#CVE

共收录 63861 条相关情报。

← 返回所有主题
漏洞预警2026-10-26 发布MEDIUM

libdwarf through 2.3.3 contains a heap out-of-bounds read vulnerability in dwarf_debug_addr_table() that omits the table starting offset when validating .debug_addr unit length....

CVE-2026-116732

libdwarf through 2.3.3 contains a heap out-of-bounds read vulnerability in dwarf_debug_addr_table() that omits the table

来源摘录 · NVD

漏洞预警2026-10-26 发布MEDIUM

Furnace through 0.6.8.3 contains an out-of-bounds write vulnerability in DivEngine::loadFTM() that allows attackers to corrupt heap memory via an unchecked subsong index in the ...

CVE-2026-116731

Furnace through 0.6.8.3 contains an out-of-bounds write vulnerability in DivEngine::loadFTM() that allows attackers to c

来源摘录 · NVD

漏洞预警2026-10-26 发布INFO

Furnace through 0.6.8.3 contains an out-of-bounds heap read vulnerability in DivEngine::loadFTM() in src/engine/fileOps/ftm.cpp, triggered by an unbounded DPCM note count during...

CVE-2026-116730

Furnace through 0.6.8.3 contains an out-of-bounds heap read vulnerability in DivEngine::loadFTM() in src/engine/fileOps/

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-26 发布LOW

libfvde through 20260923 contains a heap out-of-bounds read vulnerability in libfvde_encrypted_metadata_read_type_0x001a() caused by an unbounded strlen on embedded XML plist da...

CVE-2026-116729

libfvde through 20260923 contains a heap out-of-bounds read vulnerability in libfvde_encrypted_metadata_read_type_0x001a

来源摘录 · NVD

漏洞预警2026-10-26 发布MEDIUM

libfvde through 20260923 contains a heap out-of-bounds read vulnerability in libfvde_encrypted_metadata_read_type_0x0024() because xml_plist_data_size is not checked against the...

CVE-2026-116728

libfvde through 20260923 contains a heap out-of-bounds read vulnerability in libfvde_encrypted_metadata_read_type_0x0024

来源摘录 · NVD

漏洞预警2026-10-26 发布LOW

gbsplay through 0.0.103 contains a heap out-of-bounds read vulnerability in vgm_open() in gbs.c that walks the VGM command stream without bounds checks. Attackers can supply a c...

CVE-2026-116727

gbsplay through 0.0.103 contains a heap out-of-bounds read vulnerability in vgm_open() in gbs.c that walks the VGM comma

来源摘录 · NVD

漏洞预警2026-10-26 发布INFO

Gbsplay through 0.0.103 contains a heap out-of-bounds read vulnerability in gbr_open() in gbs.c that fails to verify file length before scanning the GBR ROM title field. Attacke...

CVE-2026-116726

Gbsplay through 0.0.103 contains a heap out-of-bounds read vulnerability in gbr_open() in gbs.c that fails to verify fil

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-26 发布MEDIUM

gbsplay through 0.0.103 contains an out-of-bounds read vulnerability in mapper_map() in mapper.c that fails to reject ROM bank indexes beyond the ROM size, causing an underflowe...

CVE-2026-116725

gbsplay through 0.0.103 contains an out-of-bounds read vulnerability in mapper_map() in mapper.c that fails to reject RO

来源摘录 · NVD

漏洞预警2026-10-26 发布HIGH

FLTK through 1.4.5 contains an integer overflow vulnerability in Fl_BMP_Image::load_bmp_() that causes undersized pixel buffer allocation from file-supplied width and height. At...

CVE-2026-116724

FLTK through 1.4.5 contains an integer overflow vulnerability in Fl_BMP_Image::load_bmp_() that causes undersized pixel

来源摘录 · NVD

漏洞预警2026-10-26 发布HIGH

FLTK through 1.4.5 contains a stack-based buffer overflow vulnerability in Fl_BMP_Image::load_bmp_() that allows attackers to corrupt stack memory by supplying an oversized BMP ...

CVE-2026-116723

FLTK through 1.4.5 contains a stack-based buffer overflow vulnerability in Fl_BMP_Image::load_bmp_() that allows attacke

来源摘录 · NVD

漏洞预警2026-10-26 发布INFO

compress provides various compression algorithms. Prior to 1.20.2, the zstd DecodeAll and streaming decoder paths can panic when a crafted two-block frame reaches huff0.ReadTabl...

CVE-2026-116591

compress provides various compression algorithms. Prior to 1.20.2, the zstd DecodeAll and streaming decoder paths can pa

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-26 发布MEDIUM

snappy-java is a Java port of the snappy, a fast C++ compresser/decompresser developed by Google. Prior to 1.1.10.9, Snappy.arrayCopy(Object src, int offset, int byteLength, Obj...

CVE-2026-116590

snappy-java is a Java port of the snappy, a fast C++ compresser/decompresser developed by Google. Prior to 1.1.10.9, Sna

来源摘录 · NVD

漏洞预警2026-10-26 发布INFO

Datadog dd-trace-py is the Datadog Python APM client. From 3.13.0 until 4.15.5, the IAST string-processing instrumentation does not properly handle certain internal errors while...

CVE-2026-116589

Datadog dd-trace-py is the Datadog Python APM client. From 3.13.0 until 4.15.5, the IAST string-processing instrumentati

来源摘录 · NVD

漏洞预警2026-10-26 发布INFO

Datadog dd-trace-py is the Datadog Python APM client. From 1.5.0 until 3.19.9 and 4.15.6, the default query-string obfuscation regular expression can exhibit excessive backtrack...

CVE-2026-116588

Datadog dd-trace-py is the Datadog Python APM client. From 1.5.0 until 3.19.9 and 4.15.6, the default query-string obfus

来源摘录 · NVD

漏洞预警2026-10-26 发布INFO

Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (J...

CVE-2026-116587

Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including sup

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-26 发布INFO

Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (J...

CVE-2026-116586

Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including sup

来源摘录 · NVD

漏洞预警2026-10-26 发布INFO

Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (J...

CVE-2026-116585

Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including sup

来源摘录 · NVD

漏洞预警2026-10-26 发布INFO

A security vulnerability has been detected in itsourcecode Online Book Store 1.0. This vulnerability affects unknown code of the file /book.php. The manipulation of the argument...

CVE-2026-116515

A security vulnerability has been detected in itsourcecode Online Book Store 1.0. This vulnerability affects unknown cod

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-26 发布MEDIUM

A weakness has been identified in itsourcecode Airline Reservation System 1.0. This affects an unknown part of the file /book_flight.php. Executing a manipulation of the argumen...

CVE-2026-116514

A weakness has been identified in itsourcecode Airline Reservation System 1.0. This affects an unknown part of the file

来源摘录 · NVD

漏洞预警2026-10-26 发布CRITICAL

A security flaw has been discovered in TOTOLINK A950RG 4.1.2cu.5268_B20221104. Affected by this issue is the function sub_402340 of the file infostat.cgi of the component Device...

CVE-2026-116508

A security flaw has been discovered in TOTOLINK A950RG 4.1.2cu.5268_B20221104. Affected by this issue is the function su

来源摘录 · NVD