VulnWatchVulnerability Intelligence
یادآوری: اطلاعات این سامانه از منابع معرفی‌شده گردآوری می‌شود. پیش از هر اقدام فنی، جزئیات را در منبع اصلی بررسی کنید.
پایگاه اطلاعات امنیتی

آسیب‌پذیری‌ها

آسیب‌پذیری‌ها را بر اساس دسته‌بندی، سازنده، محصول، CVE، شدت، EPSS، اولویت و منبع پیدا کنید.

فیلترهابا انتخاب دسته‌بندی، فهرست سازنده‌ها و محصولات مرتبط هم محدود می‌شود. راهنمای فیلترها

برای محدودکردن نتایج یک یا چند فیلتر را انتخاب کنید و سپس دکمه اعمال فیلتر را بزنید.

پاک کردن همه 288 نتیجه
فیلترهای فعال دسته: control-panels پاک کردن همه
نمای سریع

فیلترهای آماده و نماهای ذخیره‌شده

Critical + KEV High EPSS جدید / ۲۴ ساعت اولویت ۸۵+ تازه‌ترین تغییرات
زیاد CVSS 7.2 EPSS 0.5% اولویت 38

CVE-2026-60910 — CVE-2026-60910 — property manager

Vulnerability in the Oracle Property Manager product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Property Manager. Successful attacks of this vulnerability can result in…

oracle / property manager
2026-07-2122:18
2 منبع · 2 رسمی اعتماد خوب · 70/100 نیازمند توجه · 67/100 داده قدیمی جزئیات و راهکار رفع
زیاد CVSS 8.8 EPSS 0.4% اولویت 45

CVE-2026-60897 — CVE-2026-60897 — payroll

Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Payroll. Successful attacks of this vulnerability can result in takeover of Oracle…

oracle / payroll
2026-07-2122:18
2 منبع · 2 رسمی اعتماد خوب · 70/100 نیازمند توجه · 67/100 داده قدیمی جزئیات و راهکار رفع
زیاد CVSS 7.5 EPSS 0.3% اولویت 39

CVE-2026-60894 — CVE-2026-60894 — payroll

Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Payroll. Successful attacks of this vulnerability can result in takeover of…

oracle / payroll
2026-07-2122:18
2 منبع · 2 رسمی اعتماد خوب · 70/100 نیازمند توجه · 67/100 داده قدیمی جزئیات و راهکار رفع
متوسط CVSS 6.5 EPSS 0.2% اولویت 34

CVE-2026-60893 — CVE-2026-60893 — payroll

Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Payroll executes to compromise Oracle Payroll. While the vulnerability is in Oracle…

oracle / payroll
2026-07-2122:18
2 منبع · 2 رسمی اعتماد خوب · 70/100 نیازمند توجه · 67/100 داده قدیمی جزئیات و راهکار رفع
زیاد CVSS 8.8 EPSS 0.4% اولویت 45

CVE-2026-60890 — CVE-2026-60890 — payroll

Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Payroll. Successful attacks of this vulnerability can result in takeover of Oracle…

oracle / payroll
2026-07-2122:18
2 منبع · 2 رسمی اعتماد خوب · 70/100 نیازمند توجه · 67/100 داده قدیمی جزئیات و راهکار رفع
زیاد CVSS 8.1 EPSS 0.4% اولویت 42

CVE-2026-60877 — CVE-2026-60877 — trade management

Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: Claim LOV). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Trade Management. Successful attacks of this vulnerability can result in…

oracle / trade management
2026-07-2122:18
2 منبع · 2 رسمی اعتماد خوب · 70/100 نیازمند توجه · 67/100 داده قدیمی جزئیات و راهکار رفع
زیاد CVSS 8.1 EPSS 0.4% اولویت 42

CVE-2026-60875 — CVE-2026-60875 — trade management

Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: Claim LOV). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Trade Management. Successful attacks of this vulnerability can result in…

oracle / trade management
2026-07-2122:18
2 منبع · 2 رسمی اعتماد خوب · 70/100 نیازمند توجه · 67/100 داده قدیمی جزئیات و راهکار رفع
متوسط CVSS 6.1 EPSS 0.1% اولویت 32

CVE-2026-60842 — CVE-2026-60842 — knowledge management

Vulnerability in the Oracle Knowledge Management product of Oracle E-Business Suite (component: Search). Supported versions that are affected are 12.2.5-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Knowledge Management. Successful attacks require human interaction from a person…

oracle / knowledge management
2026-07-2122:18
2 منبع · 2 رسمی اعتماد خوب · 70/100 نیازمند توجه · 67/100 داده قدیمی جزئیات و راهکار رفع
متوسط CVSS 5.3 EPSS 0.4% اولویت 29

CVE-2026-47021 — CVE-2026-47021 — jre

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D). Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK: 17.0.19 and 21.0.11; Oracle GraalVM Enterprise Edition: 21.3.18. Easily…

oracle / jre
2026-07-2122:17
2 منبع · 2 رسمی اعتماد خوب · 70/100 نیازمند توجه · 67/100 داده قدیمی جزئیات و راهکار رفع
زیاد CVSS 8.1 EPSS 0.4% اولویت 42

