#CVE

共收录 70309 条相关情报。

漏洞预警2026-10-20 发布INFO

A2A Java SDK is the official Java SDK for the Agent2Agent (A2A) Protocol. Prior to 1.3.0.Final, RestHandler.parseRequestBody in `transport/rest/src/main/java/org/a2aproject/sdk/...

CVE-2026-111762

A2A Java SDK is the official Java SDK for the Agent2Agent (A2A) Protocol. Prior to 1.3.0.Final, RestHandler.parseRequest

来源摘录 · NVD

#cve #cwe-532

漏洞预警2026-10-20 发布INFO

A2A Java SDK is the official Java SDK for the Agent2Agent (A2A) Protocol. Prior to 1.3.0.Final, BasePushNotificationSender in server-common sends task data to the URL in TaskPus...

CVE-2026-111761

A2A Java SDK is the official Java SDK for the Agent2Agent (A2A) Protocol. Prior to 1.3.0.Final, BasePushNotificationSend

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

漏洞预警2026-10-20 发布INFO

A HID report descriptor is a sequence of items, each declaring in its header how many data bytes follow. The USBX host walks that sequence by advancing over each header and pars...

CVE-2026-96582

A HID report descriptor is a sequence of items, each declaring in its header how many data bytes follow. The USBX host w

历史摘要 · 未重新核验 · NVD

#cve #cwe-125 #cwe-1285

漏洞预警2026-10-20 发布INFO

A VideoStreaming interface reports the size of its whole class-specific descriptor block in the `wTotalLength` field of its input header. The USBX host recorded that figure and ...

CVE-2026-96406

A VideoStreaming interface reports the size of its whole class-specific descriptor block in the `wTotalLength` field of

历史摘要 · 未重新核验 · NVD

#cve #cwe-125

漏洞预警2026-10-20 发布HIGH

Incomplete cleanup vulnerability in Apache Tomcat could cause TLS 1.3 connections to fail intermittently. This issue affects Apache Tomcat: from 11.0.0-M21 through 11.0.26, f...

CVE-2026-93446

Incomplete cleanup vulnerability in Apache Tomcat could cause TLS 1.3 connections to fail intermittently. This issue

来源摘录 · NVD

#cve #cwe-459

漏洞预警2026-10-20 发布INFO

Mounting an attacker-controlled FAT image with fault tolerance enabled causes an out-of-bounds heap write during log replay. The write is attacker-positioned and attacker-valued...

CVE-2026-91041

Mounting an attacker-controlled FAT image with fault tolerance enabled causes an out-of-bounds heap write during log rep

历史摘要 · 未重新核验 · NVD

#cve #cwe-787 #cwe-1284

漏洞预警2026-10-20 发布HIGH

Incomplete cleanup vulnerability in Apache Tomcat allowed an trailer information from a previous request to leak into a subsequent request. This issue affects Apache Tomcat: ...

CVE-2026-88041

Incomplete cleanup vulnerability in Apache Tomcat allowed an trailer information from a previous request to leak into a

来源摘录 · NVD

#cve #cwe-459

漏洞预警2026-10-20 发布HIGH

Time-of-check time-of-use (TOCTOU) race condition vulnerability in Apache Tomcat when creating unix domain sockets for the APR/Native connector allows an unauthorised local user...

CVE-2026-80353

Time-of-check time-of-use (TOCTOU) race condition vulnerability in Apache Tomcat when creating unix domain sockets for t

来源摘录 · NVD

#cve #cwe-367

漏洞预警2026-10-20 发布MEDIUM

Execution After Redirect (EAR) vulnerability in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.26, from 10.1.0-M1 through 10.1.60, from 9.0.0.M1...

CVE-2026-74049

Execution After Redirect (EAR) vulnerability in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 throu

来源摘录 · NVD

#cve #cwe-698

漏洞预警2026-10-20 发布MEDIUM

Not Failing Securely ('Failing Open') vulnerability in Apache Tomcat. If the OpenSSLLifecycleListener is configured to use FIPS mode but FIPS activation fails, Tomcat logs and e...

