#CVE

共收录 70327 条相关情报。

← 返回所有主题
漏洞预警2026-10-13 发布INFO

An issue in libass v.0.17.5 allows a remote attacker to cause a denial of service via the ass_outline_construct() in libass/ass_render.c

CVE-2026-95127

An issue in libass v.0.17.5 allows a remote attacker to cause a denial of service via the ass_outline_construct() in lib

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

Buffer Overflow vulnerability in madmurphy libconfini v.1.16.4 allows a remote attacker to cause a denial of service via an allocation-size mismatch between its bundled load_ini...

CVE-2026-95124

Buffer Overflow vulnerability in madmurphy libconfini v.1.16.4 allows a remote attacker to cause a denial of service via

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

mp4v2 2.0.0 contains a NULL pointer dereference vulnerability in MP4File::GenerateTracks() in src/mp4file.cpp. This allows a remote attacker to cause a denial of service

CVE-2026-95122

mp4v2 2.0.0 contains a NULL pointer dereference vulnerability in MP4File::GenerateTracks() in src/mp4file.cpp. This allo

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

An issue in mp4v2 2.0.0 allows an attacker to execute arbitrary code via the MP4RtpAtom::ReadHntiType() in src/atom_rtp.cpp. A specially crafted MP4 file can cause an undersized...

CVE-2026-95121

An issue in mp4v2 2.0.0 allows an attacker to execute arbitrary code via the MP4RtpAtom::ReadHntiType() in src/atom_rtp.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布LOW

Buffer Overflow vulnerability in zserge jsmn jsmn HEAD 25647e6 allows a remote attacker to cause a denial of service via the jsmn.h, jsmn_parse(), example/jsondump.c, dump() com...

CVE-2026-95117

Buffer Overflow vulnerability in zserge jsmn jsmn HEAD 25647e6 allows a remote attacker to cause a denial of service via

来源摘录 · NVD

漏洞预警2026-10-13 发布INFO

Buffer Overflow vulnerability in libwebsockets main 106d542c allows a remote attacker to cause a denial of service via the LEJP JSON parser

CVE-2026-95115

Buffer Overflow vulnerability in libwebsockets main 106d542c allows a remote attacker to cause a denial of service via t

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

libwebsockets contains an out-of-bounds read vulnerability in the LEJP incremental parser in lib/misc/lejp.c. This allows a remote attacker to cause a denial of service

CVE-2026-95114

libwebsockets contains an out-of-bounds read vulnerability in the LEJP incremental parser in lib/misc/lejp.c. This allow

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

SFTPGo is an open source, event-driven file transfer solution. Prior to 2.7.5, an authenticated SSH user can send a malformed protocol message while opening a channel, causing a...

CVE-2026-77375

SFTPGo is an open source, event-driven file transfer solution. Prior to 2.7.5, an authenticated SSH user can send a malf

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

MediaAgent contained a heap-based buffer overflow issue affecting service availability. Software customers upgrade to resolved maintenance release. Update Commvault installatio...

CVE-2026-77100

MediaAgent contained a heap-based buffer overflow issue affecting service availability. Software customers upgrade to r

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

CVFS contained an input validation issue affecting command execution. Software customers upgrade to resolved maintenance release. Update CVFS.

CVE-2026-77099

CVFS contained an input validation issue affecting command execution. Software customers upgrade to resolved maintenanc

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

CVFS contained a missing authentication condition affecting command execution. Software customers upgrade to resolved maintenance release. Update CVFS.

CVE-2026-77096

CVFS contained a missing authentication condition affecting command execution. Software customers upgrade to resolved m

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

CvFWD contained a null pointer dereference affecting service availability. Software customers upgrade to resolved maintenance release. Update all Commvault installations, inclu...

CVE-2026-77095

CvFWD contained a null pointer dereference affecting service availability. Software customers upgrade to resolved maint

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

CvFWD contained an out-of-bounds write affecting service availability. Software customers upgrade to resolved maintenance release. Software customers upgrade to resolved mainte...

CVE-2026-77094

CvFWD contained an out-of-bounds write affecting service availability. Software customers upgrade to resolved maintenan

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

CvFWD contained an integer overflow affecting service availability. Software customers upgrade to resolved maintenance release. Update all Commvault installations, including Co...

CVE-2026-77093

CvFWD contained an integer overflow affecting service availability. Software customers upgrade to resolved maintenance

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

CVFS contained an XML external entity (XXE) reference handling issue affecting information dislcosure. Software customers upgrade to resolved maintenance release. Update CVFS.

CVE-2026-77090

CVFS contained an XML external entity (XXE) reference handling issue affecting information dislcosure. Software custome

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

The openUBMC device-management process parses PLDM-over-MCTP and NCSI-over-MCTP responses from on-bus devices, and three response parsers in the shared transport libraries subtr...

CVE-2026-65200

The openUBMC device-management process parses PLDM-over-MCTP and NCSI-over-MCTP responses from on-bus devices, and three

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

openUBMC assigns the full privilege set to pseudo-identities representing SNMP callers. An authenticated, but low-privilege, SNMP user can therefore invoke mapped backend operat...

CVE-2026-65199

openUBMC assigns the full privilege set to pseudo-identities representing SNMP callers. An authenticated, but low-privil

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

Huawei's openUBMC ships a default SNMPv3 USM key that uses one value for both authentication and privacy. An attacker who holds the key (recoverable from the open-source build) ...

CVE-2026-65198

Huawei's openUBMC ships a default SNMPv3 USM key that uses one value for both authentication and privacy. An attacker wh

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

H3C HDM Family-A verifies the RSA signature of a firmware image against a public key it reads from the mutable file `/conf/public.pem`. That file is writable by an authenticated...

CVE-2026-65197

H3C HDM Family-A verifies the RSA signature of a firmware image against a public key it reads from the mutable file `/co

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

MCP Context Forge provides an MCP Admin UI for managing gateway resources. From 0.2.0 until 0.3.1, the Global Prompts feature stores a prompt template without sufficient output ...

CVE-2026-53711

MCP Context Forge provides an MCP Admin UI for managing gateway resources. From 0.2.0 until 0.3.1, the Global Prompts fe

历史摘要 · 未重新核验 · NVD