2026-10-29 归档

今日共收录 3209 条安全情报,包含 2330 个 CVE,388 篇安全通告,以及 93 篇研究论文。

← 返回归档列表
漏洞预警2026-10-20 发布HIGH

Vulnerability in the Global Order Promising product of Oracle E-Business Suite (component: Web Service). Supported versions that are affected are 12.2.3-12.2.15. Difficult to e...

CVE-2026-101841

Vulnerability in the Global Order Promising product of Oracle E-Business Suite (component: Web Service). Supported vers

来源摘录 · NVD

漏洞预警2026-10-20 发布HIGH

Vulnerability in the Oracle Shipping Execution product of Oracle E-Business Suite (component: Workflow Events). Supported versions that are affected are 12.2.3-12.2.15. Difficu...

CVE-2026-101834

Vulnerability in the Oracle Shipping Execution product of Oracle E-Business Suite (component: Workflow Events). Support

来源摘录 · NVD

漏洞预警2026-10-20 发布HIGH

Vulnerability in the Oracle Quality product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploit...

CVE-2026-101831

Vulnerability in the Oracle Quality product of Oracle E-Business Suite (component: Internal Operations). Supported vers

来源摘录 · NVD

漏洞预警2026-10-20 发布HIGH

Vulnerability in the Oracle Cost Management product of Oracle E-Business Suite (component: Cost Planning). Supported versions that are affected are 12.2.3-12.2.15. Easily explo...

CVE-2026-101567

Vulnerability in the Oracle Cost Management product of Oracle E-Business Suite (component: Cost Planning). Supported ve

来源摘录 · NVD

漏洞预警2026-10-20 发布HIGH

Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily expl...

CVE-2026-101557

Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Internal Operations). Supported v

来源摘录 · NVD

漏洞预警2026-10-28 发布HIGH

Local privilege escalation due to improper authentication. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before build 42569, Acronis Cyber Pro...

CVE-2025-30414

Local privilege escalation due to improper authentication. The following products are affected: Acronis Cyber Protect Cl

来源摘录 · NVD

漏洞预警2026-05-19 发布MEDIUM

A flaw was found in Keycloak. This authentication vulnerability allows a remote attacker to replay `ExecuteActionsActionToken` tokens within Keycloak's WebAuthn (Web Authenticat...

CVE-2026-37982

A flaw was found in Keycloak. This authentication vulnerability allows a remote attacker to replay `ExecuteActionsAction

来源摘录 · NVD

漏洞预警2026-05-19 发布MEDIUM

A flaw was found in Keycloak. This access control vulnerability in Keycloak's OpenID Connect (OIDC) token introspection endpoint allows a confidential client to bypass audience ...

CVE-2026-37979

A flaw was found in Keycloak. This access control vulnerability in Keycloak's OpenID Connect (OIDC) token introspection

来源摘录 · NVD

漏洞预警2026-10-21 发布LOW

storage/pkg/archive.ApplyLayer and ApplyUncompressedLayer may, when processing corrupt or malicious inputs, leak a file descriptor; unbounded repeated calls can exhaust the proc...

CVE-2026-114236

storage/pkg/archive.ApplyLayer and ApplyUncompressedLayer may, when processing corrupt or malicious inputs, leak a file

来源摘录 · NVD

漏洞预警2026-10-29 发布INFO

Rejected reason: VUL-2026-008368 為先回報之相同問題

CVE-2026-117174

Rejected reason: VUL-2026-008368 為先回報之相同問題

来源摘录 · NVD

漏洞预警2026-10-29 发布MEDIUM

A flaw was found in the Pushed Authorization Request PAR implementation of the keycloak-services component. The issue occurs when an authentication flow is restarted, which inco...

CVE-2026-117859

A flaw was found in the Pushed Authorization Request PAR implementation of the keycloak-services component. The issue oc

来源摘录 · NVD

漏洞预警2026-10-29 发布MEDIUM

A flaw was found in the client registration component of Keycloak, an open-source identity and access management solution. When a vault provider is used to store sensitive infor...

CVE-2026-117688

A flaw was found in the client registration component of Keycloak, an open-source identity and access management solutio

来源摘录 · NVD

漏洞预警2026-10-29 发布MEDIUM

A flaw was found in the JWT Authorization Grant implementation of the keycloak-services component. When an OIDC or Google identity provider is configured with specific login res...

CVE-2026-117627

A flaw was found in the JWT Authorization Grant implementation of the keycloak-services component. When an OIDC or Googl

来源摘录 · NVD

漏洞预警2026-10-29 发布MEDIUM

A NULL pointer dereference flaw was found in 389-ds-base. This flaw occurs when a ModifyDN (rename) operation uses an attribute's schema alias name (such as "commonName") instea...

CVE-2026-117548

A NULL pointer dereference flaw was found in 389-ds-base. This flaw occurs when a ModifyDN (rename) operation uses an at

来源摘录 · NVD

漏洞预警2024-05-14 发布HIGH

A flaw was found in the github.com/containers/image library. This flaw allows attackers to trigger unexpected authenticated registry accesses on behalf of a victim user, causing...

CVE-2024-3727

A flaw was found in the github.com/containers/image library. This flaw allows attackers to trigger unexpected authentica

来源摘录 · NVD

漏洞预警2024-08-02 发布HIGH

A flaw was found in Podman. This issue may allow an attacker to create a specially crafted container that, when configured to share the same IPC with at least one other containe...

CVE-2024-3056

A flaw was found in Podman. This issue may allow an attacker to create a specially crafted container that, when configur

来源摘录 · NVD

漏洞预警2024-03-21 发布HIGH

A memory leak flaw was found in Golang in the RSA encrypting/decrypting code, which might lead to a resource exhaustion vulnerability using attacker-controlled inputs​. The memo...

CVE-2024-1394

A memory leak flaw was found in Golang in the RSA encrypting/decrypting code, which might lead to a resource exhaustion

来源摘录 · NVD

漏洞预警2026-09-09 发布HIGH

A flaw was found in SSSD's IdP authentication provider. The eval_access_token_buf() function compares the OIDC subject identifier using strncmp() with the authenticated user's i...

CVE-2026-87853

A flaw was found in SSSD's IdP authentication provider. The eval_access_token_buf() function compares the OIDC subject i

来源摘录 · NVD

漏洞预警2026-06-30 发布HIGH

A flaw was found in GLib. An off-by-one error can occur in the g_key_file_get_locale_string_list function in the gkeyfile.c file when loading a key file with an empty value. Thi...

CVE-2026-58014

A flaw was found in GLib. An off-by-one error can occur in the g_key_file_get_locale_string_list function in the gkeyfil

来源摘录 · NVD

漏洞预警2026-05-26 发布HIGH

A flaw was found in gnutls. When validating certificates, an oversized Subject Alternative Name (SAN) could cause the validation process to incorrectly fall back to checking the...

CVE-2026-42013

A flaw was found in gnutls. When validating certificates, an oversized Subject Alternative Name (SAN) could cause the va

来源摘录 · NVD