Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web...
CVE-2026-73924
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). The supported ver
#severity:critical
共收录 1468 条相关情报。
← 返回所有主题Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web...
CVE-2026-73922
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). The supported ver
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web...
CVE-2026-73921
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). The supported ver
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web...
CVE-2026-73920
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). The supported ver
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web...
CVE-2026-73917
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). The supported ver
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web...
CVE-2026-73916
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). The supported ver
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web...
CVE-2026-73912
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). The supported ver
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web...
CVE-2026-73905
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). The supported ver
Froxlor: Credential and 2FA secret disclosure via Froxlor API endpoints
CVE-2026-62988
## Summary Several Froxlor API command classes return sensitive authentication material in JSON API responses. The affe
jmespath.php has CompilerRuntime code injection via unescaped function names
CVE-2026-54133
## Impact `mtdowling/jmespath.php` can generate and execute attacker-controlled PHP code when `JmesPath\CompilerRuntime
surfio has an out-of-bounds read
CVE-2026-55211
### Impact Prior to version 0.0.19, surfio would not correctly validate size fields in irap files, leading to a buffer o
resdata has Classic Buffer Overflow, Improper Validation of Array Index, NULL Pointer Dereference and Out-of-bounds Read
CVE-2026-55209
### Impact Prior to version 6.2.9 resdata would not correctly validate input in GRDECL files. The severity rating assume
kobako Sandbox Escape: guest eval reaches host RCE via method_missing → public_send (any bound Service)
CVE-2026-55107
### Summary A guest mruby script running inside the Kobako sandbox can execute arbitrary Ruby in the host process, fully
MLflow: Unauthenticated full-read SSRF in webhook delivery: _validate_webhook_url bypassed via unvalidated HTTP redirects (and DNS rebinding)
CVE-2026-64849
### Summary The default MLflow Tracking Server (`mlflow server`, no authentication, default SQLite backend) exposes the
MemOS is a memory operating system for LLMs and AI agents. In deployments where authentication is...
CVE-2026-75110
MemOS is a memory operating system for LLMs and AI agents. In deployments where authentication is enabled (AUTH_ENABLED=
OpnForm derives editable-submission secrets from sequential row identifiers using Hashids with an...
CVE-2026-75106
OpnForm derives editable-submission secrets from sequential row identifiers using Hashids with an empty default salt, al
A flaw was found in the managedcluster-import-controller. The Certificate Signing Request (CSR)...
CVE-2026-66795
A flaw was found in the managedcluster-import-controller. The Certificate Signing Request (CSR) auto-approval logic impr
A flaw was found in acm-search-v2-rhel9. This vulnerability allows an authenticated attacker,...
CVE-2026-71472
A flaw was found in acm-search-v2-rhel9. This vulnerability allows an authenticated attacker, such as a hub administrato
vm2: NodeVM `builtin: ['*']` exposes `os` and `dns` — process-wide observability reads AND writes that hijack the host (sibling class of GHSA-9g8x-92q2-p28f)
# NodeVM `builtin: ['*']` exposes `os` and `dns` — process-wide observability reads AND writes that hijack the host (sib
vm2: Sandbox Breakout Using Dangerous Host Proto Mutators
CVE-2026-47698
### Summary VM2 suffers from a sandbox breakout vulnerability. This allows attackers to write code which can escape fro