PocketMine-MP before 3.26.5 Input Validation via Book Pages
CVE-2022-51018
PocketMine-MP before 3.26.5 and 4.0.x before 4.0.5 does not limit book page text length, page count, or author/title len
2026-09-08 归档
今日共收录 1006 条安全情报，包含 268 个 CVE，456 篇安全通告，以及 21 篇研究论文。
← 返回归档列表PocketMine-MP before 3.26.5 and 4.0.5 Denial of Service via Skin Data
CVE-2022-51017
PocketMine-MP versions before 3.26.5 and 4.0.5 fail to validate the length of skin data fields submitted by players, all
PocketMine-MP before 4.0.6 Denial of Service via PlayerActionPacket
CVE-2022-51015
PocketMine-MP before 4.0.6 does not validate facing values in PlayerActionPacket (for START_BREAK and CRACK_BREAK action
PocketMine-MP before 4.0.7 Denial of Service via JSON Decoding
CVE-2022-51014
PocketMine-MP before 4.0.7 contains an unhandled exception vulnerability in the ModalFormResponsePacket handler when pro
PocketMine-MP before 4.2.3 Denial of Service via NBT Metadata
CVE-2022-51013
PocketMine-MP versions before 4.2.3 fail to validate damage metadata values in tool and armor item NBT data received fro
PocketMine-MP before 4.2.9 Denial of Service via NBT Deserialization
CVE-2022-51012
PocketMine-MP versions before 4.2.9 fail to properly validate NBT data types during deserialization of inventory transac
PocketMine-MP before 4.2.10 Denial of Service via Chat Messages
CVE-2022-51011
PocketMine-MP before 4.2.10 fails to validate the total length of incoming chat message blobs before splitting them by n
PocketMine-MP before 4.4.2 Server Crash via Item ID
CVE-2022-51010
PocketMine-MP versions before 4.4.2 fail to properly validate item IDs received from clients in itemstack NBT data. Atta
league/commonmark before 2.9.1 Denial of Service via parsing
CVE-2026-86430
league/commonmark versions before 2.9.1 contain multiple denial of service vulnerabilities in fenced code block detectio
commonmark before 2.9.1 Denial of Service via SmartPunct and Attributes
CVE-2026-86429
The league/commonmark (thephpleague/commonmark) library in versions >= 1.5.0 and < 2.9.1 contains quadratic parsing comp
commonmark 1.5.0 before 2.10.0 Denial of Service via Attributes
CVE-2026-86428
commonmark versions from 1.5.0 before 2.10.0 contain a denial of service vulnerability in the AttributesExtension when p
LibreNMS before 26.8.0 Argument Injection via graph_title
CVE-2026-86427
LibreNMS before 26.8.0 contains an argument injection vulnerability in the graph_title parameter that allows authenticat
LibreNMS before 26.8.0 Authentication Bypass via API Token Type Confusion
CVE-2026-86426
LibreNMS before 26.8.0 contains an authentication bypass vulnerability in the REST API that allows unauthenticated attac
ImageMagick before 7.1.2-30 Heap-use-after-free via Layer
CVE-2026-86425
ImageMagick before 7.1.2-30 and 6.9.x before 6.9.13-55 contains a heap-use-after-free vulnerability in the Layer method
ImageMagick before 7.1.2-30 Path Traversal via TOCTOU Symlink Race
CVE-2026-86424
ImageMagick before 7.1.2-30 and 6.9.13-55 contains a time-of-check-time-of-use (TOCTOU) vulnerability in the video decod
ImageMagick before 7.1.2-30 Heap-use-after-free via GetList
CVE-2026-86423
ImageMagick before 7.1.2-30 and 6.9.x before 6.9.13-55 contains a heap-use-after-free vulnerability in the GetList metho
ImageMagick before 7.1.2-30 Path Policy TOCTOU Symlink Race
CVE-2026-86422
ImageMagick before 7.1.2-30 contains a time-of-check-time-of-use vulnerability in path policy enforcement on Windows tha
ImageMagick before 7.1.2-30 Memory Leak via MSL decoder
CVE-2026-86421
ImageMagick before 7.1.2-30 and 6.9.13-55 contains a memory leak in the MSL image decoder. A crafted MSL image triggers
ImageMagick before 7.1.2-30 Denial of Service Memory Budget
CVE-2026-86420
ImageMagick before 7.1.2-30 and 6.9.13-55 fails to properly lower the memory budget when an operation inside OpenPixelCa
MISP Dashboard Organisation Widgets Bypass Organisation-Index Restrictions and Expose Hidden Organisation Data
CVE-2026-86441
Affected versions of MISP contain inconsistent authorization checks across dashboard widgets that display organisation i