Supported versions that are affected are 8.61-8.63. Easily exploita...

CVE-2026-60500

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Web Server). Supported

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-10-20 发布INFO

Vulnerability in the Oracle Solaris product of Oracle Systems (component: X Window System). The supported version that is affected is 11.4. Easily exploitable vulnerability al...

CVE-2026-60453

Vulnerability in the Oracle Solaris product of Oracle Systems (component: X Window System). The supported version that

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-10-20 发布INFO

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility). Supported versions that are affected are 11.3 and 11.4. Easily exploitable vulnerability al...

CVE-2026-47025

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility). Supported versions that are affecte

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-10-20 发布INFO

OGNL is an Object Graph Navigation Library for Java. Prior to 3.4.13, the optional stricter-invocation mode in OgnlRuntime.invokeMethod checks the declaring class of the method ...

CVE-2026-113730

OGNL is an Object Graph Navigation Library for Java. Prior to 3.4.13, the optional stricter-invocation mode in OgnlRunti

历史摘要 · 未重新核验 · NVD

#cve #cwe-693

漏洞预警2026-10-20 发布INFO

A vulnerability has been found in a2aproject a2a-rs up to 0.4.3. This affects the function HttpPushSender of the file crates/server/src/push_notification_sender.rs of the compon...

CVE-2026-113704

A vulnerability has been found in a2aproject a2a-rs up to 0.4.3. This affects the function HttpPushSender of the file cr

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

漏洞预警2026-10-20 发布INFO

Use after free in Performance in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium s...

CVE-2026-113344

Use after free in Performance in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary cod

历史摘要 · 未重新核验 · NVD

#cve #cwe-416

漏洞预警2026-10-20 发布INFO

Memory corruption in Sandbox in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium se...

CVE-2026-113343

Memory corruption in Sandbox in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code

历史摘要 · 未重新核验 · NVD

#cve #cwe-119

漏洞预警2026-10-20 发布INFO

Memory corruption in Skia in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. ...

CVE-2026-113341

Memory corruption in Skia in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially

历史摘要 · 未重新核验 · NVD

#cve #cwe-119

漏洞预警2026-10-20 发布INFO

Memory corruption in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page....

CVE-2026-113340

Memory corruption in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to potentiall

历史摘要 · 未重新核验 · NVD

#cve #cwe-119

漏洞预警2026-10-20 发布INFO

Use after free in SVG in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security ...

CVE-2026-113339

Use after free in SVG in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside

历史摘要 · 未重新核验 · NVD

#cve #cwe-416

漏洞预警2026-10-20 发布INFO

Use after free in Turbolev in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium secu...

CVE-2026-113338

Use after free in Turbolev in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code i

历史摘要 · 未重新核验 · NVD

#cve #cwe-416

漏洞预警2026-10-20 发布INFO

Memory corruption in Scroll in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium sec...

CVE-2026-113337

Memory corruption in Scroll in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code

历史摘要 · 未重新核验 · NVD

#cve #cwe-119

漏洞预警2026-10-20 发布INFO

Memory corruption in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium...

CVE-2026-113335

Memory corruption in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary c

历史摘要 · 未重新核验 · NVD

#cve #cwe-119

漏洞预警2026-10-20 发布INFO

Improper input validation in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a...

CVE-2026-113334

Improper input validation in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to po

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-10-20 发布INFO

Memory corruption in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromiu...

CVE-2026-113333

Memory corruption in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read me

历史摘要 · 未重新核验 · NVD

#cve #cwe-119