#cwe-120

共收录 328 条相关情报。

← 返回所有主题
安全公告2026-08-12 发布INFO

A missing bounds check when parsing stored procedure parameter metadata in the MongoDB BI...

CVE-2026-19002

A missing bounds check when parsing stored procedure parameter metadata in the MongoDB BI Connector ODBC Driver can resu

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-12 发布INFO

A missing bounds check when parsing stored procedure parameter metadata in the MongoDB BI Connector ODBC Driver can result in an out-of-bounds write in the client application pr...

CVE-2026-19002

A missing bounds check when parsing stored procedure parameter metadata in the MongoDB BI Connector ODBC Driver can resu

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-12 发布INFO

A buffer copy without checking size of input ('classic buffer overflow') vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.3, FortiClientWindows 7.2.0 through 7.2.1...

CVE-2026-70465

A buffer copy without checking size of input ('classic buffer overflow') vulnerability in Fortinet FortiClientWindows 7.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-12 发布INFO

The device's PROFINET service is affected by a buffer overflow vulnerability that exists in the default configuration. An unauthenticated remote attacker could exploit this vuln...

CVE-2025-41769

The device's PROFINET service is affected by a buffer overflow vulnerability that exists in the default configuration. A

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-12 发布INFO

A vulnerability was identified in Open5GS up to 2.7.1. This issue affects the function pcrf_rx_aar_cb of the file src/pcrf/pcrf-rx-path.c of the component Diameter Rx Handler. T...

CVE-2024-14044

A vulnerability was identified in Open5GS up to 2.7.1. This issue affects the function pcrf_rx_aar_cb of the file src/pc

历史摘要 · 未重新核验 · NVD

安全公告2026-08-12 发布INFO

Open5GS Diameter Rx pcrf-rx-path.c pcrf_rx_aar_cb buffer overflow

CVE-2024-14044

A vulnerability was identified in Open5GS up to 2.7.1. This issue affects the function pcrf_rx_aar_cb of the file src/pc

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-08-11 发布HIGH

A flaw was found in Undertow. A remote attacker can cause Out of Memory on websockets endpoint without authentication on any @ServerEndpoint class that has any @OnMessage method...

CVE-2026-15565

A flaw was found in Undertow. A remote attacker can cause Out of Memory on websockets endpoint without authentication on

来源摘录 · NVD

安全公告2026-08-08 发布INFO

D-Link DWR-M961 devices with hardware version C1 and software version 1.1.2_C1_202602110044...

CVE-2026-71958

D-Link DWR-M961 devices with hardware version C1 and software version 1.1.2_C1_202602110044 contain a buffer overflow vu

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-08 发布INFO

D-Link DWR-M961 devices with hardware version C1 and software version 1.1.2_C1_202602110044...

CVE-2026-71957

D-Link DWR-M961 devices with hardware version C1 and software version 1.1.2_C1_202602110044 contain a buffer overflow vu

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-08 发布CRITICAL

D-Link DWR-M961 devices with hardware version C1 and software version 1.1.2_C1_202602110044 contain a buffer overflow vulnerability in the quicksetup.cgi interface. A remote att...

CVE-2026-71958

CVE-2026-71958 影响 D-Link DWR-M961 路由器(硬件版本 C1,软件版本 1.1.2_C1_202602110044)。该漏洞位于 quicksetup.cgi 接口,属于缓冲区溢出类型。远程攻击者可在无需认证的

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-08 发布CRITICAL

D-Link DWR-M961 devices with hardware version C1 and software version 1.1.2_C1_202602110044 contain a buffer overflow vulnerability in the app.cgi interface. A remote attacker c...

CVE-2026-71957

D-Link DWR-M961是一款无线路由器,其硬件版本C1搭配软件版本1.1.2_C1_202602110044时,内置的app.cgi接口存在缓冲区溢出漏洞。具体来说,该接口在处理netAcc.addlist[].name参数时未正确

历史摘要 · 未重新核验 · NVD

安全公告2026-08-07 发布INFO

A vulnerability in the XAR file format parser of ClamAV could allow an unauthenticated, remote...

CVE-2026-20348

A vulnerability in the XAR file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS c

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-07 发布INFO

A vulnerability in the zip archive parser of ClamAV could allow an unauthenticated, remote...

CVE-2026-20337

A vulnerability in the zip archive parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condi

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-07 发布INFO

A vulnerability in the XAR file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded impacts as a result o...

CVE-2026-20348

A vulnerability in the XAR file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS c

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-07 发布INFO

A vulnerability in the zip archive parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition on an affected device. This vulnerability is due ...

CVE-2026-20337

A vulnerability in the zip archive parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-06 发布INFO

Buffer Overflow vulnerability in Systerel S2OPC 1.7.3 allows a remote attacker to cause a denial of service via the AddNodes, address_space_bs.c, sopc_node_mgt_helper_internal.c...

CVE-2026-67871

Buffer Overflow vulnerability in Systerel S2OPC 1.7.3 allows a remote attacker to cause a denial of service via the AddN

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-06 发布INFO

Buffer Overflow vulnerability in open62541 v1.5.5 allows a remote attacker to cause a denial of service via the Service_Call validates input arguments against runtime-resolved I...

CVE-2026-67869

Buffer Overflow vulnerability in open62541 v1.5.5 allows a remote attacker to cause a denial of service via the Service_

历史摘要 · 未重新核验 · NVD

安全公告2026-08-05 发布INFO

A flaw was found in dhcp-server. A remote attacker with network access to the OMAPI (Open...

CVE-2026-18103

A flaw was found in dhcp-server. A remote attacker with network access to the OMAPI (Open Management Application Program

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-03 发布INFO

A flaw was found in GIMP's file-png plugin. A remote attacker can exploit this by crafting a malicious Animated Portable Network Graphics (APNG) image containing an oversized tR...

CVE-2026-6694

A flaw was found in GIMP's file-png plugin. A remote attacker can exploit this by crafting a malicious Animated Portable

历史摘要 · 未重新核验 · NVD

安全公告2026-07-31 发布INFO

Buffer overflow in NTPsec's Zyfer refclock allows local attacker to crash ntpd

CVE-2026-18321

Buffer overflow in NTPsec's Zyfer refclock allows local attacker to crash ntpd

历史摘要 · 未重新核验 · GitHub Advisory