Cloudreve: Information Exposure in `GET /api/v4/user/search`: `SearchActive` omits the active-status predicate, leaking inactive/banned account emails

CVE-2026-55496

## Summary `GET /api/v4/user/search` is available to any logged-in user. The service calls `userClient.SearchActive`,

历史摘要 · 未重新核验 · GitHub Advisory

Exposure of sensitive information to an unauthorized actor in Microsoft Graph allows an...

CVE-2026-49159

Exposure of sensitive information to an unauthorized actor in Microsoft Graph allows an authorized attacker to disclose

历史摘要 · 未重新核验 · GitHub Advisory

ImageMagick: Information Disclosure in MNG decoder because allocated memory is left unchanged

CVE-2026-53467

In the MNG decoder there is a possible heap information disclosure because part of the pixels are left unchanged.

历史摘要 · 未重新核验 · GitHub Advisory

Joomla Extension - joomshaper.com - cross-customer order and personal information disclosure in...

CVE-2026-65760

Joomla Extension - joomshaper.com - cross-customer order and personal information disclosure in Easy Store extension 1.0

历史摘要 · 未重新核验 · GitHub Advisory

PostCSS: Arbitrary file read and information disclosure via attacker-controlled sourceMappingURL in CSS comments

CVE-2026-45623

## Summary PostCSS's `PreviousMap` parses the `/*# sourceMappingURL=PATH */` comment from any CSS string passed to `pro

历史摘要 · 未重新核验 · GitHub Advisory

Eclipse Jetty: Cross-Request Leakage for trailers on HTTP/1.1 keep-alive connections

CVE-2026-10051

### Description > FINDING — MEDIUM (HTTP/1.1 keep-alive connections with trailers) > HttpConnection._trailers Cross-Req

历史摘要 · 未重新核验 · GitHub Advisory

n8n: Send Email Node Arbitrary File Read and SSRF via Nodemailer Content-Object Type Confusion

## Impact The n8n Send Email node did not enforce that its message fields were strings, so a crafted untrusted non-stri

历史摘要 · 未重新核验 · GitHub Advisory

n8n: Shared Credential Header Leak via HTTP Request Pagination Expression

CVE-2026-59209

## Impact An authenticated member with use-only editor access to a shared workflow could read credential-populated heade

历史摘要 · 未重新核验 · GitHub Advisory

Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) an Exposure of Sensitive Information to an Unauthorized Actor vulnerability in the REST API. A high privil...

CVE-2026-44276

Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) an Exposure of Sensitive Information to an Unauth

历史摘要 · 未重新核验 · NVD

There is a information disclosure vulnerability in some Hikvision cameras, allowing unauthenticated attackers to obtain partial information from the device’s memory.

CVE-2026-61392

There is a information disclosure vulnerability in some Hikvision cameras, allowing unauthenticated attackers to obtain

历史摘要 · 未重新核验 · NVD

Vulnerability in the Oracle HRMS (UK) product of Oracle E-Business Suite (component: UK Payroll). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vu...

CVE-2026-62567

Vulnerability in the Oracle HRMS (UK) product of Oracle E-Business Suite (component: UK Payroll). Supported versions th

历史摘要 · 未重新核验 · NVD

Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: US Payroll Year End). Supported versions that are affected are 12.2.3-12.2.15. Easily explo...

CVE-2026-62565

Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: US Payroll Year End). Supported ve

历史摘要 · 未重新核验 · NVD

Vulnerability in the Oracle HRMS (Norway) product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily e...

CVE-2026-62560

Vulnerability in the Oracle HRMS (Norway) product of Oracle E-Business Suite (component: Internal Operations). Supporte

历史摘要 · 未重新核验 · NVD

Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily explo...

CVE-2026-62559

Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: Internal Operations). Supported ve

历史摘要 · 未重新核验 · NVD

Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.6-12.2.15. Easily explo...

CVE-2026-62556

Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: Internal Operations). Supported ve

历史摘要 · 未重新核验 · NVD

Vulnerability in the Oracle HCM Configuration Workbench product of Oracle E-Business Suite (component: Install). Supported versions that are affected are 12.2.3-12.2.15. Easily...

CVE-2026-62528

Vulnerability in the Oracle HCM Configuration Workbench product of Oracle E-Business Suite (component: Install). Suppor

历史摘要 · 未重新核验 · NVD

Vulnerability in the Oracle Learning Management product of Oracle E-Business Suite (component: Import And Export). Supported versions that are affected are 12.2.3-12.2.15. Easi...

CVE-2026-62527

Vulnerability in the Oracle Learning Management product of Oracle E-Business Suite (component: Import And Export). Supp

历史摘要 · 未重新核验 · NVD

Vulnerability in the Oracle Quality product of Oracle E-Business Suite (component: Quality Workbench HTML system). Supported versions that are affected are 12.2.3-12.2.15. Easi...

CVE-2026-62525

Vulnerability in the Oracle Quality product of Oracle E-Business Suite (component: Quality Workbench HTML system). Supp

历史摘要 · 未重新核验 · NVD

Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: US Payroll - General). Supported versions that are affected are 12.2.3-12.2.15. Easily expl...

CVE-2026-62524

Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: US Payroll - General). Supported v

历史摘要 · 未重新核验 · NVD

Vulnerability in the Oracle Succession planning product of Oracle E-Business Suite (component: Succession plan). Supported versions that are affected are 12.2.3-12.2.15. Easily...

CVE-2026-62519

Vulnerability in the Oracle Succession planning product of Oracle E-Business Suite (component: Succession plan). Suppor

历史摘要 · 未重新核验 · NVD