#CVE

共收录 69535 条相关情报。

← 返回所有主题
漏洞预警2026-10-19 发布MEDIUM

The ForgeRock client fails to correctly validate refresh tokens. This allows a refresh token to be treated as a valid access token, enabling its use for consuming protected reso...

CVE-2025-7043

The ForgeRock client fails to correctly validate refresh tokens. This allows a refresh token to be treated as a valid ac

来源摘录 · NVD

漏洞预警2026-10-19 发布MEDIUM

The carbon console accepts user-supplied XML input without sufficiently encoding potentially executable content, allowing for the injection of malicious scripts. Successful exp...

CVE-2025-6623

The carbon console accepts user-supplied XML input without sufficiently encoding potentially executable content, allowin

来源摘录 · NVD

漏洞预警2026-10-19 发布MEDIUM

The authentication endpoint of WSO2 Identity Server fails to provide a consistent system response when a username does not exist in the system, allowing attackers to differentia...

CVE-2025-13591

The authentication endpoint of WSO2 Identity Server fails to provide a consistent system response when a username does n

来源摘录 · NVD

漏洞预警2026-10-19 发布MEDIUM

Tokens associated with user sessions are not revoked when the corresponding user session is terminated, unless another SSO request is initiated. This occurs when the session-bou...

CVE-2025-13173

Tokens associated with user sessions are not revoked when the corresponding user session is terminated, unless another S

来源摘录 · NVD

漏洞预警2026-10-19 发布HIGH

The SCIM endpoint does not sufficiently validate authorization for federated users when performing operations against the local user store. This occurs when a local and a federa...

CVE-2025-10149

The SCIM endpoint does not sufficiently validate authorization for federated users when performing operations against th

来源摘录 · NVD

漏洞预警2026-10-19 发布HIGH

sqlparse through 0.6.0 contains a PHP code injection vulnerability that allows attackers to inject PHP expressions by supplying SQL text containing unescaped dollar signs. Attac...

CVE-2026-112307

sqlparse through 0.6.0 contains a PHP code injection vulnerability that allows attackers to inject PHP expressions by su

来源摘录 · NVD

漏洞预警2026-10-19 发布CRITICAL

Mercury is a Python framework for sharing Jupyter notebooks as web applications and dashboards. From 3.0.0 until 3.2.4, a missing comma in BLOCKED_PATTERNS concatenates the /lab...

CVE-2026-111057

Mercury is a Python framework for sharing Jupyter notebooks as web applications and dashboards. From 3.0.0 until 3.2.4,

来源摘录 · NVD

漏洞预警2026-10-19 发布MEDIUM

A flaw was found in the GStreamer ASF demuxer in gst-plugins-ugly. When parsing a Simple Index object, an attacker-controlled entry count is used to size a heap allocation witho...

CVE-2026-112214

A flaw was found in the GStreamer ASF demuxer in gst-plugins-ugly. When parsing a Simple Index object, an attacker-contr

来源摘录 · NVD

漏洞预警2026-10-19 发布HIGH

A flaw was found in Red Hat Advanced Cluster Security for Kubernetes (RHACS). The Central SAML authentication ACS endpoint does not retain used SAML assertion or response identi...

CVE-2026-103314

A flaw was found in Red Hat Advanced Cluster Security for Kubernetes (RHACS). The Central SAML authentication ACS endpoi

来源摘录 · NVD

漏洞预警2026-10-19 发布HIGH

Deserialization of Untrusted Data vulnerability in Apache Camel Camel-Jgroups component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1....

CVE-2026-88900

Deserialization of Untrusted Data vulnerability in Apache Camel Camel-Jgroups component. This issue affects Apache Ca

来源摘录 · NVD

漏洞预警2026-10-19 发布MEDIUM

Use of Cache Containing Sensitive Information vulnerability in Apache Camel HTTP component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1...

CVE-2026-85317

Use of Cache Containing Sensitive Information vulnerability in Apache Camel HTTP component. This issue affects Apache C

来源摘录 · NVD

漏洞预警2026-10-19 发布MEDIUM

Insufficient Granularity of Access Control vulnerability in Apache Camel Platform HTTP component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before ...

CVE-2026-85316

Insufficient Granularity of Access Control vulnerability in Apache Camel Platform HTTP component. This issue affects Ap

来源摘录 · NVD

漏洞预警2026-10-19 发布MEDIUM

Generation of Error Message Containing Sensitive Information vulnerability in Apache Camel gRPC component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19....

CVE-2026-85315

Generation of Error Message Containing Sensitive Information vulnerability in Apache Camel gRPC component. This issue a

来源摘录 · NVD

漏洞预警2026-10-19 发布MEDIUM

Improper Input Validation vulnerability in Apache Camel Mail component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. CVE-2026-46584 ad...

CVE-2026-85314

Improper Input Validation vulnerability in Apache Camel Mail component. This issue affects Apache Camel: from 4.0.0 bef

来源摘录 · NVD

漏洞预警2026-10-19 发布MEDIUM

Permissive Cross-domain Policy with Untrusted Domains vulnerability in Apache Camel Jetty component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 befo...

CVE-2026-85313

Permissive Cross-domain Policy with Untrusted Domains vulnerability in Apache Camel Jetty component. This issue affects

来源摘录 · NVD

漏洞预警2026-10-19 发布MEDIUM

Improper Input Validation vulnerability in Apache Camel Core component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. The saga processo...

CVE-2026-85312

Improper Input Validation vulnerability in Apache Camel Core component. This issue affects Apache Camel: from 4.0.0 bef

来源摘录 · NVD

漏洞预警2026-10-19 发布MEDIUM

Exposure of Data Element to Wrong Session vulnerability in Apache Camel AS2 component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. Si...

CVE-2026-85296

Exposure of Data Element to Wrong Session vulnerability in Apache Camel AS2 component. This issue affects Apache Camel:

来源摘录 · NVD

漏洞预警2026-10-19 发布MEDIUM

Insertion of Sensitive Information into Log File vulnerability in Apache Camel MLLP component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.2...

CVE-2026-85260

Insertion of Sensitive Information into Log File vulnerability in Apache Camel MLLP component. This issue affects Apach

来源摘录 · NVD

漏洞预警2026-10-19 发布MEDIUM

Generation of Error Message Containing Sensitive Information vulnerability in Apache Camel CXF component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0...

CVE-2026-85257

Generation of Error Message Containing Sensitive Information vulnerability in Apache Camel CXF component. This issue af

来源摘录 · NVD

漏洞预警2026-10-19 发布MEDIUM

Improper Handling of Case Sensitivity vulnerability in Apache Camel Platform HTTP component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22....

CVE-2026-85254

Improper Handling of Case Sensitivity vulnerability in Apache Camel Platform HTTP component. This issue affects Apache

来源摘录 · NVD