#CVE

共收录 63078 条相关情报。

← 返回所有主题
漏洞预警2026-10-28 发布HIGH

HTTP::Body versions before 1.23_01 for Perl allow memory exhaustion via an unbounded multipart part header block. The multipart parser takes everything up to the first blank li...

CVE-2026-116134

HTTP::Body versions before 1.23_01 for Perl allow memory exhaustion via an unbounded multipart part header block. The m

来源摘录 · NVD

漏洞预警2026-10-28 发布HIGH

HTTP::Body versions before 1.23_01 for Perl allow CPU exhaustion via quadratic rescanning of a multipart body with a missing or malformed boundary. Before the first part, and b...

CVE-2026-116133

HTTP::Body versions before 1.23_01 for Perl allow CPU exhaustion via quadratic rescanning of a multipart body with a mis

来源摘录 · NVD

漏洞预警2026-10-28 发布HIGH

HTTP::Body versions before 1.23_01 for Perl leave the temporary file of an incomplete multipart upload on disk. The multipart parser creates a temporary file as soon as a file ...

CVE-2026-116132

HTTP::Body versions before 1.23_01 for Perl leave the temporary file of an incomplete multipart upload on disk. The mul

来源摘录 · NVD

漏洞预警2026-10-28 发布MEDIUM

HTTP::Body versions before 1.23_01 for Perl allow memory and temporary file exhaustion via an unlimited number of form fields and multipart parts. The urlencoded parser splits ...

CVE-2026-116131

HTTP::Body versions before 1.23_01 for Perl allow memory and temporary file exhaustion via an unlimited number of form f

来源摘录 · NVD

漏洞预警2026-10-28 发布MEDIUM

PostgreSQL Anonymizer contains a vulnerability related to static masking and statistics persistence. Statistics pertaining to the original data remain visible in pg_stats until ...

CVE-2026-110183

PostgreSQL Anonymizer contains a vulnerability related to static masking and statistics persistence. Statistics pertaini

来源摘录 · NVD

漏洞预警2026-10-28 发布MEDIUM

PostgreSQL Anonymizer contains a vulnerability related to the anon.partial() and anon.partial_email() functions. These function can reveal the while data if the data is small en...

CVE-2026-110182

PostgreSQL Anonymizer contains a vulnerability related to the anon.partial() and anon.partial_email() functions. These f

来源摘录 · NVD

漏洞预警2026-10-28 发布MEDIUM

PostgreSQL Anonymizer contains a vulnerability related to anonymization functions defined using SQL-standard function bodies. PostgreSQL analyses such functions at declaration t...

CVE-2026-110181

PostgreSQL Anonymizer contains a vulnerability related to anonymization functions defined using SQL-standard function bo

来源摘录 · NVD

漏洞预警2026-10-28 发布MEDIUM

PostgreSQL Anonymizer doesn't mask data returned by a sub-query in a rule. The problem is resolved in PostgreSQL Anonymizer 3.3.0 and later versions.

CVE-2026-105620

PostgreSQL Anonymizer doesn't mask data returned by a sub-query in a rule. The problem is resolved in PostgreSQL Anonymi

来源摘录 · NVD

漏洞预警2026-10-28 发布MEDIUM

PostgreSQL Anonymizer doesn't mask data accessed thru a security_invoker view. The problem is resolved in PostgreSQL Anonymizer 3.3.0 and later versions.

CVE-2026-105619

PostgreSQL Anonymizer doesn't mask data accessed thru a security_invoker view. The problem is resolved in PostgreSQL Ano

来源摘录 · NVD

漏洞预警2026-10-28 发布MEDIUM

PostgreSQL Anonymizer's documentation recommends applying rules on partitions and inheritance tables. Direct access to the paritions / inheritance tables is masked but not thru ...

