Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware ...
CVE-2026-60373
Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Third
#severity:high
共收录 5441 条相关情报。
← 返回所有主题Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware ...
CVE-2026-60370
Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Third
Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware ...
CVE-2026-60368
Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Third
Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware ...
CVE-2026-60371
Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Third
JupyterLab: Cross-site scripting (XSS) via crafted settings file (`overrides.json`)
JupyterLab 4.5+ allows notebook settings to be shared and applied through an `overrides.json` file using the `Import` bu
JupyterLab: Image viewer allows XSS when opening malicious image in new browser tab
JupyterLab's image viewer allows for cross-site scripting (XSS) when a specially-crafted image file is opened through th
Next.js: Server-Side Request Forgery in Server Actions on custom servers
CVE-2026-64649
## Impact When a Server Action forwards or redirects a request, an attacker can cause the server to send that outbound
Next.js: Server-Side Request Forgery in rewrites via attacker-controlled destination hostname
CVE-2026-64645
## Impact A `rewrites()` or `redirects()` rule that builds its external destination hostname from request-controlled in
Next.js: Middleware / Proxy bypass in App Router applications using Turbopack and single locale
CVE-2026-64642
## Impact Crafted requests targeting Next.js applications using App Router built with Turbopack and a **single** entry
Next.js: Denial of Service in App Router using Server Actions
CVE-2026-64641
## Impact Crafted requests targeting Next.js applications using App Router with at least one Server Action can lead to
Eclipse Jetty: DoS attack triggering OutOfMemory with 100-Continue requests
CVE-2024-7708
### Impact The original report: > Server handling of 100-Continue requests can lead to memory leak that can be abused t
Eclipse Jetty Digest Authentication: ISO-8859-1 lossy encoding allows authentication bypass via character substitution
CVE-2026-10050
### Summary The `DigestAuthentication.apply()` method in Jetty's HTTP client uses `getBytes(StandardCharsets.ISO_8859_1)
LiteLLM: MCP Authentication Bypass via OAuth2 Passthrough Fallback
CVE-2026-59822
### Impact LiteLLM's MCP Streamable HTTP endpoint could allow an unauthenticated attacker to establish an authenticated
n8n: Prototype Pollution via Dot-Notation Field Names Leads To Instance-Wide Denial of Service
## Impact The Edit Fields (Set) node assigned output fields through a dot-notation path setter without restricting the
n8n: Edit Image Node Format Injection Allows Arbitrary File Write
## Impact The n8n Edit Image node passed its output format to the underlying image library without validation, so a cra
n8n: Shared-Workflow Editor Can Exfiltrate Credentials via Inline Sub-Workflow JSON
## Impact n8n's credential-access checks validated only a node's top-level credentials, not credentials referenced insi
n8n: Credential Authorization Bypass via Expression in HTTP Request Node `genericAuthType`
## Impact An authenticated member with edit access to a shared workflow could reference another user's credential in an
n8n: Expression sandbox escape via arrow-function bodies enabling command execution
## Impact An authenticated user with permission to create or modify workflows could abuse crafted expressions using arr
n8n: Send Email Node Arbitrary File Read and SSRF via Nodemailer Content-Object Type Confusion
## Impact The n8n Send Email node did not enforce that its message fields were strings, so a crafted untrusted non-stri
n8n: Authenticated code execution in the n8n Git node
## Impact Authenticated n8n users with rights to create and execute workflows could achieve code execution on the n8n h