#cwe-400

共收录 1360 条相关情报。

← 返回所有主题
漏洞预警2026-10-20 发布MEDIUM

Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Management). The supported version that i...

CVE-2026-101474

Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Pr

来源摘录 · NVD

漏洞预警2026-10-20 发布MEDIUM

Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues). The supported version that is affected is 3.6.1. Easil...

CVE-2026-101471

Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues).

来源摘录 · NVD

漏洞预警2026-10-20 发布HIGH

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9. Easily exploitab...

CVE-2026-101459

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported v

来源摘录 · NVD

漏洞预警2026-10-20 发布MEDIUM

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Test Framework). Supported versions that are affected are 8.61-8.63. Easily expl...

CVE-2026-101432

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Test Framework). Suppor

来源摘录 · NVD

漏洞预警2026-10-20 发布LOW

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Analytic Server). Supported versions that are affected are 8.61-8.63. Difficult ...

CVE-2026-101415

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Analytic Server). Suppo

来源摘录 · NVD

漏洞预警2026-10-20 发布MEDIUM

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Analytic Server). Supported versions that are affected are 8.61-8.63. Difficult ...

CVE-2026-101412

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Analytic Server). Suppo

来源摘录 · NVD

漏洞预警2026-10-20 发布MEDIUM

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Updates Change Assistant). Supported versions that are affected are 8.61-8.63. E...

CVE-2026-101407

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Updates Change Assistant

来源摘录 · NVD

漏洞预警2026-10-20 发布INFO

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Business Interlink). Supported versions that are affected are 8.61-8.63. Difficu...

CVE-2026-101389

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Business Interlink). Su

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布MEDIUM

Vulnerability in Oracle REST Data Services (component: Database Actions). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows high p...

CVE-2026-101365

Vulnerability in Oracle REST Data Services (component: Database Actions). Supported versions that are affected are 24.2

来源摘录 · NVD

漏洞预警2026-10-20 发布HIGH

markdown-it is a Markdown parser. From versions 14.1.0 to before 14.3.3, and 15.0.0 to before 15.0.3, a link reference definition whose label or title is never closed is O(n²) w...

CVE-2026-111758

markdown-it is a Markdown parser. From versions 14.1.0 to before 14.3.3, and 15.0.0 to before 15.0.3, a link reference d

来源摘录 · NVD

安全公告2026-10-20 发布INFO

Pillow: GIF seek keeps rejected size after DecompressionBombError, allowing DoS

CVE-2026-112400

``` ============================================================================ GIF seek keeps rejected size after Deco

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-20 发布INFO

markdown-it: Quadratic-time rendering of a single multi-line link reference definition with default options (regression since 14.0)

CVE-2026-111758

### Summary A link reference definition whose label or title is never closed is O(n²) in markdown-it 15.0.2 with defaul

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-20 发布INFO

markdown-it: Quadratic-time denial of service in inline HTML parsing with html enabled

CVE-2026-111766

### Summary With `html: true`, markdown-it takes quadratic time to parse repeated unterminated HTML constructs inside a

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-20 发布INFO

AIOHTTP: File descriptor exhaustion in multipart requests

CVE-2026-111066

### Summary An attacker can exhaust file descriptors with specially crafted multipart requests. ### Impact If a handl

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-20 发布INFO

ApostropheCMS is an open-source Node.js content management system. Prior to 4.33.0 of ApostropheCMS and 3.7.0 of the import-export module, import routes invoke bigUploadMiddlewa...

CVE-2026-113711

ApostropheCMS is an open-source Node.js content management system. Prior to 4.33.0 of ApostropheCMS and 3.7.0 of the imp

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

ApostropheCMS is an open-source Node.js content management system. Prior to 1.1.0 of db-connect and 4.33.0 of ApostropheCMS, an account with view-draft access can submit a proje...

CVE-2026-113666

ApostropheCMS is an open-source Node.js content management system. Prior to 1.1.0 of db-connect and 4.33.0 of Apostrophe

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

ApostropheCMS is an open-source Node.js content management system. Prior to 4.33.0, the unauthenticated Rich Text CSV conversion route writes a multipart upload to the system te...

CVE-2026-113658

ApostropheCMS is an open-source Node.js content management system. Prior to 4.33.0, the unauthenticated Rich Text CSV co

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

One logical thread of a user-mode ThreadX module costs the Module Manager's shared object pool two allocations, not one. The module asks for a `TX_THREAD` control block through ...

CVE-2026-95108

One logical thread of a user-mode ThreadX module costs the Module Manager's shared object pool two allocations, not one.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

ApostropheCMS is an open-source Node.js content management system. Prior to 3.7.1 of the import-export module, an authenticated importer can submit archives whose decompressed b...

CVE-2026-112955

ApostropheCMS is an open-source Node.js content management system. Prior to 3.7.1 of the import-export module, an authen

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

filelock is a platform-independent file lock for Python. From 3.20.4 until 4.2.1, ReadWriteLock can open a crafted SQLite lock database without bounding schema and query work, a...

CVE-2026-112915

filelock is a platform-independent file lock for Python. From 3.20.4 until 4.2.1, ReadWriteLock can open a crafted SQLit

历史摘要 · 未重新核验 · NVD