#cwe-120

共收录 328 条相关情报。

漏洞预警2026-07-15 发布INFO

Out-of-bounds read vulnerability in the image codec module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2026-58552

Out-of-bounds read vulnerability in the image codec module. Impact: Successful exploitation of this vulnerability may af

历史摘要 · 未重新核验 · NVD

#cve #cwe-120

漏洞预警2026-07-15 发布INFO

Out-of-bounds read vulnerability in the image codec module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2026-58551

Out-of-bounds read vulnerability in the image codec module. Impact: Successful exploitation of this vulnerability may af

历史摘要 · 未重新核验 · NVD

#cve #cwe-120

漏洞预警2026-07-15 发布INFO

Out-of-bounds read vulnerability in the image codec module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2026-58550

Out-of-bounds read vulnerability in the image codec module. Impact: Successful exploitation of this vulnerability may af

历史摘要 · 未重新核验 · NVD

#cve #cwe-120

漏洞预警2026-07-15 发布INFO

Out-of-bounds read vulnerability in the image codec module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2026-58549

Out-of-bounds read vulnerability in the image codec module. Impact: Successful exploitation of this vulnerability may af

历史摘要 · 未重新核验 · NVD

#cve #cwe-120

漏洞预警2026-07-14 发布INFO

Buffer Overflow vulnerability in OpenHTJ2K v.0.18.4 and before allows an attacker to execute arbitrary code via the openhtj2k_decoder_impl::invoke, invoke_line_based, invoke_lin...

CVE-2026-51808

Buffer Overflow vulnerability in OpenHTJ2K v.0.18.4 and before allows an attacker to execute arbitrary code via the open

历史摘要 · 未重新核验 · NVD

#cve #cwe-120

漏洞预警2026-07-13 发布INFO

A vulnerability was found in Tenda CH22 1.0.0.1. This impacts the function formCertListInfo of the file /goform/CertListInfo. The manipulation of the argument Name results in bu...

CVE-2026-15543

A vulnerability was found in Tenda CH22 1.0.0.1. This impacts the function formCertListInfo of the file /goform/CertList

历史摘要 · 未重新核验 · NVD

#cve #cwe-119 #cwe-120

漏洞预警2026-07-12 发布INFO

A vulnerability was detected in TRENDnet TEW-821DAP 1.12B01. The affected element is the function sub_41EC14 of the file /goform/tools_nslookup of the component ssi. The manipul...

CVE-2026-15484

A vulnerability was detected in TRENDnet TEW-821DAP 1.12B01. The affected element is the function sub_41EC14 of the file

历史摘要 · 未重新核验 · NVD

#cve #cwe-119 #cwe-120

漏洞预警2026-07-12 发布INFO

A security vulnerability has been detected in TRENDnet TEW-821DAP 1.12B01. Impacted is the function sub_41EC14 of the file /goform/tools_nslookup of the component ssi. The manip...

CVE-2026-15483

A security vulnerability has been detected in TRENDnet TEW-821DAP 1.12B01. Impacted is the function sub_41EC14 of the fi

历史摘要 · 未重新核验 · NVD

#cve #cwe-119 #cwe-120

漏洞预警2026-07-08 发布INFO

U-Boot through 2026.04-rc3 contains a buffer overflow vulnerability in nfs_readlink_reply() (net/nfs-common.c) when CONFIG_CMD_NFS is enabled, allowing a malicious or compromise...

CVE-2026-29009

U-Boot through 2026.04-rc3 contains a buffer overflow vulnerability in nfs_readlink_reply() (net/nfs-common.c) when CONF

历史摘要 · 未重新核验 · NVD

#cve #cwe-120

安全公告2026-07-08 发布INFO

U-Boot 2026.04-rc3 Buffer Overflow in nfs_readlink_reply() via NFS READLINK

CVE-2026-29009

U-Boot through 2026.04-rc3 contains a buffer overflow vulnerability in nfs_readlink_reply() (net/nfs-common.c) when CONF

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-120

漏洞预警2026-07-08 发布INFO

When dealing with abnormally constructed objects, there is a lack of argument validation; JavaScript triggers signature verification, but the signature plugin does not perform v...

