#cwe-601

共收录 381 条相关情报。

← 返回所有主题
漏洞预警2026-07-21 发布INFO

Vulnerability in the Oracle Contracts Integration product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. ...

CVE-2026-62444

Vulnerability in the Oracle Contracts Integration product of Oracle E-Business Suite (component: Internal Operations).

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-21 发布INFO

Vulnerability in the Oracle HRMS (Republic of Korea) product of Oracle E-Business Suite (component: Korean Payroll). Supported versions that are affected are 12.2.3-12.2.15. Ea...

CVE-2026-61254

Vulnerability in the Oracle HRMS (Republic of Korea) product of Oracle E-Business Suite (component: Korean Payroll). Su

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-21 发布INFO

URL redirection to untrusted site ('open redirect') vulnerability in Universal Software Inc. FlexCity allows Input Data Manipulation. This issue affects FlexCity: from 5.536.0 ...

CVE-2026-8284

URL redirection to untrusted site ('open redirect') vulnerability in Universal Software Inc. FlexCity allows Input Data

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-21 发布INFO

A vulnerability was found in trinodb trino 481. Affected is an unknown function of the file core/trino-main/src/main/java/io/trino/server/ExternalUriInfo.java of the component O...

CVE-2026-16336

A vulnerability was found in trinodb trino 481. Affected is an unknown function of the file core/trino-main/src/main/jav

历史摘要 · 未重新核验 · NVD

安全公告2026-07-20 发布INFO

@astrojs/node: Backslash-prefixed paths not recognized as internal by trailing-slash redirect

CVE-2026-59730

### Impact With `trailingSlash: 'always'` configured, the `@astrojs/node` standalone server's static file handler appen

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-07-20 发布INFO

cal.diy through 6.2.0 contains an open redirect vulnerability in the conferencing OAuth callback endpoint that allows attackers to redirect users to arbitrary URLs by crafting m...

CVE-2026-63768

cal.diy through 6.2.0 contains an open redirect vulnerability in the conferencing OAuth callback endpoint that allows at

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-20 发布INFO

The Joomla extension Hikashop is vulnerable to an open redirect.

CVE-2026-61901

The Joomla extension Hikashop is vulnerable to an open redirect.

历史摘要 · 未重新核验 · NVD

安全公告2026-07-20 发布INFO

cal.diy 6.2.0 Conferencing OAuth Callback Open Redirect via Unsigned State

CVE-2026-63768

cal.diy through 6.2.0 contains an open redirect vulnerability in the conferencing OAuth callback endpoint that allows at

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-07-20 发布INFO

dataCycle is a data management system for centrally storing, managing, searching, finding, and distributing data. In dataCycle-CORE, the module handling core processing and fram...

CVE-2026-32824

dataCycle is a data management system for centrally storing, managing, searching, finding, and distributing data. In dat

历史摘要 · 未重新核验 · NVD

安全公告2026-07-17 发布INFO

IBM Verify Identity Access 11.0 through 11.0.2 and IBM Security Verify Access 10.0 through 10.0.9...

CVE-2026-7364

IBM Verify Identity Access 11.0 through 11.0.2 and IBM Security Verify Access 10.0 through 10.0.9.1 and IBM Verify Ident

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-17 发布INFO

IBM Engineering AI Hub 1.0.0, 1.1.0, and 1.2.0 could allow a remote attacker to redirect users to...

CVE-2026-15093

IBM Engineering AI Hub 1.0.0, 1.1.0, and 1.2.0 could allow a remote attacker to redirect users to malicious websites due

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-07-17 发布INFO

IBM Verify Identity Access 11.0 through 11.0.2 and IBM Security Verify Access 10.0 through 10.0.9.1 and IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security...

CVE-2026-7364

IBM Verify Identity Access 11.0 through 11.0.2 and IBM Security Verify Access 10.0 through 10.0.9.1 and IBM Verify Ident

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-17 发布INFO

IBM Engineering AI Hub 1.0.0, 1.1.0, and 1.2.0 could allow a remote attacker to redirect users to malicious websites due to improper validation of user-supplied URLs.

CVE-2026-15093

IBM Engineering AI Hub 1.0.0, 1.1.0, and 1.2.0 could allow a remote attacker to redirect users to malicious websites due

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-17 发布INFO

SigNoz through 0.133.0 contains an open redirect vulnerability in the SSO authentication flow that allows unauthenticated attackers to steal session tokens from any user on inst...

CVE-2026-63094

SigNoz through 0.133.0 contains an open redirect vulnerability in the SSO authentication flow that allows unauthenticate

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-16 发布INFO

An Open Redirect vulnerability (CWE-601) exists in the OAuth/OIDC authentication implementation of the Axivion Dashboard. The login flow did not properly restrict the post-authe...

CVE-2026-12379

An Open Redirect vulnerability (CWE-601) exists in the OAuth/OIDC authentication implementation of the Axivion Dashboard

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-15 发布INFO

Redash is a package for data visualization and sharing. From 5.0.2 to 26.3.0, the get_next_path() function in Redash's authentication module stripped the scheme and netloc from ...

CVE-2026-33213

Redash is a package for data visualization and sharing. From 5.0.2 to 26.3.0, the get_next_path() function in Redash's a

历史摘要 · 未重新核验 · NVD

安全公告2026-07-15 发布INFO

Redash: Open redirect vulnerability in post-login redirect handling

CVE-2026-33213

Redash is a package for data visualization and sharing. From 5.0.2 to 26.3.0, the get_next_path() function in Redash's a

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-07-15 发布CRITICAL

The Grav API plugin (grav-plugin-api) before 1.0.4 does not validate the origin of the client-supplied admin_base_url field in the POST /api/v1/auth/forgot-password endpoint. Th...

CVE-2026-61451

The Grav API plugin (grav-plugin-api) before 1.0.4 does not validate the origin of the client-supplied admin_base_url fi

来源摘录 · NVD

安全公告2026-07-15 发布INFO

Grav before 1.0.4 Password Reset Token Poisoning via admin_base_url

CVE-2026-61451

The Grav API plugin (grav-plugin-api) before 1.0.4 does not validate the origin of the client-supplied admin_base_url fi

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-07-14 发布INFO

Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 5.4.53, 6.4.41, 7.4.13, and 8.0.13, UrlGenerator::doGenerate() used st...

CVE-2026-48784

Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 5.4.53, 6.4.4

历史摘要 · 未重新核验 · NVD