#cwe-114

共收录 3 条相关情报。

← 返回所有主题

漏洞预警2026-10-27 发布HIGH

PowerProtect Data Domain Virtual Edition, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.70, LTS2025 release versions 8.3.1.0 thr...

CVE-2026-94347

PowerProtect Data Domain Virtual Edition, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.

来源摘录 · NVD

安全公告2026-10-01 发布INFO

vm2 crypto builtin loads attacker native code through setEngine

CVE-2026-92939

Summary vm2 3.11.6 exposes the host `crypto` module to a `NodeVM` when that single builtin is allowed. The module is pr

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #npm #cwe-114 #severity:critical

漏洞预警2026-09-17 发布INFO

vm2 3.11.3 through 3.11.6 exposes the host Node.js crypto module to a NodeVM sandbox when the crypto builtin is allowed. The module is presented via a recursive read-only proxy,...

CVE-2026-92939

vm2 3.11.3 through 3.11.6 exposes the host Node.js crypto module to a NodeVM sandbox when the crypto builtin is allowed.

历史摘要 · 未重新核验 · NVD