#cwe-1023

共收录 15 条相关情报。

漏洞预警2026-09-17 发布INFO

In Eclipse Ankaios versions 0.6.0 to before 1.0.4, `LogRule::matches` in the agent control-interface authorizer stops at the first wildcard pattern in a single rule instead of e...

CVE-2026-92611

In Eclipse Ankaios versions 0.6.0 to before 1.0.4, `LogRule::matches` in the agent control-interface authorizer stops at

历史摘要 · 未重新核验 · NVD

#cve #cwe-863 #cwe-1023

漏洞预警2026-09-15 发布INFO

A flaw has been found in OpenClaw ClawScan up to 0.1.6. This affects an unknown function of the file internal/runner/static_scanner.go of the component Static Scanner. This mani...

CVE-2026-91836

A flaw has been found in OpenClaw ClawScan up to 0.1.6. This affects an unknown function of the file internal/runner/sta

历史摘要 · 未重新核验 · NVD

#cve #cwe-1023

漏洞预警2026-09-02 发布INFO

Only self-managed Grafana instances with Auth Proxy authentication and identity caching enabled (sync_ttl greater than zero) are affected. The Auth Proxy cache key concatenated ...

CVE-2026-14199

Only self-managed Grafana instances with Auth Proxy authentication and identity caching enabled (sync_ttl greater than z

历史摘要 · 未重新核验 · NVD

#cve #cwe-290 #cwe-863 #cwe-1023

漏洞预警2026-08-27 发布INFO

CakePHP Queue is a queue-interop compatible queueing library. From 0.1.11 until 2.3.1, QueueManager::getUniqueId() generates identifiers for jobs with shouldBeUnique enabled fro...

CVE-2026-54713

CakePHP Queue is a queue-interop compatible queueing library. From 0.1.11 until 2.3.1, QueueManager::getUniqueId() gener

历史摘要 · 未重新核验 · NVD

#cve #cwe-1023

安全公告2026-08-27 发布INFO

cakephp/queue's Incomplete Comparison in getUniqueId vulnerable to collisions

CVE-2026-54713

### Impact For jobs with `shouldBeUnique = true` the queue plugin will generate a 'unique identifier' based on the job

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #composer #cwe-1023 #severity:low

安全公告2026-08-27 发布INFO

CakePHP Queue: Incomplete Comparison in getUniqueId vulnerable to collisions

CVE-2026-54713

CakePHP Queue is a queue-interop compatible queueing library. From 0.1.11 until 2.3.1, QueueManager::getUniqueId() gener

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-1023

安全公告2026-08-04 发布INFO

NVIDIA Dynamo for Linux contains a vulnerability in the multimodal embedding cache, where an...

CVE-2026-24255

NVIDIA Dynamo for Linux contains a vulnerability in the multimodal embedding cache, where an attacker could cause a hash

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-1023 #severity:high

漏洞预警2026-07-14 发布INFO

Symfony is a PHP framework for web and console applications and a set of reusable PHP components. From 6.1.0 until 6.4.41, 7.4.13, and 8.0.13, UrlAttributeSanitizer::getSupporte...

CVE-2026-48761

Symfony is a PHP framework for web and console applications and a set of reusable PHP components. From 6.1.0 until 6.4.4

历史摘要 · 未重新核验 · NVD

#cve #cwe-79 #cwe-1023

安全公告2026-07-14 发布INFO

Symfony: HtmlSanitizer UrlAttributeSanitizer Misses URL Attributes on <object>, <applet>, <iframe>, <img> and the URL Inside <meta http-equiv="refresh"> content

CVE-2026-48761

Symfony is a PHP framework for web and console applications and a set of reusable PHP components. From 6.1.0 until 6.4.4

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-1023 #cwe-79

漏洞预警2026-06-16 发布INFO

OpenClaw before 2026.5.26 contains a hostname validation vulnerability allowing attackers to bypass blocklist comparisons using trailing-dot notation in model or workspace-deriv...

CVE-2026-53859

OpenClaw before 2026.5.26 contains a hostname validation vulnerability allowing attackers to bypass blocklist comparison

历史摘要 · 未重新核验 · NVD

#cve #cwe-918 #cwe-1023

安全公告2026-06-13 发布INFO

OpenClaw before 2026.5.7 contains a hostname validation vulnerability in retry endpoint checks...

CVE-2026-53839

OpenClaw before 2026.5.7 contains a hostname validation vulnerability in retry endpoint checks that allows matching host

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-1023 #severity:medium

漏洞预警2026-06-12 发布MEDIUM

OpenClaw before 2026.5.7 contains a hostname validation vulnerability in retry endpoint checks that allows matching hostname prefixes instead of exact hostnames. Attackers can e...

CVE-2026-53839

OpenClaw 在 2026.5.7 之前版本中存在主机名验证漏洞。该漏洞位于重试端点检查逻辑中，未能进行精确主机名匹配，而是允许通过匹配主机名前缀来绕过验证。攻击者可以构造一个与受信任主机相似的主机名前缀，从而将认证材料发送到不可信的端

历史摘要 · 未重新核验 · NVD

#cve #cwe-1023

安全公告2026-06-05 发布INFO

On affected platforms running Arista EOS where a tunnel decapsulation configuration—such as VXLAN...

CVE-2026-7473

On affected platforms running Arista EOS where a tunnel decapsulation configuration—such as VXLAN (Virtual Extensible LA

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-1023 #severity:medium

漏洞预警2026-06-05 发布INFO

On affected platforms running Arista EOS where a tunnel decapsulation configuration—such as VXLAN (Virtual Extensible LAN), decap-groups, or a GRE (Generic Routing Encapsulation...

CVE-2026-7473

On affected platforms running Arista EOS where a tunnel decapsulation configuration—such as VXLAN (Virtual Extensible LA

历史摘要 · 未重新核验 · NVD

#cve #cwe-1023

漏洞预警2026-06-03 发布INFO

An issue was discovered in Django 5.2 before 5.2.15 and 6.0 before 6.0.6. `django.utils.cache.has_vary_header()` in Django does not strip leading or trailing whitespace from `Va...

CVE-2026-48587

An issue was discovered in Django 5.2 before 5.2.15 and 6.0 before 6.0.6. `django.utils.cache.has_vary_header()` in Djan

历史摘要 · 未重新核验 · NVD

#cve #cwe-1023