#CVE

共收录 70327 条相关情报。

漏洞预警2026-10-19 发布HIGH

Cpanel::JSON::XS versions from 4.43 before 4.80 for Perl misorder byte-string keys during canonical encoding in utf16_cmp. canonical sorts keys by UTF-16 code units. When any k...

CVE-2026-110687

Cpanel::JSON::XS versions from 4.43 before 4.80 for Perl misorder byte-string keys during canonical encoding in utf16_cm

来源摘录 · NVD

#cve #cwe-176

漏洞预警2026-10-19 发布MEDIUM

Cpanel::JSON::XS versions before 4.80 for Perl use freed filter callbacks when a filter removes itself during decoding in decode_hv. A decode copies the parser's filter_json_ob...

CVE-2026-110686

Cpanel::JSON::XS versions before 4.80 for Perl use freed filter callbacks when a filter removes itself during decoding i

来源摘录 · NVD

#cve #cwe-416

漏洞预警2026-10-19 发布CRITICAL

Cpanel::JSON::XS versions before 4.80 for Perl leak the decoded arguments of a tagged value when its THAW method dies in decode_tag. With allow_tags, a tagged value's class nam...

CVE-2026-110685

Cpanel::JSON::XS versions before 4.80 for Perl leak the decoded arguments of a tagged value when its THAW method dies in

来源摘录 · NVD

#cve #cwe-401

漏洞预警2026-10-19 发布HIGH

Cpanel::JSON::XS versions from 3.0202 before 4.80 for Perl leak memory and retain overloaded objects when encoding values as strings in encode_stringify. encode_stringify write...

CVE-2026-110684

Cpanel::JSON::XS versions from 3.0202 before 4.80 for Perl leak memory and retain overloaded objects when encoding value

来源摘录 · NVD

#cve #cwe-401

漏洞预警2026-10-19 发布HIGH

Cpanel::JSON::XS versions from 4.42 before 4.80 for Perl let input chunking change the decoded value of top-level numbers in incr_parse. allow_nonref is enabled by default and ...

CVE-2026-110682

Cpanel::JSON::XS versions from 4.42 before 4.80 for Perl let input chunking change the decoded value of top-level number

来源摘录 · NVD

#cve #cwe-436

漏洞预警2026-10-19 发布HIGH

Cpanel::JSON::XS versions before 4.80 for Perl use the parent interpreter's scalars from a parser object cloned into a new ithread. A parser object holds its callbacks and its ...

CVE-2026-110681

Cpanel::JSON::XS versions before 4.80 for Perl use the parent interpreter's scalars from a parser object cloned into a n

来源摘录 · NVD

#cve #cwe-416

漏洞预警2026-10-19 发布HIGH

Cpanel::JSON::XS versions from 4.20 before 4.80 for Perl write out of bounds when a tied or shared hash grows during canonical encoding in encode_hv. With canonical, the keys o...

CVE-2026-110680

Cpanel::JSON::XS versions from 4.20 before 4.80 for Perl write out of bounds when a tied or shared hash grows during can

来源摘录 · NVD

#cve #cwe-787

漏洞预警2026-10-19 发布HIGH

Cpanel::JSON::XS versions before 4.80 for Perl allow memory exhaustion by buffering incremental input past max_size in incr_parse. The parser appends each chunk to its buffer. ...

CVE-2026-110678

Cpanel::JSON::XS versions before 4.80 for Perl allow memory exhaustion by buffering incremental input past max_size in i

来源摘录 · NVD

#cve #cwe-770

漏洞预警2026-10-19 发布HIGH

Cpanel::JSON::XS versions from 4.28 before 4.80 for Perl leak the array collecting duplicate key values under dupkeys_as_arrayref in decode_hv. With dupkeys_as_arrayref, the va...

CVE-2026-110677

Cpanel::JSON::XS versions from 4.28 before 4.80 for Perl leak the array collecting duplicate key values under dupkeys_as

来源摘录 · NVD

#cve #cwe-401

漏洞预警2026-10-19 发布HIGH

Cpanel::JSON::XS versions before 4.80 for Perl allow memory exhaustion by encoding exponent notation as full decimal digits under allow_bignum. With allow_bignum, a JSON number...