CVE-2026-105618

PostgreSQL Anonymizer's documentation recommends applying rules on partitions and inheritance tables. Direct access to t

来源摘录 · NVD

漏洞预警2026-10-28 发布MEDIUM

PostgreSQL Anonymizer doesn't invalidate plans prepared after a rule was added or a role changed. Users using such plans can still see the unmasked data until the end of the ses...

CVE-2026-105617

PostgreSQL Anonymizer doesn't invalidate plans prepared after a rule was added or a role changed. Users using such plans

来源摘录 · NVD

漏洞预警2026-10-28 发布MEDIUM

PostgreSQL restricts acces to the salt and shift via the `SHOW` command for users not member of `pg_read_all_settings`. But they are visible in `pg_db_role_setting` or `pg_roles...

CVE-2026-105616

PostgreSQL restricts acces to the salt and shift via the `SHOW` command for users not member of `pg_read_all_settings`.

来源摘录 · NVD

漏洞预警2026-10-28 发布LOW

PostgreSQL's optimized statistics on a table are visible as long as you have SELECT privilege on said table. A masked role can therefore read a limited subset of the data throug...

CVE-2026-105615

PostgreSQL's optimized statistics on a table are visible as long as you have SELECT privilege on said table. A masked ro

来源摘录 · NVD

漏洞预警2026-10-28 发布MEDIUM

PostgreSQL Anonymizer's `anon.image_blur()` function doesn't check the declared dimension of the provided image, allowing an attacker to provide a small image with enormous decl...

CVE-2026-105614

PostgreSQL Anonymizer's `anon.image_blur()` function doesn't check the declared dimension of the provided image, allowin

来源摘录 · NVD

漏洞预警2026-10-28 发布MEDIUM

PostgreSQL Anonymizer's range-based dummy functions dont constraint the range size. This vulnerability can be exploited to exhaust the memory of a backend and OOM-kill it (when ...

CVE-2026-105613

PostgreSQL Anonymizer's range-based dummy functions dont constraint the range size. This vulnerability can be exploited

来源摘录 · NVD

漏洞预警2026-10-28 发布LOW

PostgreSQL Anonymizer contains a vulnerability that data-modifying CTEs to bypass the read-only restriction of masked roles. The problem is resolved in PostgreSQL Anonymizer 3.3...

CVE-2026-105612

PostgreSQL Anonymizer contains a vulnerability that data-modifying CTEs to bypass the read-only restriction of masked ro

来源摘录 · NVD

漏洞预警2026-10-28 发布MEDIUM

A use after free caused by missing lifecycle management of gesture sprites in GestureBuildSprite() in X.Org X Server before 21.1.25 and XWayland before 24.1.14 could be used by ...

CVE-2026-93536

A use after free caused by missing lifecycle management of gesture sprites in GestureBuildSprite() in X.Org X Server bef

来源摘录 · NVD

漏洞预警2026-10-28 发布INFO

A buffer overread in CheckKeySyms() in X.Org X Server before 21.1.25 and XWayland before 24.1.14 could be used by authenticated X clients to leak small amounts of information fr...

CVE-2026-93524

A buffer overread in CheckKeySyms() in X.Org X Server before 21.1.25 and XWayland before 24.1.14 could be used by authen

来源摘录 · NVD

漏洞预警2026-10-28 发布HIGH

A heap buffer overflow caused by a XIPassiveUngrabDevice request with an out-of-range modifier value in X.Org X Server before 21.1.15 and XWayland before 24.1.14 could be used b...

CVE-2026-93523

A heap buffer overflow caused by a XIPassiveUngrabDevice request with an out-of-range modifier value in X.Org X Server b

来源摘录 · NVD

漏洞预警2026-10-28 发布HIGH

A user with query access to an Azure Monitor data source in Grafana can cause server-side requests to an attacker-controlled endpoint that disclose the data source's Azure acces...

CVE-2026-88967

A user with query access to an Azure Monitor data source in Grafana can cause server-side requests to an attacker-contro

来源摘录 · NVD