#cwe-306

共收录 1261 条相关情报。

← 返回所有主题

漏洞预警2026-07-21 发布INFO

Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer). Supported versions that are affected are 12.2.3-12.2.15. Diff...

CVE-2026-61247

Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer). Supp

历史摘要 · 未重新核验 · NVD

#cve #cwe-306 #cwe-400

漏洞预警2026-07-21 发布INFO

Vulnerability in the PeopleSoft Enterprise FIN Manufacturing Brazil product of Oracle PeopleSoft (component: Integration). The supported version that is affected is 9.1. Easil...

CVE-2026-61245

Vulnerability in the PeopleSoft Enterprise FIN Manufacturing Brazil product of Oracle PeopleSoft (component: Integration

历史摘要 · 未重新核验 · NVD

#cve #cwe-284 #cwe-306

漏洞预警2026-07-21 发布INFO

Vulnerability in the PeopleSoft Enterprise FIN Common Objects Argentina product of Oracle PeopleSoft (component: Staffing). The supported version that is affected is 9.1. Easi...

CVE-2026-61243

Vulnerability in the PeopleSoft Enterprise FIN Common Objects Argentina product of Oracle PeopleSoft (component: Staffin

历史摘要 · 未重新核验 · NVD

#cve #cwe-269 #cwe-284 #cwe-287 #cwe-306

漏洞预警2026-07-21 发布INFO

Vulnerability in the PeopleSoft Enterprise FIN Common Objects Argentina product of Oracle PeopleSoft (component: eProcurement). The supported version that is affected is 9.1. ...

CVE-2026-61239

Vulnerability in the PeopleSoft Enterprise FIN Common Objects Argentina product of Oracle PeopleSoft (component: eProcur

历史摘要 · 未重新核验 · NVD

#cve #cwe-284 #cwe-306

漏洞预警2026-07-21 发布INFO

Vulnerability in the PeopleSoft Enterprise FIN Common Objects Brazil product of Oracle PeopleSoft (component: Integration). The supported version that is affected is 9.1. Easi...

CVE-2026-61233

Vulnerability in the PeopleSoft Enterprise FIN Common Objects Brazil product of Oracle PeopleSoft (component: Integratio

历史摘要 · 未重新核验 · NVD

#cve #cwe-200 #cwe-284 #cwe-287 #cwe-306

漏洞预警2026-07-21 发布INFO

Vulnerability in the Oracle Communications Converged Application Server product of Oracle Communications (component: Core). Supported versions that are affected are 8.2 and 8....

CVE-2026-61225

Vulnerability in the Oracle Communications Converged Application Server product of Oracle Communications (component: Cor

历史摘要 · 未重新核验 · NVD

#cve #cwe-269 #cwe-287 #cwe-306

漏洞预警2026-07-21 发布INFO

Vulnerability in the PeopleSoft Enterprise FIN Expenses product of Oracle PeopleSoft (component: Expenses). The supported version that is affected is 9.2. Easily exploitable v...

CVE-2026-61203

Vulnerability in the PeopleSoft Enterprise FIN Expenses product of Oracle PeopleSoft (component: Expenses). The suppor

历史摘要 · 未重新核验 · NVD

#cve #cwe-269 #cwe-284 #cwe-306

漏洞预警2026-07-21 发布INFO

Vulnerability in the PeopleSoft Enterprise CRM Common Objects product of Oracle PeopleSoft (component: Common Objects). The supported version that is affected is 9.2.23. Diffi...

CVE-2026-61201

Vulnerability in the PeopleSoft Enterprise CRM Common Objects product of Oracle PeopleSoft (component: Common Objects).

历史摘要 · 未重新核验 · NVD

#cve #cwe-269 #cwe-284 #cwe-306

漏洞预警2026-07-21 发布INFO

Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0...

CVE-2026-61196

Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI). Supported

历史摘要 · 未重新核验 · NVD

#cve #cwe-306

漏洞预警2026-07-21 发布INFO

An issue in exo-explore exo 1.0.69 allows a remote attacker to escalate privileges via the GET /state and DELETE /instance/{instance_id} endpoints with no authentication.

CVE-2026-50759

An issue in exo-explore exo 1.0.69 allows a remote attacker to escalate privileges via the GET /state and DELETE /instan

历史摘要 · 未重新核验 · NVD

#cve #cwe-306

漏洞预警2026-07-21 发布INFO

Nhost is an open source Firebase alternative with GraphQL. In versions of Nhost CLI prior to 1.46.0, the hidden `nhost configserver` used by `nhost dev` exposes the Mimir GraphQ...