CVE-2026-74048

Not Failing Securely ('Failing Open') vulnerability in Apache Tomcat. If the OpenSSLLifecycleListener is configured to u

来源摘录 · NVD

#cve #cwe-636

漏洞预警2026-10-20 发布INFO

A weakness has been identified in DrayTek Vigor2960 1.5.1.6 Revision 8218. The impacted element is the function rename_table of the file /cgi-bin/mainfunction.cgi of the compone...

CVE-2026-113396

A weakness has been identified in DrayTek Vigor2960 1.5.1.6 Revision 8218. The impacted element is the function rename_t

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-77

漏洞预警2026-10-20 发布INFO

A security flaw has been discovered in DrayTek Vigor2960 1.5.1.6 Revision 8218. The affected element is the function cgiEscape of the file /cgi-bin/mainfunction.cgi of the compo...

CVE-2026-113395

A security flaw has been discovered in DrayTek Vigor2960 1.5.1.6 Revision 8218. The affected element is the function cgi

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-10-20 发布INFO

A vulnerability was identified in DrayTek Vigor2960 1.5.1.6 Revision 8218. Impacted is the function setSWMProfile of the file /cgi-bin/mainfunction.cgi. The manipulation of the ...

CVE-2026-113394

A vulnerability was identified in DrayTek Vigor2960 1.5.1.6 Revision 8218. Impacted is the function setSWMProfile of the

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-10-20 发布INFO

A vulnerability was determined in DrayTek Vigor2960 1.5.1.6 Revision 8218. This issue affects some unknown processing of the file /cgi-bin/mainfunction.cgi of the component comm...

CVE-2026-113393

A vulnerability was determined in DrayTek Vigor2960 1.5.1.6 Revision 8218. This issue affects some unknown processing of

历史摘要 · 未重新核验 · NVD

#cve #cwe-284 #cwe-434

漏洞预警2026-10-20 发布INFO

Buffer under-read vulnerability in Apache Tomcat meant that a large non-blocking write could result in the response body being split between the current request and the next req...

CVE-2026-103119

Buffer under-read vulnerability in Apache Tomcat meant that a large non-blocking write could result in the response body

历史摘要 · 未重新核验 · NVD

#cve #cwe-127

漏洞预警2026-10-20 发布INFO

Incorrect object recycling and re-use vulnerability in Apache Tomcat affecting HTTP/2 processing of asynchronous servlets can trigger request and/or response mix-up between user...

CVE-2026-101356

Incorrect object recycling and re-use vulnerability in Apache Tomcat affecting HTTP/2 processing of asynchronous servlet

历史摘要 · 未重新核验 · NVD

#cve #cwe-362

漏洞预警2026-10-20 发布HIGH

A missing critical step in authentication vulnerability in Apache Tomcat when the JNDI realm was configured with with a non GSSAPI SASL authentication mechanism allowed attacker...

CVE-2026-101296

A missing critical step in authentication vulnerability in Apache Tomcat when the JNDI realm was configured with with a

来源摘录 · NVD

#cve #cwe-304

漏洞预警2026-10-20 发布HIGH

Nokia 1830 Global Express (GX) is vulnerable to a CLI ACL Bypass vulnerability where a low-privileged authenticated attacker can bypass the SSH isolation mechanism and gain acce...

CVE-2026-34485

Nokia 1830 Global Express (GX) is vulnerable to a CLI ACL Bypass vulnerability where a low-privileged authenticated atta

来源摘录 · NVD

#cve #cwe-284

漏洞预警2026-10-20 发布MEDIUM

Nokia 1830 Global Express GX is vulnerable to a local privilege escalation vulnerability which exists in the administrative shell interface. An authenticated local attacker with...

CVE-2026-34484

Nokia 1830 Global Express GX is vulnerable to a local privilege escalation vulnerability which exists in the administrat

来源摘录 · NVD

#cve #cwe-269

漏洞预警2026-10-20 发布INFO

In Eclipse ioFog Controller versions 3.8.0 through 3.9.1, operator WebSocket upgrades on the exec and log routes do not verify the bearer JWT. The payload is decoded and its gro...

CVE-2026-113620

In Eclipse ioFog Controller versions 3.8.0 through 3.9.1, operator WebSocket upgrades on the exec and log routes do not

历史摘要 · 未重新核验 · NVD

#cve #cwe-347