CVE-2026-110676

Cpanel::JSON::XS versions before 4.80 for Perl allow memory exhaustion by encoding exponent notation as full decimal dig

来源摘录 · NVD

#cve #cwe-405

漏洞预警2026-10-19 发布HIGH

Cpanel::JSON::XS versions from 4.33 before 4.80 for Perl accept malformed UTF-8 in bare hash keys under allow_barekey in decode_hv. With utf8 and allow_barekey, which relaxed e...

CVE-2026-110675

Cpanel::JSON::XS versions from 4.33 before 4.80 for Perl accept malformed UTF-8 in bare hash keys under allow_barekey in

来源摘录 · NVD

#cve #cwe-1286

漏洞预警2026-10-19 发布MEDIUM

Cpanel::JSON::XS versions from 4.33 before 4.80 for Perl miss duplicate non-ASCII bare keys, allowing type confusion under dupkeys_as_arrayref in decode_hv. With allow_barekey,...

CVE-2026-110674

Cpanel::JSON::XS versions from 4.33 before 4.80 for Perl miss duplicate non-ASCII bare keys, allowing type confusion und

来源摘录 · NVD

#cve #cwe-176 #cwe-843

漏洞预警2026-10-19 发布HIGH

Cpanel::JSON::XS versions before 4.80 for Perl allow stack exhaustion via nested tagged values under allow_tags in decode_tag. With allow_tags, "(" starts a tagged value. Its t...

CVE-2026-110673

Cpanel::JSON::XS versions before 4.80 for Perl allow stack exhaustion via nested tagged values under allow_tags in decod

来源摘录 · NVD

#cve #cwe-674

漏洞预警2026-10-19 发布HIGH

Cpanel::JSON::XS versions before 4.80 for Perl leak the decoded key of an object rejected for a duplicate key or a missing colon in decode_hv. A quoted key of 24 or more bytes,...

CVE-2026-110672

Cpanel::JSON::XS versions before 4.80 for Perl leak the decoded key of an object rejected for a duplicate key or a missi

来源摘录 · NVD

#cve #cwe-401

漏洞预警2026-10-19 发布INFO

Cognition before 0.13.0 contains an unauthenticated remote code execution vulnerability due to defaulting its agent sandbox backend to local execution and shipping no authentica...

CVE-2026-109437

Cognition before 0.13.0 contains an unauthenticated remote code execution vulnerability due to defaulting its agent sand

历史摘要 · 未重新核验 · NVD

#cve #cwe-306 #cwe-1188

漏洞预警2026-10-19 发布MEDIUM

A heap use-after-free in the gf_odf_ac4_cfg_clean_list function (/odf/descriptors.c) of GPAC Project/MP4Box 2.5-DEV-rev1593-gfe88c3545-master allows attackers to cause a Denial ...

CVE-2025-60482

A heap use-after-free in the gf_odf_ac4_cfg_clean_list function (/odf/descriptors.c) of GPAC Project/MP4Box 2.5-DEV-rev1

来源摘录 · NVD

#cve #cwe-416

漏洞预警2026-10-19 发布HIGH

IBM Concert 1.0 through 3.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.

CVE-2026-6719

IBM Concert 1.0 through 3.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt

来源摘录 · NVD

#cve #cwe-330

漏洞预警2026-10-19 发布MEDIUM

IBM Cloud Pak System 2.3.6.0, and 2.3.6.1 is vulnerable to HTML injection. A remotely authenticated attacker could inject malicious HTML code, which when viewed, would be execut...

CVE-2026-4418

IBM Cloud Pak System 2.3.6.0, and 2.3.6.1 is vulnerable to HTML injection. A remotely authenticated attacker could injec

来源摘录 · NVD

#cve #cwe-80

漏洞预警2026-10-19 发布MEDIUM

IBM Concert 1.0 through 3.0.0 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus ...

CVE-2026-4413

IBM Concert 1.0 through 3.0.0 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attack

来源摘录 · NVD

#cve #cwe-79

漏洞预警2026-10-19 发布LOW

IBM Concert 1.0 through 3.0.0 allows web page cache to be stored locally which can be read by another user on the system.

CVE-2026-4405

IBM Concert 1.0 through 3.0.0 allows web page cache to be stored locally which can be read by another user on the system

来源摘录 · NVD

#cve #cwe-525