Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware ...
CVE-2026-60370
Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Third
#advisory
共收录 23779 条相关情报。
← 返回所有主题Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware ...
CVE-2026-60368
Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Third
Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware ...
CVE-2026-60371
Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Third
Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware ...
CVE-2026-60366
Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Third
An issue in Unistal Systems Pvt. Ltd.Protegent 360 v2.0.0.4 allows a local attacker to escalate...
CVE-2026-38766
An issue in Unistal Systems Pvt. Ltd.Protegent 360 v2.0.0.4 allows a local attacker to escalate privileges via the sub_1
An issue in Unistal Systems Pvt. Ltd.Protegent 360 v2.0.0.4 allows a local attacker to cause a...
CVE-2026-38763
An issue in Unistal Systems Pvt. Ltd.Protegent 360 v2.0.0.4 allows a local attacker to cause a denial of service via the
A vulnerability was detected in oclif up to 4.23.16. Affected by this vulnerability is the...
CVE-2026-16628
A vulnerability was detected in oclif up to 4.23.16. Affected by this vulnerability is the function child_process.exec o
A security vulnerability has been detected in syncfusion ej2-javascript-ui-controls up to 33.2.3....
CVE-2026-16630
A security vulnerability has been detected in syncfusion ej2-javascript-ui-controls up to 33.2.3. This affects the funct
An issue in Unistal Systems Pvt. Ltd.Protegent 360 v2.0.0.4 allows a local attacker to escalate...
CVE-2026-38765
An issue in Unistal Systems Pvt. Ltd.Protegent 360 v2.0.0.4 allows a local attacker to escalate privileges via the kerne
A vulnerability was identified in danger danger-js up to 13.0.7. Impacted is the function danger...
CVE-2026-16629
A vulnerability was identified in danger danger-js up to 13.0.7. Impacted is the function danger.git.diffForFile of the
boazsegev facil.io WebSocket Frame websocket_parser.h websocket_on_protocol_error input validation
CVE-2026-16632
A flaw has been found in boazsegev facil.io up to 0.7.4. Affected is the function websocket_on_protocol_error in the lib
publint package-manager pack.js child_process.exec os command injection
CVE-2026-16631
A vulnerability was detected in publint up to 0.1.4. This impacts the function child_process.exec of the file src/node/p
n8n: Snowflake Node executeQuery Operation Allows SQL Injection via Unparameterized Expression Interpolation
## Impact The n8n Snowflake node's Execute Query operation interpolated expression values directly into the SQL string,
n8n: PostgresTrigger Node SQL Injection Allows Authenticated Users to Execute Arbitrary SQL on Connected PostgreSQL Instances
## Impact The Postgres Trigger node interpolated user-supplied identifier parameters (channel, function, and trigger na
n8n: Cross-Tenant Module-Cache Poisoning in the JS Task Runner
## Impact n8n's JavaScript task runner shared one module cache across all users' Code-node executions, so a user able t
JupyterLab: Cross-site scripting (XSS) via crafted settings file (`overrides.json`)
JupyterLab 4.5+ allows notebook settings to be shared and applied through an `overrides.json` file using the `Import` bu
JupyterLab: Image viewer allows XSS when opening malicious image in new browser tab
JupyterLab's image viewer allows for cross-site scripting (XSS) when a specially-crafted image file is opened through th
JupyterLab: PyPI extension blocklist package-name canonicalization bypass
JupyterLab's PyPI extension manager enforces `blocked_extensions_uris` by comparing the requested install name to blockl
JupyterLab PluginManager lock-rule enforcement bypass
JupyterLab's plugin manager exposes administrator controls intended to prevent users from enabling or disabling selected
JupyterLab: Allowlist/blocklist check in `PyPIExtensionManager.install()` not enforced for direct callers (missing `await`)
The extension allowlist/blocklist check inside `PyPIExtensionManager.install()` was not enforced due to a missing await.