#CVE

共收录 62800 条相关情报。

漏洞预警2026-10-30 发布HIGH

ag-psd is a JavaScript library for reading and writing Photoshop Document files. Before the allocation-limit remediation attempt in version 31.0.0, `readPsd()` commits image and...

CVE-2026-62297

ag-psd is a JavaScript library for reading and writing Photoshop Document files. Before the allocation-limit remediation

来源摘录 · NVD

#cve #cwe-789

漏洞预警2026-10-30 发布MEDIUM

LibreDWG is a free C library to read and write DWG files. Prior to 0.14, a specially crafted R13-R2000 DWG can trigger algorithmic resource exhaustion in `decode_R13_R2000` in `...

CVE-2026-62254

LibreDWG is a free C library to read and write DWG files. Prior to 0.14, a specially crafted R13-R2000 DWG can trigger a

来源摘录 · NVD

#cve #cwe-400 #cwe-789

漏洞预警2026-10-30 发布MEDIUM

LibreDWG is a free C library to read and write DWG files. Prior to 0.14.8413, a crafted pre-R13 DWG can make `decode_preR13_entities()` in `src/decode.c` enter a nonterminating ...

CVE-2026-62250

LibreDWG is a free C library to read and write DWG files. Prior to 0.14.8413, a crafted pre-R13 DWG can make `decode_pre

来源摘录 · NVD

#cve #cwe-400 #cwe-835

漏洞预警2026-10-30 发布MEDIUM

Picotls is a TLS protocol library that allows users select different crypto backends based on their use case. In affected revisions through 44bc503, when picotls is used as a `c...

CVE-2026-59993

Picotls is a TLS protocol library that allows users select different crypto backends based on their use case. In affecte

来源摘录 · NVD

#cve #cwe-476

漏洞预警2026-10-30 发布HIGH

Filecoin Pin is an IPFS Pinning Service API implementation that pins to Filecoin's PDP service. Prior to 1.1.0, the upload GitHub Action's fork detection in `upload-action/src/b...

CVE-2026-58412

Filecoin Pin is an IPFS Pinning Service API implementation that pins to Filecoin's PDP service. Prior to 1.1.0, the uplo

来源摘录 · NVD

#cve #cwe-863

漏洞预警2026-10-30 发布LOW

LibreDWG is a free C library to read and write DWG files. Prior to 0.14, `bit_TV_to_utf8()` in `src/bits.c` can write to the caller-provided `src` buffer despite accepting const...

CVE-2026-54610

LibreDWG is a free C library to read and write DWG files. Prior to 0.14, `bit_TV_to_utf8()` in `src/bits.c` can write to

来源摘录 · NVD / OSV.dev

#advisory #cve #cwe-471 #cwe-703

漏洞预警2026-10-30 发布HIGH

NovumOS is a custom 32-bit operating system written in Zig and x86 Assembly. Prior to version 0.25-beta.1, the `Nova` interpreter runs in Ring 0 with unrestricted kernel-memory ...

CVE-2026-40573

NovumOS is a custom 32-bit operating system written in Zig and x86 Assembly. Prior to version 0.25-beta.1, the `Nova` in

来源摘录 · NVD / OSV.dev

#advisory #cve #cwe-250

漏洞预警2026-10-30 发布MEDIUM

Stirling-PDF is a locally hosted web application that facilitates various operations on PDF files. Prior to 3.0.0, POST /api/v1/ai/tools/create-pdf-from-html-agent accepts attac...

CVE-2026-119343

Stirling-PDF is a locally hosted web application that facilitates various operations on PDF files. Prior to 3.0.0, POST

来源摘录 · NVD

#cve #cwe-73 #cwe-918

漏洞预警2026-10-30 发布MEDIUM

Stirling-PDF is a locally hosted web application that facilitates various operations on PDF files. From 2.13.1 until 2.13.2, the POST /api/v1/convert/svg/pdf endpoint renders at...

CVE-2026-119342

Stirling-PDF is a locally hosted web application that facilitates various operations on PDF files. From 2.13.1 until 2.1

来源摘录 · NVD

#cve #cwe-20 #cwe-22 #cwe-610 #cwe-918

漏洞预警2026-10-30 发布LOW

Tesseract is an open source OCR engine. Prior to 5.5.4, ReadAdaptedClass in src/classify/adaptive.cpp raw-reads an ADAPT_CLASS_STRUCT from a pre-adapted-template .a file without...

