#advisory

共收录 23661 条相关情报。

← 返回所有主题
安全公告2026-09-10 发布INFO

Netty 4.1.133.Final through 4.1.137.Final and 4.2.13.Final through 4.2.17.Final HTTP Request Smuggling via Transfer-Encoding

CVE-2026-89044

Netty versions 4.1.133.Final through 4.1.137.Final and 4.2.13.Final through 4.2.17.Final fail to properly validate the f

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-10 发布INFO

passport-saml-encrypted through 0.1.13 XML Signature Wrapping via Assertion Prepending

CVE-2026-89043

passport-saml-encrypted through 0.1.13 contains an XML signature wrapping vulnerability where signature verification and

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-10 发布INFO

passport-saml-encrypted through 0.1.13 Authentication Bypass via Missing Signature Verification

CVE-2026-89042

passport-saml-encrypted through 0.1.13 makes SAML signature verification conditional on an optional cert option, allowin

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-10 发布INFO

Tesseract: Heap out-of-bounds write in Classify::ReadIntTemplates via unvalidated counts in crafted .traineddata

CVE-2026-88053

Tesseract is an open source OCR engine. In version 5.5.3 and earlier, Classify::ReadIntTemplates in src/classify/intprot

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-10 发布INFO

Tesseract: Heap out-of-bounds write in UNICHARSET::load_via_fgets via count/insert desynchronization

CVE-2026-88052

Tesseract is an open source OCR engine. In version 5.5.3 and earlier, UNICHARSET::load_via_fgets in src/ccutil/unicharse

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-10 发布INFO

Tesseract: Heap out-of-bounds write in GenericVector<T>::read due to independent reserved/size_used_ fields

CVE-2026-88051

Tesseract is an open source OCR engine. In version 5.5.3 and earlier, the callback form of GenericVector::read in src/cc

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-10 发布INFO

Integer overflow in tensor buffer validation in Deep Java Library

CVE-2026-85228

An integer overflow in the tensor buffer validation component in Amazon Deep Java Library (DJL) from 0.13.0 through 0.36

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-10 发布INFO

Tesseract: Out-of-bounds write in UnicharCompress via unvalidated recoder code values

CVE-2026-88050

Tesseract is an open source OCR engine. In version 5.5.3 and earlier, RecodedCharID::DeSerialize in src/ccutil/unicharco

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-10 发布INFO

Tesseract: Heap out-of-bounds write in LSTM::Forward via na_/gate-matrix dimension mismatch

CVE-2026-88049

Tesseract is an open source OCR engine. In version 5.5.3 and earlier, prior .traineddata hardening added bounds checks t

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-10 发布INFO

Tesseract: Heap out-of-bounds write/read in FullyConnected::Forward via layer/weight-matrix dimension mismatch

CVE-2026-88048

Tesseract is an open source OCR engine. In version 5.5.3 and earlier, FullyConnected::DeSerialize in src/lstm/fullyconne

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-10 发布INFO

Tesseract: ReadNormProtos stack buffer overflow

CVE-2026-88047

Tesseract is an open source OCR engine. In version 5.5.3 and earlier, Classify::ReadNormProtos in src/classify/normmatch

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-10 发布INFO

rclone: source object names can escape the configured root on upload

CVE-2026-88046

rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to 1

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-10 发布INFO

rclone: S3 multipart declared-length memory exhaustion

CVE-2026-88045

rclone is a command-line program to sync files and directories to and from different cloud storage providers. From 1.75.

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-10 发布INFO

rclone: RC per-server auth-proxy bypass

CVE-2026-88044

rclone is a command-line program to sync files and directories to and from different cloud storage providers. From 1.70.

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-10 发布INFO

Low-privilege RCE through element-search eager loading

CVE-2026-79987

A remote, authenticated, non-admin Craft CMS Control Panel user with only the accessCp permission can execute operating

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-10 发布INFO

rclone serve s3: --auth-proxy without --auth-key authenticates nobody - full SigV4 signature bypass

CVE-2026-88018

rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to 1

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-10 发布INFO

rclone: FTP cross-session auth-proxy backend confusion

CVE-2026-88017

rclone is a command-line program to sync files and directories to and from different cloud storage providers. From 1.64.

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-10 发布INFO

rclone: Directory metadata (chmod/chown/chtimes) applied through a planted symlink in rclone local --links escapes the destination

CVE-2026-88016

rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to 1

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-10 发布INFO

rclone local: crafted Range request against a translated symlink panics (DoS)

CVE-2026-88015

rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to 1

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-10 发布INFO

rclone archive/zip: Zip Slip via unsanitized zip entry names lets a malicious archive escape its own namespace

CVE-2026-88014

rclone is a command-line program to sync files and directories to and from different cloud storage providers. From 1.72.

历史摘要 · 未重新核验 · OSV.dev