#cwe-122

共收录 1199 条相关情报。

← 返回所有主题
漏洞预警2026-09-02 发布INFO

Description NGINX JavaScript (njs) has a vulnerability in the XML module's namespace prefix list parser, reachable through the xml.exclusiveC14n() method. An unauthenticated r...

CVE-2026-78689

Description NGINX JavaScript (njs) has a vulnerability in the XML module's namespace prefix list parser, reachable thr

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-01 发布INFO

A flaw was found in the AFP backend in gvfs. When mounting a share, a malicious AFP server can cause the DSI read path to process a length that exceeds the size requested by the...

CVE-2026-84269

A flaw was found in the AFP backend in gvfs. When mounting a share, a malicious AFP server can cause the DSI read path t

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-01 发布INFO

A flaw was found in the SFTP backend in gvfs. When mounting a share and reading a file, a malicious SFTP server can cause read_reply() to process a length that exceeds the size ...

CVE-2026-84268

A flaw was found in the SFTP backend in gvfs. When mounting a share and reading a file, a malicious SFTP server can caus

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-01 发布INFO

An attacker that connects to an open Erlang TCP port that uses the inet driver with {packet,4} mode can use a signed overflow in an incorrect packet length calculation to overfl...

CVE-2026-75538

An attacker that connects to an open Erlang TCP port that uses the inet driver with {packet,4} mode can use a signed ove

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-31 发布INFO

A vulnerability was found in FLVMeta up to 1.2.2. Affected is the function amf_string_new of the file src/amf.c of the component AMF String Processing. The manipulation of the a...

CVE-2026-82820

A vulnerability was found in FLVMeta up to 1.2.2. Affected is the function amf_string_new of the file src/amf.c of the c

历史摘要 · 未重新核验 · NVD

安全公告2026-08-31 发布INFO

FLVMeta AMF String Processing amf.c amf_string_new heap-based overflow

CVE-2026-82820

A vulnerability was found in FLVMeta up to 1.2.2. Affected is the function amf_string_new of the file src/amf.c of the c

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-08-30 发布INFO

A security vulnerability has been detected in Open Asset Import Library Assimp up to 6.0.2. The impacted element is the function MD5Importer::MakeDataUnique of the file code/Ass...

CVE-2026-82591

A security vulnerability has been detected in Open Asset Import Library Assimp up to 6.0.2. The impacted element is the

历史摘要 · 未重新核验 · NVD

安全公告2026-08-30 发布INFO

Open Asset Import Library Assimp MD5Loader.cpp MakeDataUnique heap-based overflow

CVE-2026-82591

A security vulnerability has been detected in Open Asset Import Library Assimp up to 6.0.2. The impacted element is the

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-08-28 发布INFO

A heap-based buffer overflow vulnerability exists in openNDS before 11.0.0 that allows an unauthenticated attacker on the captive portal network to crash the openNDS daemon (den...

CVE-2026-38821

A heap-based buffer overflow vulnerability exists in openNDS before 11.0.0 that allows an unauthenticated attacker on th

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-28 发布INFO

An heap overflow vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to execute arbitrary code by sending specially crafted network...

CVE-2026-19313

An heap overflow vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to ex

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-28 发布INFO

A heap-based buffer overflow vulnerability in Fireware OS's iked process allows an authenticated administrator to crash the IKE daemon (iked), resulting in a denial of service, ...

CVE-2026-81851

A heap-based buffer overflow vulnerability in Fireware OS's iked process allows an authenticated administrator to crash

历史摘要 · 未重新核验 · NVD

安全公告2026-08-28 发布INFO

CVE-2026-38821

CVE-2026-38821

A heap-based buffer overflow vulnerability exists in openNDS before 11.0.0 that allows an unauthenticated attacker on th

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-08-27 发布INFO

Substance3D - Sampler versions 5.1.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the c...

CVE-2026-34674

Substance3D - Sampler versions 5.1.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could r

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-26 发布INFO

mp_SetEnddisc() copied a user-supplied PSN endpoint value without length validation, allowing a buffer overflow via the ppp(8) command interface. A local user with access to th...

CVE-2026-58097

mp_SetEnddisc() copied a user-supplied PSN endpoint value without length validation, allowing a buffer overflow via the

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-26 发布INFO

mp_Enddisc() used incorrect length calculations when formatting endpoint discriminator addresses for display, allowing a received endpoint option to overflow a global result buf...

CVE-2026-58095

mp_Enddisc() used incorrect length calculations when formatting endpoint discriminator addresses for display, allowing a

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-25 发布INFO

Buffer overflow in Media in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium securi...

CVE-2026-79231

Buffer overflow in Media in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code ins

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-25 发布INFO

Buffer overflow in Blink in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside the sandbox ...

CVE-2026-79216

Buffer overflow in Blink in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the rende

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-25 发布INFO

Buffer overflow in ANGLE in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (...

CVE-2026-79142

Buffer overflow in ANGLE in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to execute arbi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-25 发布INFO

Buffer overflow in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium secur...

CVE-2026-79130

Buffer overflow in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code out

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-25 发布INFO

Buffer overflow in WebGL in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium secur...

CVE-2026-78948

Buffer overflow in WebGL in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code out

历史摘要 · 未重新核验 · NVD