CVE-2026-27454

Discourse is an open-source discussion platform. Prior to versions 2026.3.0-latest.1, 2026.2.1, and 2026.1.2, requesting /posts/:id.json?version=X bypassed authorization checks on post revisions. The displaypost method called post.revertto directly without verifying whether the revision was hidde...

Oracle iPlanet Web Server is vulnerable to cryptographic issues (CNVD-2020-52060)

Oracle iPlanet Web Server OiWS is an American Oracle Oracle company's Web server mainly for medium-sized and large business applications. The Oracle iPlanet Web Server encryption issue vulnerability stems from a program that does not have proper access control for the admui/version URIs. An...