Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware ...
CVE-2026-60369
Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Third
#severity:critical
共收录 1468 条相关情报。
← 返回所有主题Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware ...
CVE-2026-60367
Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Third
Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware ...
CVE-2026-60366
Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Third
Verba RAG application version 2.1.3 contains an unauthenticated server-side request forgery...
CVE-2026-65318
Verba RAG application version 2.1.3 contains an unauthenticated server-side request forgery vulnerability that allows un
Verba RAG application version 2.1.3 contains a server-side request forgery vulnerability combined...
CVE-2026-65317
Verba RAG application version 2.1.3 contains a server-side request forgery vulnerability combined with a same-origin mid
Autel Maxi Charger Single firmware through V1.03.51 contains a heap-based buffer overflow in the...
CVE-2026-8987
Autel Maxi Charger Single firmware through V1.03.51 contains a heap-based buffer overflow in the set_ap_param command ha
Autel Maxi Charger Single firmware through V1.03.51 is vulnerable to OS command injection when...
CVE-2026-8986
Autel Maxi Charger Single firmware through V1.03.51 is vulnerable to OS command injection when processing OCPP GetDiagno
Autel Maxi Charger Single firmware through V1.03.51 is vulnerable to OS command injection in the ...
CVE-2026-8985
Autel Maxi Charger Single firmware through V1.03.51 is vulnerable to OS command injection in the /test endpoint exposed
Autel Maxi Charger Single firmware through V1.03.51 allows unauthenticated remote code execution...
CVE-2026-8984
Autel Maxi Charger Single firmware through V1.03.51 allows unauthenticated remote code execution via the service listeni
Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component:...
CVE-2026-62546
Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Web Utilities). Suppo
Vulnerability in the Oracle HRMS (UK) product of Oracle E-Business Suite (component: UK Payroll)....
CVE-2026-62549
Vulnerability in the Oracle HRMS (UK) product of Oracle E-Business Suite (component: UK Payroll). Supported versions th
AVideo before 29.0 contains an incomplete fix for CVE-2026-45578 where execAsync() re-wraps...
CVE-2026-64625
AVideo before 29.0 contains an incomplete fix for CVE-2026-45578 where execAsync() re-wraps escaped commands in double-q
node-tar: Decompression/parse DoS via unlimited input
CVE-2026-59873
### Summary A **Decompression/parse DoS via unlimited input** vulnerability in `node-tar` allows an attacker to exhaust
LightRAG is Vulnerable to Authentication Bypass: hardcoded DEFAULT_TOKEN_SECRET and public /auth-status defeat LIGHTRAG_API_KEY protection
CVE-2026-61740
## Summary When LightRAG is deployed with `LIGHTRAG_API_KEY` set but `AUTH_ACCOUNTS` unset (an officially documented "A
LightRAG: CORS Wildcard + Credentials Enables Any-Origin Credentialed Requests
CVE-2026-61736
### Summary The server defaults to CORS_ORIGINS=* combined with allow_credentials=True. Starlette's CORSMiddleware echoe
VSee Clinic 7.1.26 and VSee Clinic API 1.3.0 exposes cleartext SFTP credentials in the HTTP...
CVE-2026-13380
VSee Clinic 7.1.26 and VSee Clinic API 1.3.0 exposes cleartext SFTP credentials in the HTTP responses of three unauthent
IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated users to escalate privileges to...
CVE-2026-8635
IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated users to escalate privileges to superuser by directly manipul
IBM Langflow OSS 1.0.0 through 1.10.0 contain a critical remote code execution vulnerability in...
CVE-2026-8476
IBM Langflow OSS 1.0.0 through 1.10.0 contain a critical remote code execution vulnerability in the disk-based caching m
IBM Langflow OSS 1.0.0 through 1.10.0 Langflow could allow an attacker to write arbitrary files...
CVE-2026-8859
IBM Langflow OSS 1.0.0 through 1.10.0 Langflow could allow an attacker to write arbitrary files to unintended locations
IBM Langflow OSS 1.0.0 through 1.10.1 contains hard-coded credentials, such as a password or...
CVE-2026-13446
IBM Langflow OSS 1.0.0 through 1.10.1 contains hard-coded credentials, such as a password or cryptographic key, which it