#CVE

共收录 69535 条相关情报。

漏洞预警2026-10-20 发布INFO

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Application Server - JRE). Supported versions that are affected are 8.61-8.63. D...

CVE-2026-60819

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Application Server - JRE

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-10-20 发布INFO

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Business Interlink). Supported versions that are affected are 8.61-8.63. Difficu...

CVE-2026-60814

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Business Interlink). Su

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-10-20 发布INFO

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Weblogic). Supported versions that are affected are 8.61-8.63. Difficult to expl...

CVE-2026-60809

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Weblogic). Supported ve

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-10-20 发布INFO

Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools). Supported versions that are affected are 12.2.3-12.2.15. ...

CVE-2026-60746

Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools).

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-10-20 发布INFO

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Application Server - JRE). Supported versions that are affected are 8.61-8.63. E...

CVE-2026-60745

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Application Server - JRE

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-10-20 发布INFO

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Weblogic). Supported versions that are affected are 8.61-8.63. Difficult to expl...

CVE-2026-60743

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Weblogic). Supported ve

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-10-20 发布HIGH

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Services). The supported version that is affected is 11.4. Easily exploitable vulnerability allows lo...

CVE-2026-60662

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Services). The supported version that is aff

来源摘录 · NVD

#cve #cwe-200

漏洞预警2026-10-20 发布INFO

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Web Server). Supported versions that are affected are 8.61-8.63. Easily exploita...

CVE-2026-60500

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Web Server). Supported

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-10-20 发布MEDIUM

Vulnerability in the Oracle Solaris product of Oracle Systems (component: X Window System). The supported version that is affected is 11.4. Easily exploitable vulnerability al...

CVE-2026-60453

Vulnerability in the Oracle Solaris product of Oracle Systems (component: X Window System). The supported version that

来源摘录 · NVD

#cve #cwe-200

漏洞预警2026-10-20 发布CRITICAL

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Image Packaging System). Supported versions that are affected are 11.3 and 11.4. Easily exploitable v...

CVE-2026-60432

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Image Packaging System). Supported versions t

来源摘录 · NVD

#cve #cwe-287 #cwe-306

漏洞预警2026-10-20 发布HIGH

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility). Supported versions that are affected are 11.3 and 11.4. Easily exploitable vulnerability al...

CVE-2026-47025

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility). Supported versions that are affecte

来源摘录 · NVD

#cve #cwe-200

漏洞预警2026-10-20 发布CRITICAL

Mozilla::CA versions before 20261020 for Perl provide a CA certificate bundle containing a root linked to compromised intermediates. The bundle includes "emSign ECC Root CA - G...

CVE-2026-113812

Mozilla::CA versions before 20261020 for Perl provide a CA certificate bundle containing a root linked to compromised in

来源摘录 · NVD

#cve #cwe-295

漏洞预警2026-10-20 发布HIGH

virtualenv is a tool for creating isolated virtual python environments. From 20.26.6 until 21.14.2, ViaTemplateActivator.instantiate_template() replaces placeholders one key at ...

CVE-2026-113776

virtualenv is a tool for creating isolated virtual python environments. From 20.26.6 until 21.14.2, ViaTemplateActivator

来源摘录 · NVD

#cve #cwe-78 #cwe-94

漏洞预警2026-10-20 发布INFO

virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.2, FishActivator inherits ViaTemplateActivator.quote(), which uses POSIX shlex.quote() eve...

CVE-2026-113732

virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.2, FishActivator inherits ViaTemp

历史摘要 · 未重新核验 · NVD

#cve #cwe-78 #cwe-116

漏洞预警2026-10-20 发布LOW

djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. From 0.9.0 until 1.0.10, 1.1.7, 1.2.4, and 1.3.0rc8, the find_hand...

CVE-2026-113731

djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. From 0.9.

来源摘录 · NVD

#cve #cwe-22

漏洞预警2026-10-20 发布INFO

OGNL is an Object Graph Navigation Library for Java. Prior to 3.4.13, the optional stricter-invocation mode in OgnlRuntime.invokeMethod checks the declaring class of the method ...

CVE-2026-113730

OGNL is an Object Graph Navigation Library for Java. Prior to 3.4.13, the optional stricter-invocation mode in OgnlRunti

历史摘要 · 未重新核验 · NVD

#cve #cwe-693

漏洞预警2026-10-20 发布INFO

Moov signedxml is a pure Go library for processing signed XML documents. Prior to 1.4.1, ExclusiveCanonicalization in exclusivecanonicalization.go copies the complete accumulate...

CVE-2026-113729

Moov signedxml is a pure Go library for processing signed XML documents. Prior to 1.4.1, ExclusiveCanonicalization in ex

历史摘要 · 未重新核验 · NVD

#cve #cwe-400 #cwe-407 #cwe-770

漏洞预警2026-10-20 发布INFO

Bulwark Webmail is a self-hosted webmail client for Stalwart Mail Server. Prior to 1.9.2, the unauthenticated POST /api/fetch-ical endpoint validates a caller-supplied hostname ...

CVE-2026-113728

Bulwark Webmail is a self-hosted webmail client for Stalwart Mail Server. Prior to 1.9.2, the unauthenticated POST /api/

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

漏洞预警2026-10-20 发布INFO

OpenChoreo is a developer platform for Kubernetes. From 1.0.0 until 1.0.6, 1.1.7, and 1.2.5, the PUT .../workflowruns/{runName} update route authorizes a request using the openc...

CVE-2026-113727

OpenChoreo is a developer platform for Kubernetes. From 1.0.0 until 1.0.6, 1.1.7, and 1.2.5, the PUT .../workflowruns/{r

历史摘要 · 未重新核验 · NVD

#cve #cwe-639

漏洞预警2026-10-20 发布INFO

virtualenv is a tool for creating isolated virtual python environments. Prior to 21.13.0, the bash activate script that zsh also sources leaves the environment name unescaped; f...

CVE-2026-113726

virtualenv is a tool for creating isolated virtual python environments. Prior to 21.13.0, the bash activate script that

历史摘要 · 未重新核验 · NVD

#cve #cwe-78 #cwe-116