Vulnerability in the Oracle Demantra Demand Management product of Oracle Supply Chain (component:...
CVE-2026-62516
Vulnerability in the Oracle Demantra Demand Management product of Oracle Supply Chain (component: Product Security). Su
#severity:high
共收录 5441 条相关情报。
← 返回所有主题Vulnerability in the Oracle Time and Labor product of Oracle E-Business Suite (component:...
CVE-2026-62494
Vulnerability in the Oracle Time and Labor product of Oracle E-Business Suite (component: Internal Operations). Support
Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Internal...
CVE-2026-62493
Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Internal Operations). Supported v
Vulnerability in the Oracle Yard Management product of Oracle E-Business Suite (component:...
CVE-2026-62496
Vulnerability in the Oracle Yard Management product of Oracle E-Business Suite (component: Internal Operations). Suppor
Vulnerability in the Oracle Flow Manufacturing product of Oracle E-Business Suite (component:...
CVE-2026-62497
Vulnerability in the Oracle Flow Manufacturing product of Oracle E-Business Suite (component: Internal Operations). Sup
Vulnerability in the Oracle Process Manufacturing Process Execution product of Oracle E-Business...
CVE-2026-62495
Vulnerability in the Oracle Process Manufacturing Process Execution product of Oracle E-Business Suite (component: Inter
Vulnerability in the Oracle Human Resources product of Oracle E-Business Suite (component:...
CVE-2026-62469
Vulnerability in the Oracle Human Resources product of Oracle E-Business Suite (component: Enterprise Command Center).
Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: Create...
CVE-2026-62472
Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: Create Item Instance). Suppor
Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: Create...
CVE-2026-62473
Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: Create Item Instance). Suppor
Vulnerability in the Oracle Public Sector Payroll product of Oracle E-Business Suite (component:...
CVE-2026-62476
Vulnerability in the Oracle Public Sector Payroll product of Oracle E-Business Suite (component: Internal Operations).
Vulnerability in the Oracle Human Resources product of Oracle E-Business Suite (component:...
CVE-2026-62468
Vulnerability in the Oracle Human Resources product of Oracle E-Business Suite (component: Enterprise Command Center).
Vulnerability in the Oracle Public Sector Financials product of Oracle E-Business Suite ...
CVE-2026-62478
Vulnerability in the Oracle Public Sector Financials product of Oracle E-Business Suite (component: Internal Operations)
fast-uri vulnerable to host confusion via literal backslash authority delimiter
CVE-2026-16221
### Impact `fast-uri` v4.1.0 and earlier do not treat a literal backslash (U+005C) as an authority delimiter. Node's na
sharp inherited vulnerabilities in libvips: CVE-2026-33327, CVE-2026-33328, CVE-2026-35590, CVE-2026-35591
### Impact A number of vulnerabilities, two rated as "High" severity using CVSSv4, have been discovered and fixed in th
fast-xml-parser: Repeated DOCTYPE declarations reset entity expansion limits
### Impact `fast-xml-parser` processes multiple "DOCTYPE" declarations within a single XML document. Each declaration pa
GitPython: Environment-variable exfiltration via os.path.expandvars() on Repo.clone_from() URL
### Summary `Repo.clone_from()` passes the caller-supplied remote URL through `Git.polish_url()`, which on every non-Cyg
gRPC-Go: xDS RBAC and HTTP/2 Vulnerabilities
Multiple security vulnerabilities have been identified and addressed in grpc-go affecting the xDS RBAC authorization eng
jackson-core: Async parser maxNumberLength bypass via chunked digit accumulation (incomplete fix for GHSA-72hv-8253-57qq)
## Summary The fix released in jackson-core `2.18.6` and `2.21.1` for [GHSA-72hv-8253-57qq](https://github.com/FasterXM
Gitea: TOTP TOCTOU race on web 2FA paths + missing replay check on Basic-Auth `X-Gitea-OTP` surface
CVE-2026-20779
### Summary I'm reporting **two related TOTP one-time-use defects** in Gitea that survive the CVE-2021-45331 fix. The 2
Gitea: Improper authorization on OAuth sign-in callback silently re-enables administrator-disabled accounts
CVE-2026-58422
### Summary The OAuth2 sign-in callback in Gitea 1.26.1 unconditionally re-enables a locally-disabled account whenever