CVE-2026-57246

When dealing with abnormally constructed objects, there is a lack of argument validation; JavaScript triggers signature

历史摘要 · 未重新核验 · NVD

#cve #cwe-120

漏洞预警2026-07-02 发布HIGH

GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is an addon that can be installed with various GeoVision software (GV-VMS, GV-C...

CVE-2026-57278

GeoVision GeoWebPlayer（又称Web Plugin、WS Player）是配合GV-VMS、GV-Cloud等软件安装的插件，用于创建WebSocket服务器以扩展Web界面功能。该服务器可接受来自localhost的各

历史摘要 · 未重新核验 · NVD

#cve #cwe-120

漏洞预警2026-07-02 发布HIGH

GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is an addon that can be installed with various GeoVision software (GV-VMS, GV-C...

CVE-2026-57277

CVE-2026-57277 是一个缓冲区溢出漏洞，存在于 GeoVision 系列软件集成的 GeoWebPlayer 插件中（别名 Web Plugin 或 WS Player）。GeoWebPlayer 作为一个附加组件，随 GV-V

历史摘要 · 未重新核验 · NVD

#cve #cwe-120

漏洞预警2026-07-02 发布HIGH

GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is an addon that can be installed with various GeoVision software (GV-VMS, GV-C...

CVE-2026-57276

GeoVision 软件（如 GV-VMS、GV-Cloud 等）中的 GeoWebPlayer（也称为 Web Plugin 或 WS Player）插件存在缓冲区溢出漏洞。该插件会创建一个 WebSocket 服务器，扩展软件 Web

历史摘要 · 未重新核验 · NVD

#cve #cwe-120

漏洞预警2026-07-02 发布HIGH

GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is an addon that can be installed with various GeoVision software (GV-VMS, GV-C...

CVE-2026-57275

CVE-2026-57275 是 GeoVision 软件中 GeoWebPlayer（也称为 Web Plugin 或 WS Player）组件的一个缓冲区溢出漏洞。GeoWebPlayer 是一个附加组件，可与多种 GeoVision

历史摘要 · 未重新核验 · NVD

#cve #cwe-120

漏洞预警2026-07-02 发布HIGH

GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is an addon that can be installed with various GeoVision software (GV-VMS, GV-C...

CVE-2026-57274

CVE-2026-57274 影响 GeoVision 系列视频监控管理软件（如 GV-VMS、GV-Cloud）中的 GeoWebPlayer 插件（也称为“Web Plugin”或“WS Player”）。该插件创建了一个 WebSoc

历史摘要 · 未重新核验 · NVD

#cve #cwe-120

漏洞预警2026-07-02 发布HIGH

GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is an addon that can be installed with various GeoVision software (GV-VMS, GV-C...

CVE-2026-57273

GeoWebPlayer（又称 GV-VMS 文档中的“Web Plugin”和 VMS-Cloud 的“WS Player”）是 GeoVision 软件（如 GV-VMS、GV-Cloud 等）的一个可选插件。该插件创建了一个 WebS

历史摘要 · 未重新核验 · NVD

#cve #cwe-120

漏洞预警2026-07-01 发布INFO

A vulnerability in the DMG file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting f...

CVE-2026-20244

A vulnerability in the DMG file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS c

历史摘要 · 未重新核验 · NVD

#cve #cwe-120

漏洞预警2026-07-01 发布INFO

A vulnerability in the ALZ file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting f...

CVE-2026-20243

A vulnerability in the ALZ file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS c

历史摘要 · 未重新核验 · NVD

#cve #cwe-120

漏洞预警2026-07-01 发布INFO

A vulnerability in the PESpin file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resultin...

CVE-2026-20217

A vulnerability in the PESpin file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a Do

历史摘要 · 未重新核验 · NVD

#cve #cwe-120