#cwe-122

共收录 1197 条相关情报。

← 返回所有主题
安全公告2026-09-18 发布INFO

IBM MQ for HPE NonStop 8.1.0 through 8.1.0.40 IBM MQ C client could allow a remote attacker to...

CVE-2026-11727

IBM MQ for HPE NonStop 8.1.0 through 8.1.0.40 IBM MQ C client could allow a remote attacker to cause a denial of service

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-18 发布INFO

IBM MQ for HPE NonStop 8.1.0 through 8.1.0.40 could allow an authenticated attacker to cause a...

CVE-2026-11716

IBM MQ for HPE NonStop 8.1.0 through 8.1.0.40 could allow an authenticated attacker to cause a denial of service or pote

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-18 发布INFO

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 8.0.0 until 8.0.6, a locally supplied detection rule t...

CVE-2026-63451

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Fr

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-18 发布INFO

FluidSynth is a software synthesizer based on the SoundFont 2 specifications. From 2.5.0 until 2.5.6, the native DLS loader assigns file-controlled wsmp.loop_start and wsmp.loop...

CVE-2026-61721

FluidSynth is a software synthesizer based on the SoundFont 2 specifications. From 2.5.0 until 2.5.6, the native DLS loa

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-18 发布INFO

FluidSynth is a software synthesizer based on the SoundFont 2 specifications. From 2.2.4 until 2.5.6, configuring synth.midi-channels above 16 allows the MIDI player to index _f...

CVE-2026-61714

FluidSynth is a software synthesizer based on the SoundFont 2 specifications. From 2.2.4 until 2.5.6, configuring synth.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-18 发布INFO

FluidSynth is a software synthesizer based on the SoundFont 2 specifications. From 1.1.2 until 2.5.6, the FluidSynth command handler accepts a pitch_bend_range command whose cha...

CVE-2026-58264

FluidSynth is a software synthesizer based on the SoundFont 2 specifications. From 1.1.2 until 2.5.6, the FluidSynth com

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-18 发布INFO

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.17 and 8.0.6, HTTP SWF decompression with the ...

CVE-2026-57226

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Pr

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-18 发布INFO

IBM MQ for HPE NonStop 8.1.0 through 8.1.0.40 IBM MQ C client could allow a remote attacker to cause a denial of service or potentially execute arbitrary code due to improper va...

CVE-2026-11727

IBM MQ for HPE NonStop 8.1.0 through 8.1.0.40 IBM MQ C client could allow a remote attacker to cause a denial of service

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-18 发布INFO

IBM MQ for HPE NonStop 8.1.0 through 8.1.0.40 could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code during queue manager start...

CVE-2026-11716

IBM MQ for HPE NonStop 8.1.0 through 8.1.0.40 could allow an authenticated attacker to cause a denial of service or pote

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-18 发布INFO

In osmo-bsc from 1.0.1 through 1.14.1 a heap based buffer overflow issue was found in the ipaccess_proxy_read_msg()  function via IPA frame lengths.

CVE-2026-75893

In osmo-bsc from 1.0.1 through 1.14.1 a heap based buffer overflow issue was found in the ipaccess_proxy_read_msg()  fun

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-18 发布INFO

PJSIP is a free and open source multimedia communication library written in C. In 2.17 and earlier, the PJSIP AVI parser in pjmedia/src/pjmedia/avi_player.c uses an input-file v...

CVE-2026-77396

PJSIP is a free and open source multimedia communication library written in C. In 2.17 and earlier, the PJSIP AVI parser

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-18 发布INFO

Rsyslog is a rocket-fast system for log processing. From 8.2110.0 until 8.2604.0, the optional imhttp module's parse_auth_header function in contrib/imhttp/imhttp.c allocates a ...

CVE-2026-55556

Rsyslog is a rocket-fast system for log processing. From 8.2110.0 until 8.2604.0, the optional imhttp module's parse_aut

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-18 发布INFO

virtio-win provides Windows paravirtualized drivers for QEMU and KVM. From mm210 until mm320, the Viosock driver permits a low-privilege local process to submit an IOCTL_SELECT ...

CVE-2026-46655

virtio-win provides Windows paravirtualized drivers for QEMU and KVM. From mm210 until mm320, the Viosock driver permits

历史摘要 · 未重新核验 · NVD

安全公告2026-09-18 发布INFO

PJSIP: Heap buffer overflow in the AVI parser

CVE-2026-77396

PJSIP is a free and open source multimedia communication library written in C. In 2.17 and earlier, the PJSIP AVI parser

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-18 发布INFO

Rsyslog: Heap buffer overflow in imhttp plugin Basic Authentication handling

CVE-2026-55556

Rsyslog is a rocket-fast system for log processing. From 8.2110.0 until 8.2604.0, the optional imhttp module's parse_aut

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-18 发布INFO

virtio-win: Integer overflow causing a heap overflow in Viosock driver

CVE-2026-46655

virtio-win provides Windows paravirtualized drivers for QEMU and KVM. From mm210 until mm320, the Viosock driver permits

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-09-18 发布INFO

The code in pppd that formats a response to a PEAP Request packet in peap_response() copies an entire TLS record of up to 16384 bytes into the fixed global buffer outpacket_buf ...

CVE-2026-75883

The code in pppd that formats a response to a PEAP Request packet in peap_response() copies an entire TLS record of up t

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-18 发布INFO

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.1.16.0, A crafted 1-bit contiguous c...

CVE-2026-67549

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / a

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-18 发布INFO

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.21.0, 3.1.16.0, and 3.2.0.3-beta1,...

CVE-2026-63422

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / a

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-18 发布INFO

IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to improper validation of message distribution list structures.

CVE-2026-11381

IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to i

历史摘要 · 未重新核验 · NVD