共收录 65074 条相关情报。
← 返回所有主题CVE-2026-61916
Out-of-bounds reads in URL parsing and case-insensitive header lookup in Apache bRPC before version 1.18.0 on platforms
CVE-2026-61902
Apache bRPC versions before 1.18.0 do not consistently enforce the configured max_body_size limit in non-progressive HTT
CVE-2026-59562
Missing authentication for critical function vulnerability in Apache IoTDB. This issue affects Apache IoTDB: from 2.0
CVE-2026-59229
The Legacy Pipe receiver protocol (handshake / sendPipeData) uses a hardcoded SUPER_USER (root) identity when executing
CVE-2026-58064
The Redis protocol implementation in Apache bRPC allowed inline command parsing to allocate and copy the full connection
CVE-2026-56388
The Redis server command parser in Apache bRPC accepts an empty RESP array as a command header. A remote unauthenticated
CVE-2026-56387
The RTMP AMF parser in Apache bRPC accepts AMF string lengths and array counts directly from untrusted input. A remote u
CVE-2026-54427
Uncontrolled recursion in the AMF parser in Apache bRPC < 1.18.0 allows a remote RTMP peer to crash a bRPC process by se
CVE-2026-54426
Uncontrolled recursion in the Redis reply parser in Apache bRPC < 1.18.0 allows a remote Redis server peer to crash a bR
CVE-2026-54425
Uncontrolled recursion in the HTTP/2 HPACK decoder in Apache bRPC before 1.18.0 allows remote attackers to cause denial
CVE-2026-48830
Improper authentication in Apache bRPC through 1.17.0 allows a remote unauthenticated attacker to bypass authentication
CVE-2026-87096
Sensitive information disclosure and manipulation due to improper authorization checks. The following products are affec
CVE-2026-87095
Sensitive information disclosure and manipulation due to improper authorization checks. The following products are affec
CVE-2026-58663
An authentication bypass vulnerability exists in Apache IoTDB's Thrift RPC service This issue affects Apache IoTDB: f
CVE-2026-41114
Uncontrolled Resource Consumption vulnerability in Apache IoTDB JDBC driver. This issue affects Apache IoTDB JDBC dri
CVE-2026-105923
A malicious SVG can trigger an integer overflow which in turn triggers a null-pointer dereference in VectorImage QML Typ
CVE-2026-97206
NLnet Labs Unbound, 1.22.0 up to and including version 1.26.1, contains a DNS-over-QUIC (DoQ) lifetime bug reachable by
CVE-2026-96405
NLnet Labs Unbound up to and including version 1.26.1 limits compression-pointer traversal for each individual domain-na
CVE-2026-70387
Exposed dangerous method or function and Incorrect Authorization vulnerability in OnePlus OxygenOS on Android. The olc2
CVE-2026-70386
Improper neutralization of special elements used in an OS command ('OS command injection') and Missing Authorization vul