#cwe-601

共收录 381 条相关情报。

← 返回所有主题
漏洞预警2026-10-20 发布HIGH

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Deployment SEC). Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily ...

CVE-2026-91328

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Deployment SEC). Supported

来源摘录 · NVD

漏洞预警2026-10-20 发布MEDIUM

Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: Security Framework). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0....

CVE-2026-91318

Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: Security Framework). Supported v

来源摘录 · NVD

漏洞预警2026-10-20 发布HIGH

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versions that are affected are 9.2.0.0-9....

CVE-2026-91296

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure S

来源摘录 · NVD

漏洞预警2026-10-20 发布INFO

A flaw has been found in Optimal IdM OptimalCloud 5.0. This vulnerability affects unknown code of the file /v5.0/social. Executing a manipulation of the argument state can lead ...

CVE-2026-113384

A flaw has been found in Optimal IdM OptimalCloud 5.0. This vulnerability affects unknown code of the file /v5.0/social.

历史摘要 · 未重新核验 · NVD

安全公告2026-10-19 发布INFO

A vulnerability was determined in diem-project diem up to...

CVE-2026-112040

A vulnerability was determined in diem-project diem up to 116974edfb9a5b8bd69cb13586dc62bcdbb485ad. This affects an unkn

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-19 发布INFO

A weakness has been identified in aircheng-org iWebShop-5 up to 5.16. The impacted element is the...

CVE-2026-112034

A weakness has been identified in aircheng-org iWebShop-5 up to 5.16. The impacted element is the function IController::

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-17 发布INFO

Coder from 2.0.0 before 2.34.8 contains an open redirect vulnerability in handleAPIKeySmuggling...

CVE-2026-111931

Coder from 2.0.0 before 2.34.8 contains an open redirect vulnerability in handleAPIKeySmuggling that allows attackers to

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-17 发布INFO

Coder 2.3.1 before 2.14.4, 2.15.x before 2.15.3, and 2.16.0 before 2.16.1 contains an open...

CVE-2024-58398

Coder 2.3.1 before 2.14.4, 2.15.x before 2.15.3, and 2.16.0 before 2.16.1 contains an open redirect vulnerability in the

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-16 发布INFO

Nezha from 2.1.0 before 2.3.15 contains a host header injection vulnerability in mintTransferTool...

CVE-2026-111385

Nezha from 2.1.0 before 2.3.15 contains a host header injection vulnerability in mintTransferTool that builds fs.downloa

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-14 发布INFO

Apprise forwards configured auth headers across cross-origin HTTP redirects

CVE-2026-59180

# Summary Apprise's HTTP-based notification plugins and its HTTP attachment / config loaders (`apprise/attachment/http.

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-13 发布MEDIUM

Url redirection to untrusted site ('open redirect') in Active Directory Federation Services (AD FS) allows an authorized attacker to perform spoofing over a network.

CVE-2026-83646

Url redirection to untrusted site ('open redirect') in Active Directory Federation Services (AD FS) allows an authorized

来源摘录 · NVD

漏洞预警2026-10-13 发布MEDIUM

Url redirection to untrusted site ('open redirect') in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.

CVE-2026-83500

Url redirection to untrusted site ('open redirect') in Windows BitLocker allows an unauthorized attacker to bypass a sec

来源摘录 · NVD

漏洞预警2026-10-13 发布INFO

Url redirection to untrusted site ('open redirect') in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.

CVE-2026-103576

Url redirection to untrusted site ('open redirect') in Active Directory Federation Services (AD FS) allows an unauthoriz

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

Frappe is a full-stack web application framework. Prior to 15.116.0 and 16.29.0, the OAuth login flow uses an unsanitized client-controlled state parameter to select post-authen...

CVE-2026-66057

Frappe is a full-stack web application framework. Prior to 15.116.0 and 16.29.0, the OAuth login flow uses an unsanitize

历史摘要 · 未重新核验 · NVD

安全公告2026-10-13 发布INFO

Frappe: Open Redirect via Unsanitized OAuth State Param.

CVE-2026-66057

Frappe is a full-stack web application framework. Prior to 15.116.0 and 16.29.0, the OAuth login flow uses an unsanitize

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-10-13 发布INFO

A vulnerability was determined in PublicCMS up to 5.202608.a. Affected by this issue is the function SafeConfigComponent.getSafeUrl of the file publiccms-core/src/main/java/com/...

CVE-2026-109160

A vulnerability was determined in PublicCMS up to 5.202608.a. Affected by this issue is the function SafeConfigComponent

历史摘要 · 未重新核验 · NVD

安全公告2026-10-13 发布INFO

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.11 before 19.2.8,...

CVE-2026-7767

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.11 before 19.2.8, 19.3 before 19.3.5, and

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-13 发布INFO

SAP NetWeaver Enterprise Portal does not sufficiently validate input to a certain portal...

CVE-2026-89122

SAP NetWeaver Enterprise Portal does not sufficiently validate input to a certain portal component. An unauthenticated a

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-13 发布INFO

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.11 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could ...

CVE-2026-7767

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.11 before 19.2.8, 19.3 before 19.3.5, and

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

SAP NetWeaver Enterprise Portal does not sufficiently validate input to a certain portal component. An unauthenticated attacker could craft a malicious link that, when clicked b...

CVE-2026-89122

SAP NetWeaver Enterprise Portal does not sufficiently validate input to a certain portal component. An unauthenticated a

历史摘要 · 未重新核验 · NVD