CVE-2026-119341

Tesseract is an open source OCR engine. Prior to 5.5.4, ReadAdaptedClass in src/classify/adaptive.cpp raw-reads an ADAPT

来源摘录 · NVD

#cve #cwe-763

漏洞预警2026-10-30 发布MEDIUM

Tesseract is an open source OCR engine. Prior to 5.5.4, GENERIC_2D_ARRAY::DeSerializeSize in src/ccstruct/matrix.h reads matrix dimensions as signed int32_t values and compares ...

CVE-2026-119340

Tesseract is an open source OCR engine. Prior to 5.5.4, GENERIC_2D_ARRAY::DeSerializeSize in src/ccstruct/matrix.h reads

来源摘录 · NVD / OSV.dev

#advisory #cve #cwe-190 #cwe-681

漏洞预警2026-10-30 发布MEDIUM

Tesseract is an open source OCR engine. Prior to 5.5.4, WeightMatrix::DeSerialize trusts a mode byte from a traineddata LSTM network and calls WeightMatrix::DeSerializeOld when ...

CVE-2026-119339

Tesseract is an open source OCR engine. Prior to 5.5.4, WeightMatrix::DeSerialize trusts a mode byte from a traineddata

来源摘录 · NVD

#cve #cwe-20 #cwe-617

漏洞预警2026-10-30 发布INFO

Tesseract is an open source OCR engine. From 5.4.0 until 5.5.4, AppendLinePolygon in src/api/pagerenderer.cpp destroys the caller-owned right-to-left Pta accumulator while recei...

CVE-2026-119338

Tesseract is an open source OCR engine. From 5.4.0 until 5.5.4, AppendLinePolygon in src/api/pagerenderer.cpp destroys t

来源摘录 · NVD / OSV.dev

#advisory #cve #cwe-125 #cwe-415 #cwe-416

漏洞预警2026-10-30 发布INFO

Improper Validation of Certificate with Host Mismatch vulnerability in deadtrickster ssl_verify_fun allows an adversary in the middle to impersonate a TLS peer via a certificate...

CVE-2026-117666

Improper Validation of Certificate with Host Mismatch vulnerability in deadtrickster ssl_verify_fun allows an adversary

来源摘录 · NVD

#cve #cwe-297

漏洞预警2026-10-30 发布INFO

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in phoenixframework phoenix_html allows an attacker who controls attribute nam...

CVE-2026-117645

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in phoenixframework p

来源摘录 · NVD

#cve #cwe-79

漏洞预警2026-10-30 发布INFO

Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-92243. Reason: This candidate is a reservation duplicate of CVE-2026-92243. Notes: All CVE u...

CVE-2026-95673

Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-92243. Reason: This candidate is a

来源摘录 · NVD

#cve

漏洞预警2026-10-30 发布CRITICAL

Stack-based buffer overflow and missing authorization vulnerability in Thales Sentinel Keys Server on Windows allows Overflow Buffers. Sentinel Keys Server does not check the le...

CVE-2026-78403

Stack-based buffer overflow and missing authorization vulnerability in Thales Sentinel Keys Server on Windows allows Ove

来源摘录 · NVD

#cve #cwe-121 #cwe-862

漏洞预警2026-10-30 发布HIGH

Stack-based buffer overflow and out-of-bounds write vulnerability in Thales Sentinel Keys Server on Windows allows Overflow Buffers. Sentinel Keys Server does not check the ...

CVE-2026-78402

Stack-based buffer overflow and out-of-bounds write vulnerability in Thales Sentinel Keys Server on Windows allows Overf

来源摘录 · NVD

#cve #cwe-121 #cwe-787

漏洞预警2026-10-30 发布INFO

SNARK Verifier is a generic (S)NARK verifier. Prior to 0.2.5, the Halo 2 aggregation circuit can mishandle proof points encoded as the point at infinity. `EcPointLoader::multi_s...

CVE-2026-62337

SNARK Verifier is a generic (S)NARK verifier. Prior to 0.2.5, the Halo 2 aggregation circuit can mishandle proof points

来源摘录 · NVD

#cve #cwe-20

漏洞预警2026-10-30 发布INFO

OpenVM is a performant and modular zkVM framework built for customization and extensibility. Before 1.7.0 in the 1.x line and in affected 2.0 and 2.1 prereleases, `OpenVmHalo2Ve...

CVE-2026-62335

OpenVM is a performant and modular zkVM framework built for customization and extensibility. Before 1.7.0 in the 1.x lin

来源摘录 · NVD

#cve #cwe-20