176 matches found
secretflow
简体中文｜English SecretFlow is a unified framework for privacy-preserving data intelligence and machine learning. To achieve this goal, it provides: An abstract device layer consists of plain devices and secret devices which encapsulate various cryptographic protocols. A device flow layer modeling...
CVE-2026-49292 Kiwi TCMS: The /init-db/ page renders and responds to requests after first use
Kiwi TCMS is an open source test management system. Prior to 16.0, the unauthenticated /init-db/ page handled by InitDBView in tcms/core/views.py remains reachable after initial setup and proxies repeated requests to Kiwi/manage.py migrate. The migration command is reentrant, so repeated access...
CVE-2026-49292 Kiwi TCMS: The /init-db/ page renders and responds to requests after first use
Kiwi TCMS is an open source test management system. Prior to 16.0, the unauthenticated /init-db/ page handled by InitDBView in tcms/core/views.py remains reachable after initial setup and proxies repeated requests to Kiwi/manage.py migrate. The migration command is reentrant, so repeated access...
EUVD-2026-82384
Kiwi TCMS is an open source test management system. Prior to 16.0, the unauthenticated /init-db/ page handled by InitDBView in tcms/core/views.py remains reachable after initial setup and proxies repeated requests to Kiwi/manage.py migrate. The migration command is reentrant, so repeated access...
EUVD-2026-64917
HCL Hive is affected by a use of vulnerable third-party components which could allow an attacker unauthorized access or compromise of the system by exploiting publicly documented security flaws...
CVE-2026-21752 HCL Hive is affected by a use of vulnerable third-party components
HCL Hive is affected by a use of vulnerable third-party components which could allow an attacker unauthorized access or compromise of the system by exploiting publicly documented security flaws...
CVE-2026-59638 JSSE hostname verifier CN-fallback enabled by default despite documented opt-in
In Bouncy Castle for Java before 1.85, JSSE hostname verifier CN-fallback enabled by default despite documented opt-in. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bctls-fips 1.0.24 1.0.X series, 2.0.24 2.0.X series and 2.1.24...
CVE-2024-38113
creationtimestamp| type| source ---|---|--- 2026-07-29 03:22:02+00:00| seen| https://bsky.app/profile/cybernewsroom.bsky.social/post/3mrqxurhkb523...
CVE-2026-62546
CVE-2026-62546 affects Oracle E-Business Suite Oracle Applications Framework Web Utilities, with vulnerable versions 12.2.8–12.2.15. The issue enables a high-privilege attacker with network access via HTTP to compromise OAF, potentially taking over the Oracle Applications Framework. CVSS 3.1 base...
CVE-2026-61147
...
CVE-2026-61132
Oracle Commerce Platform (Dynamo Application Framework) vulnerability CVE-2026-61132 affects version 11.4.0. A low privileged attacker can exploit over HTTP with network access, and user interaction is required, to potentially gain unauthorized access to critical data and perform unauthorized upd...
CVE-2026-61104
...
CVE-2026-61069
The CVE-2026-61069 describes a vulnerability in Oracle PeopleSoft Enterprise FIN General Ledger Argentina (General Ledger, version 9.1). An attacker with low privileges and network access via HTTP can potentially modify or delete critical data or access all data in the General Ledger, and may cau...
CVE-2026-61064
Oracle iRecruitment in Oracle E-Business Suite (versions 12.2.3–12.2.15) is affected by a vulnerability in the Install/Upgrade Issues component. The issue can be exploited by a low-privileged attacker over HTTP to gain unauthorized update/insert/delete and read access to some iRecruitment data. T...
CVE-2026-61056
CVE-2026-61056 concerns Oracle PeopleSoft Enterprise FIN Grants (component: Grants) with affected version 9.2. The vulnerability allows an unauthenticated, network-accessible attacker (via HTTP) to compromise FIN Grants, potentially performing unauthorized updates, inserts, or deletes on accessib...
CVE-2026-60919
...
CVE-2026-60904
...
CVE-2026-60706
...