共收录 2028 条相关情报。
← 返回所有主题CVE-2026-10152
TaleLin lin-cms-spring-boot 是一个基于 Java 的内容管理系统框架。在版本 0.2.1 及之前，其 Book 端点（位于 BookController.java）存在不正确的访问控制漏洞。攻击者可以远程利用该漏
CVE-2026-47405
### Summary PraisonAI Platform has a broken workspace authorization check that allows any authenticated low-privilege w
CVE-2026-47399
### Summary PraisonAI Platform's workspace-scoped REST routes contain a systemic object-level authorization flaw that a
CVE-2026-47396
### Summary PraisonAI's call server exposes a network-facing agent control API without authentication when `CALL_SERVER
CVE-2026-47255
The current upstream main branch at commit 7e0206d was reviewed, and the fix-first patch set was rebased on 2026-05-18.
CVE-2026-45707
n8n-MCP is an MCP server that provides AI assistants access to n8n node documentation, properties, and operations. Prior
CVE-2026-45043
RustFS is a distributed object storage system built in Rust. Prior to 1.0.0-beta.2, improper validation in the PUT /rust
CVE-2026-49198
Improper access control in the MQTT broker allows wildcard topic subscriptions, exposing all MQTT traffic to unauthorize
CVE-2026-46842
Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. E
CVE-2026-46840
Vulnerability in Oracle REST Data Services (component: Backend-as-a-Service). Supported versions that are affected are
CVE-2026-46839
Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. E
CVE-2026-46828
Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). Supported vers
CVE-2026-46827
Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Self Service Manager). Supported ver
CVE-2026-46824
Vulnerability in the Oracle Universal Work Queue product of Oracle E-Business Suite (component: Work Provider Site Level
CVE-2026-46822
Vulnerability in the Oracle iAssets product of Oracle E-Business Suite (component: Internal Operations). Supported vers
CVE-2026-46821
Vulnerability in the Oracle Financials Common Modules product of Oracle E-Business Suite (component: Common Components).
CVE-2026-46819
Vulnerability in the Oracle Internet Procurement Connector product of Oracle E-Business Suite (component: Internal Opera
CVE-2026-46818
Vulnerability in the Oracle Payments product of Oracle E-Business Suite (component: File Transmission). Supported versi
CVE-2026-46775
Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. E
CVE-2026-35277
Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. E