CVE-2026-47671

Nhost is an open source Firebase alternative with GraphQL. In versions of Nhost CLI prior to 1.46.0, the hidden `nhost c

历史摘要 · 未重新核验 · NVD

#cve #cwe-306

安全公告2026-07-21 发布INFO

Nhost CLI local configserver allows cross-origin unauthenticated read/write access to local development configuration and secrets

CVE-2026-47671

Nhost is an open source Firebase alternative with GraphQL. In versions of Nhost CLI prior to 1.46.0, the hidden `nhost c

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-306

漏洞预警2026-07-21 发布INFO

The Apple Find My backend service through 2025-12-17 allows an attacker in possession of a valid PET (Private Endpoint Token) to enumerate devices and remove offline devices fro...

CVE-2025-68640

The Apple Find My backend service through 2025-12-17 allows an attacker in possession of a valid PET (Private Endpoint T

历史摘要 · 未重新核验 · NVD

#cve #cwe-287 #cwe-306

漏洞预警2026-07-21 发布INFO

PraisonAI is a multi-agent teams system. Prior to version 4.6.40, PraisonAI's call server exposes a network-facing agent control API without authentication when `CALL_SERVER_TOK...

CVE-2026-47396

PraisonAI is a multi-agent teams system. Prior to version 4.6.40, PraisonAI's call server exposes a network-facing agent

历史摘要 · 未重新核验 · NVD

#cve #cwe-284 #cwe-306

漏洞预警2026-07-21 发布INFO

PraisonAI is a multi-agent teams system. CVE-2026-44338 (GHSA-6rmh-7xcm-cpxj) documents that PraisonAI ships a code-generator (`praisonai.deploy.api.generate_api_server_code`) t...

CVE-2026-47393

PraisonAI is a multi-agent teams system. CVE-2026-44338 (GHSA-6rmh-7xcm-cpxj) documents that PraisonAI ships a code-gene

历史摘要 · 未重新核验 · NVD

#cve #cwe-306 #cwe-1188

漏洞预警2026-07-21 发布INFO

PraisonAI is a multi-agent teams system. Prior to version 4.6.40, PraisonAI's first-party A2A server example exposes an unauthenticated A2A JSON-RPC endpoint and registers a `ca...

CVE-2026-47391

PraisonAI is a multi-agent teams system. Prior to version 4.6.40, PraisonAI's first-party A2A server example exposes an

历史摘要 · 未重新核验 · NVD

#cve #cwe-95 #cwe-306

漏洞预警2026-07-21 发布INFO

Sparkle is a software update framework for macOS. In versions up to and including 2.9.1, `Autoupdate/AppInstaller.m`'s `shouldAcceptNewConnection:` only enforces `SUCodeSigningV...

CVE-2026-47122

Sparkle is a software update framework for macOS. In versions up to and including 2.9.1, `Autoupdate/AppInstaller.m`'s `

历史摘要 · 未重新核验 · NVD

#cve #cwe-306 #cwe-441

漏洞预警2026-07-20 发布INFO

AgenticMail gives AI agents real email addresses and phone numbers. In @agenticmail/claudecode prior to version 0.2.39, @agenticmail/codex prior to version 0.1.33, @agenticmail/...

CVE-2026-57495

AgenticMail gives AI agents real email addresses and phone numbers. In @agenticmail/claudecode prior to version 0.2.39,

历史摘要 · 未重新核验 · NVD

#cve #cwe-306

漏洞预警2026-07-20 发布INFO

xrdp is an open source RDP server. In versions 0.10.6 and prior, when an authenticated user session is initialized using the Xvnc backend over UNIX domain sockets, the Xvnc proc...

CVE-2026-55626

xrdp is an open source RDP server. In versions 0.10.6 and prior, when an authenticated user session is initialized using

历史摘要 · 未重新核验 · NVD

#cve #cwe-287 #cwe-306

漏洞预警2026-07-20 发布INFO

WhatsApp MCP Server is a Model Context Protocol (MCP) server for WhatsApp, enabling Claude to read and send WhatsApp messages. Prior to version 0.2.1, the `whatsapp-bridge` HTTP...

CVE-2026-46555

WhatsApp MCP Server is a Model Context Protocol (MCP) server for WhatsApp, enabling Claude to read and send WhatsApp mes

历史摘要 · 未重新核验 · NVD

#cve #cwe-22 #cwe-306 #cwe-346