共收录 5559 条相关情报。
← 返回所有主题CVE-2026-59900
Netty's HTTP/2-to-HTTP/1.x translation layer (`Http2StreamFrameToHttpObjectCodec` and `InboundHttp2ToHttpAdapter`) fails
CVE-2026-59899
### Impact `HttpContentEncoder` (the superclass of the production handler `HttpContentCompressor`) maintains a per-chann
CVE-2026-59898
## Summary An attacker can force WebSocket upgrade via the lax V07 (or V08) handshaker by sending `Sec-WebSocket-Version
CVE-2026-56746
### Summary Netty's CorsHandler provides a `shortCircuit()` configuration designed to reject unauthorized cross-origin r
CVE-2026-63143
Missing Authorization (CWE-862) in Kibana can lead to unauthorized information disclosure via Privilege Abuse (CAPEC-122
CVE-2026-63259
Authorization Bypass Through User-Controlled Key (CWE-639) in Kibana can lead to information disclosure via user-supplie
CVE-2026-63260
Uncontrolled Resource Consumption (CWE-400) in Kibana can lead to denial of service via Excessive Allocation (CAPEC-130)
CVE-2026-63145
Incorrect Authorization (CWE-863) in Kibana can lead to integrity compromise of Machine Learning audit and notification
CVE-2026-63142
Incomplete List of Disallowed Inputs (CWE-184) in Kibana can allow an authenticated attacker with access to the Reportin
CVE-2026-63262
Missing Authorization (CWE-862) in Kibana can lead to unauthorized cross-space information disclosure via user-supplied
CVE-2026-63261
Uncontrolled Resource Consumption (CWE-400) in Kibana can lead to denial of service via Excessive Allocation (CAPEC-130)
CVE-2026-63263
Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Exponential Data Expansio
CVE-2026-63144
Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to denial of service via a specially crafted search request s
CVE-2026-63141
Missing Authorization (CWE-862) in Kibana allows an authenticated user to access and modify Cloud Connect configuration
CVE-2026-62562
Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: Internal Operations). Supported ve
CVE-2026-65314
Electric Postgres Sync versions below 1.6.10 contains an information disclosure vulnerability that allows attackers to i
CVE-2026-62563
Vulnerability in the Oracle Work in Process product of Oracle E-Business Suite (component: Internal Operations). Suppor
CVE-2026-62556
Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: Internal Operations). Supported ve
CVE-2026-62527
Vulnerability in the Oracle Learning Management product of Oracle E-Business Suite (component: Import And Export). Supp
CVE-2026-62542
Vulnerability in the Oracle Advanced Benefits product of Oracle E-Business Suite (component: Self Service Benefits). Su