CVE-2026-47014 — CVE-2026-47014 — product workbench

Vulnerability in the Oracle Product Workbench product of Oracle E-Business Suite (component: Security). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Product Workbench. Successful attacks of this vulnerability can result in…

oracle / product workbench
2026-07-2122:17
2 منبع · 2 رسمی اعتماد خوب · 70/100 نیازمند توجه · 67/100 داده قدیمی جزئیات و راهکار رفع
متوسط CVSS 5.3 EPSS 0.4% اولویت 29

CVE-2026-47013 — CVE-2026-47013 — jdk

Vulnerability in Oracle Java SE (component: JavaFX). The supported version that is affected is Oracle Java SE: 8u491. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial…

oracle / jdk
2026-07-2122:17
2 منبع · 2 رسمی اعتماد خوب · 70/100 نیازمند توجه · 67/100 داده قدیمی جزئیات و راهکار رفع
زیاد CVSS 8.8 EPSS 0.7% اولویت 46

CVE-2026-60005 — CVE-2026-60005 — nginx gateway fabric

NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_slice_module module. When the slice directive and unnamed regex captures are configured or when a background cache update happens, unauthenticated attackers can send requests that may cause uninitialized memory access in the NGINX worker process, leading to limited disclosure of memory or…

nginx / nginx f5 / nginx gateway fabric
2026-07-1516:16
2 منبع · 2 رسمی اعتماد خوب · 70/100 نیازمند توجه · 67/100 داده قدیمی جزئیات و راهکار رفع
متوسط CVSS 6.3 EPSS 0.4% اولویت 33

CVE-2026-60065 — CVE-2026-60065 — nginx gateway fabric

When NGINX Plus is configured to use the Message Queuing Telemetry Transport (MQTT) filter module (ngx_stream_mqtt_filter_module), unauthenticated attackers can send requests with conditions beyond the attacker's control to cause a heap buffer over-read in the NGINX worker process, leading to a restart. Impact: This vulnerability may allow remote…

f5 / nginx gateway fabric
2026-07-1515:16
1 منبع · 1 رسمی اعتماد متوسط · 53/100 نیازمند توجه · 60/100 داده قدیمی جزئیات و راهکار رفع
زیاد CVSS 8.3 EPSS 0.5% اولویت 43

CVE-2026-56434 — CVE-2026-56434 — nginx gateway fabric

NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_ssi_module module. This vulnerability may exist when the Server-Side Includes (SSI), proxy_pass, and proxy_buffering off directives are configured. With this configuration, an unauthenticated attacker with man-in-the-middle (MITM) ability to control responses from an upstream server may…

nginx / nginx f5 / nginx gateway fabric
2026-07-1515:16
2 منبع · 2 رسمی اعتماد خوب · 70/100 نیازمند توجه · 67/100 داده قدیمی جزئیات و راهکار رفع
بحرانی CVSS 9.2 EPSS 3.6% اولویت 48

CVE-2026-42533 — CVE-2026-42533 — nginx gateway fabric

nginx security advisories All nginx security issues should be reported via one of the methods listed here. Patches are signed using one of the PGP public keys. Buffer overflow when using map and regexSeverity: majorAdvisoryCVE-2026-42533Not vulnerable: 1.31.3+, 1.30.4+Vulnerable: 0.9.6-1.31.2 Memory disclosure when using ngx_http_slice_moduleSeverity:…

Canonical / Ubuntu nginx / nginx f5 / nginx gateway fabric
2026-07-1515:16
3 منبع · 3 رسمی اعتماد خوب · 62/100 نیازمند توجه · 57/100 در حال قدیمی‌شدن جزئیات و راهکار رفع
نامشخص CISA KEV EPSS 0.8% اولویت 26

CVE-2026-46817 — Oracle E-Business Suite Improper Privilege Management Vulnerability

Oracle E-Business Suite contains an improper privilege management vulnerability that allows an unauthenticated attacker with network access via HTTP to compromise Oracle Payments. Successful attacks of this vulnerability can result in takeover of Oracle Payments.

Oracle / Oracle / E-Business Suite
2026-07-1500:00
3 منبع · 3 رسمی اعتماد خوب · 68/100 نیازمند توجه · 62/100 داده قدیمی جزئیات و راهکار رفع
متوسط CVSS 6.3 EPSS 0.7% اولویت 35

CVE-2026-48142 — CVE-2026-48142 — dos

NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_charset_module module. When content is served or proxied through a location block with both source_charset utf-8; and a charset directive (for example, charset koi8-r;) configured, remote, unauthenticated attackers can send requests (in conjunction with conditions beyond their control) to…

nginx / nginx f5 / dos
2026-06-1715:16
2 منبع · 2 رسمی اعتماد خوب · 70/100 نیازمند توجه · 67/100 داده قدیمی جزئیات و راهکار رفع
بحرانی CVSS 9.2 EPSS 4.0% اولویت 47

CVE-2026-42055 — CVE-2026-42055 — dos

nginx security advisories All nginx security issues should be reported via one of the methods listed here. Patches are signed using one of the PGP public keys. Buffer overflow when using ngx_http_v3_moduleSeverity: mediumAdvisoryCVE-2026-90439Not vulnerable: 1.31.6+, 1.30.5+Vulnerable: 1.29.2-1.31.5 Buffer overflow when using map and regexSeverity:…

nginx / nginx f5 / dos
2026-06-1715:16
3 منبع · 3 رسمی اعتماد قوی · 85/100 کیفیت عالی · 90/100 داده تازه جزئیات و راهکار رفع