2133 matches found
CVE-2026-66141
Exim before 4.99.5 allows .forward privilege escalation because forcecommand for a pipe transport is mishandled...
CVE-2026-60825
CVE-2026-60825 affects Oracle iSupport within Oracle E-Business Suite (component: Internal Operations). Affected are EBS versions 12.2.3–12.2.15. The vulnerability is exploitable by a high-privilege attacker over HTTP with network access and can lead to takeover of Oracle iSupport. CVSS 3.1 base ...
CVE-2026-60430
CVE-2026-60430 affects Oracle Unified Directory (OUD Core) in Oracle Fusion Middleware. Affects versions 12.2.1.4.0 and 14.1.2.1.0 are vulnerable to a network-accessible LDAP flaw that a low-privileged attacker can exploit to take over OUD. The CVSS 3.1 base score is 8.8 (HIGH) with impacts to co...
CVE-2026-60395
CVE-2026-60395 concerns Oracle GoldenGate (Admin Server Executable). Affected versions are 19.1.0.0.0–19.30.0.0, 21.3–21.21, and 23.4–23.26.1. The vulnerability can be exploited by a low-privileged attacker with network access via HTTP to gain unauthorized read access to a subset of GoldenGate da...
CVE-2026-46969
...
CVE-2026-46904
Technical details are not publicly available in the provided documents. Monitor for updates.
CVE-2026-46768
...
Microsoft Azure 资源管理错误漏洞
Microsoft Azure is an open enterprise-level cloud computing platform provided by the American company Microsoft. There is a resource management vulnerability in Microsoft Azure. Currently, there is no information regarding this vulnerability. Please stay informed by following CNNVD or the vendor’...
CVE-2026-43287
A flaw was found in the Linux kernel. An unprivileged local user can exploit a vulnerability in the DRMIOCTLMODECREATEPROPBLOB function, which allows for the allocation of arbitrary-sized property blobs in kernel memory. This memory is not properly accounted for, leading to unbounded kernel memor...
CVE-2025-48651
In importWrappedKey of KMKeymasterApplet.java, there is a possible way access keys that should be restricted due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-32908
This CVE ID has been rejected...
CVE-2026-32609
Glances is an open-source system cross-platform monitoring tool. The GHSA-gh4x fix commit 5d3de60 addressed unauthenticated configuration secrets exposure on the /api/v4/config endpoints by introducing asdictsecure redaction. However, the /api/v4/args and /api/v4/args/item endpoints were not...
ChurchCRM 跨站脚本漏洞
ChurchCRM is ChurchCRM open source an open source CRM system for churches. ChurchCRM suffers from a cross-site scripting vulnerability that originates from an authenticated user being able to store a JavaScript payload, no details of the vulnerability are provided at this time...
CVE-2026-23184
In the Linux kernel, the following vulnerability has been resolved: binder: fix UAF in bindernetlinkreport Oneway transactions sent to frozen targets via binderproctransaction return a BRTRANSACTIONPENDINGFROZEN error but they are still treated as successful since the target is expected to thaw a...
CVE-2025-71220
In the Linux kernel, the following vulnerability has been resolved: smb/server: call ksmbdsessionrpcclose on error path in createsmb2pipe When ksmbdiovpinrsp fails, we should call ksmbdsessionrpcclose...