#advisory

共收录 23530 条相关情报。

← 返回所有主题
安全公告2026-08-18 发布INFO

Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web...

CVE-2026-73871

Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). The supported ver

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-18 发布INFO

Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web...

CVE-2026-73868

Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). The supported ver

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-18 发布INFO

Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web...

CVE-2026-73875

Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). The supported ver

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-18 发布INFO

Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web...

CVE-2026-73867

Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). The supported ver

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-18 发布INFO

Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web...

CVE-2026-73872

Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). The supported ver

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-18 发布INFO

Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web...

CVE-2026-73877

Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). The supported ver

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-18 发布INFO

Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web...

CVE-2026-73870

Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). The supported ver

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-18 发布INFO

Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web...

CVE-2026-73874

Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). The supported ver

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-18 发布INFO

Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web...

CVE-2026-73876

Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). The supported ver

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-18 发布INFO

Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web...

CVE-2026-73879

Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). The supported ver

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-18 发布INFO

Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web...

CVE-2026-73878

Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). The supported ver

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-18 发布INFO

Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web...

CVE-2026-73873

Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). The supported ver

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-18 发布INFO

Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web...

CVE-2026-73869

Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). The supported ver

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-18 发布INFO

linuxfabrik-lib: Arbitrary root file read via live --test argument (lib.lftest) across sudoers-whitelisted plugins (LPE)

CVE-2026-73974

## Summary Every Linuxfabrik check plugin that supports the shared `--test` argument (routed through `lib.lftest.test()`

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-18 发布INFO

moby/go-archive: Crafted tar archive can write outside the extraction directory

CVE-2026-17106

### Summary The tar extraction routines in `moby/go-archive` (`Unpack`, `UnpackLayer`, `Untar`/`UntarUncompressed`, and

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-18 发布INFO

LibreNMS: SSRF-driven stored XSS via Oxidized API response fields in device showconfig page

### Summary The Oxidized integration URL (`oxidized.url`) is admin-configurable. LibreNMS fetches device info and versio

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-18 发布INFO

LibreNMS: Stored XSS via graph_descr admin config settings echoed without escaping to all authenticated users

### Summary The `graph_descr.` family of settings is echoed verbatim without `htmlspecialchars()` in `includes/html/page

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-18 发布INFO

LibreNMS Vulnerable to Remote Code Execution via AboutController

# Remote Code Execution via AboutController in LibreNMS ## Summary A Remote Code Execution (RCE) vulnerability exists

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-18 发布INFO

Lemur: Any user can revoke arbitrary certificates at the CA by uploading a duplicate record and revoking it

CVE-2026-71417

## Summary Repo under test: https://github.com/Netflix/lemur `PUT /api/1/certificates//revoke` authorizes the caller a

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-18 发布INFO

Lemur: Missing authorization check on POST /certificates/<id>/export for plugins with requires_key = False

CVE-2026-71322

## Summary The `CertificateExport` handler in `lemur/certificates/views.py` nests its entire ownership / `CertificateP

历史摘要 · 未重新核验 · GitHub Advisory