CVE-2026-102728
CVE-2026-102728
Two client-side TLS/DTLS handshake parsers in NetX Secure read fields from a server-supplied message before validating t
2026-09-30 归档
今日共收录 1598 条安全情报，包含 728 个 CVE，467 篇安全通告，以及 100 篇研究论文。
← 返回归档列表CVE-2026-102726
CVE-2026-102726
Unbounded PPP IPCP Option Parsing Causes a Worker Stall and Out-of-bounds Read
CVE-2026-102725
CVE-2026-102725
Out-of-bounds Read from Unvalidated MSRP Attribute List Length
CVE-2026-102724
CVE-2026-102724
NULL Pointer Dereference When Evicting the Sole MSRP Attribute
CVE-2026-102723
CVE-2026-102723
NULL Pointer Dereference on MSRP Attribute Table Exhaustion
CVE-2026-102722
CVE-2026-102722
In the IPv4 PASV path, the FTP Client accepts whatever address was sent in the server's `227` reply. Validation only cov
Path Traversal via Symlink Following in allowedLocalRoots in MCP Toolbox for Databases
CVE-2026-102242
Improper link resolution (CWE-59 / CWE-22) in the allowedLocalRoots path validation in Google MCP Toolbox for Databases
CVE-2026-102721
CVE-2026-102721
A TFTP server that answers with a short ERROR packet makes the client read up to 64 bytes past the received datagram.
CVE-2026-102720
CVE-2026-102720
A DHCP server, or anyone on the LAN who answers a DISCOVER first, can make the client read about a kilobyte past the
CVE-2026-102719
CVE-2026-102719
Predictable DTLS HelloVerifyRequest Cookie in NetX Secure
CVE-2026-102718
CVE-2026-102718
hey, `_nx_snmp_utility_object_id_get` in the NetX Duo SNMP addon does not validate the claimed OID data length agains
CVE-2026-102716
CVE-2026-102716
An unauthenticated client can drain the RTSP server's packet pool with a couple of dozen requests that carry a Sessio
Electron: Sandboxed preload code cache can be poisoned by a compromised renderer
CVE-2026-102677
Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. From 42.3.3 unti
mDNS string-cache lookup matches on slot size, so a peer name aliases a shorter one and the response encoder writes past the packet
CVE-2026-102715
Any host on the LAN can send two mDNS records and make the responder write past the end of its transmit packet. Th
CVE-2026-102712
CVE-2026-102712
On the first DTLS ClientHello, the parser copies a device-claimed session_id length and validates the ciphersuite-lis
CVE-2026-102710
CVE-2026-102710
Attacker model / Preconditions: a loaded `TXM_MODULE_USER_MODE | TXM_MODULE_MEMORY_PROTECTION` module issuing kernel dis
CVE-2026-102709
CVE-2026-102709
Improper validation of non-secure (NS) pointers in multiple TrustZone-M non-secure callable (NSC) entry functions allows
CVE-2026-102762
CVE-2026-102762
The NetX Duo MQTT client leaks the packet carrying a malformed PUBLISH message. Each malformed PUBLISH costs one packet,
CVE-2026-102761
CVE-2026-102761
NetX Duo's WebSocket client resets the unmasking cursor to the first `NX_PACKET` each time it advances through a chained
CVE-2026-102760
CVE-2026-102760
When NetX Secure is built with `NX_SECURE_KEY_CLEAR`, every TLS record sent on an active session is wiped after it has b