#cwe-122

共收录 1219 条相关情报。

← 返回所有主题
漏洞预警2026-08-13 发布INFO

Heap buffer overflow in PostgreSQL to_char(timestamptz) allows the party choosing the timezone to execute arbitrary code as the operating system user running the database, via a...

CVE-2026-14669

Heap buffer overflow in PostgreSQL to_char(timestamptz) allows the party choosing the timezone to execute arbitrary code

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-13 发布INFO

Heap buffer overflow in PostgreSQL regexp allows the query author to execute arbitrary code as the operating system user running the database, via text that would not pass encod...

CVE-2026-14664

Heap buffer overflow in PostgreSQL regexp allows the query author to execute arbitrary code as the operating system user

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-13 发布INFO

In Teltonika Networks RUTOS devices, a vulnerability exists in modbusgwd due to improper handling of Modbus TCP request data. A remote, unauthenticated attacker with access to...

CVE-2026-18368

In Teltonika Networks RUTOS devices, a vulnerability exists in modbusgwd due to improper handling of Modbus TCP request

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-13 发布INFO

TTX Logger file parser crash in 4.6.0 to 4.6.7 allows denial of service

CVE-2026-19694

TTX Logger file parser crash in 4.6.0 to 4.6.7 allows denial of service

历史摘要 · 未重新核验 · NVD

安全公告2026-08-12 发布INFO

An application using the MongoDB BI Connector ODBC Driver may experience a memory-safety issue...

CVE-2026-19004

An application using the MongoDB BI Connector ODBC Driver may experience a memory-safety issue when processing output pa

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-12 发布INFO

An application using the MongoDB BI Connector ODBC Driver may experience a memory-safety issue when processing output parameters from a stored procedure. Triggering this issue r...

CVE-2026-19004

An application using the MongoDB BI Connector ODBC Driver may experience a memory-safety issue when processing output pa

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-12 发布INFO

A vulnerability was determined in Open5GS up to 2.7.1. This vulnerability affects the function mme_s6a_subscription_data_from_avp of the file src/mme/mme-fd-path.c of the compon...

CVE-2024-14043

A vulnerability was determined in Open5GS up to 2.7.1. This vulnerability affects the function mme_s6a_subscription_data

历史摘要 · 未重新核验 · NVD

安全公告2026-08-11 发布INFO

Open5GS Diameter S6a mme-fd-path.c mme_s6a_subscription_data_from_avp heap-based overflow

CVE-2024-14043

A vulnerability was determined in Open5GS up to 2.7.1. This vulnerability affects the function mme_s6a_subscription_data

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-08-11 发布INFO

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.30.0, FreeRDP's winpr/libwinpr/sspi/Kerberos/kerberos.c kerberos_DecryptMessage function fails to bou...

CVE-2026-73242

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.30.0, FreeRDP's winpr/libwinpr/sspi/Kerberos

历史摘要 · 未重新核验 · NVD

安全公告2026-08-11 发布INFO

FreeRDP: Kerberos GSS Wrap-token `EC` field is unbounded, causing an out-of-bounds decrypt in `kerberos_DecryptMessage`

CVE-2026-72745 · CVE-2026-73242

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.30.0, FreeRDP's winpr/libwinpr/sspi/Kerberos

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-08-11 发布INFO

Microsoft Security Advisory CVE-2026-62871 – .NET Elevation of Privilege Vulnerability

CVE-2026-62871

## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Wind

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-11 发布INFO

Microsoft Security Advisory CVE-2026-62886 – .NET Elevation of Privilege Vulnerability

CVE-2026-62886

## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Wind

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-11 发布INFO

Integer overflow or wraparound in Microsoft Azure Attestation service and Device Health Attestation Service allows an unauthorized attacker to execute code over a network.

CVE-2026-71331

Integer overflow or wraparound in Microsoft Azure Attestation service and Device Health Attestation Service allows an un

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-70347

Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-70345

Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

Heap-based buffer overflow in Windows DNS allows an authorized attacker to elevate privileges locally.

CVE-2026-70330

Heap-based buffer overflow in Windows DNS allows an authorized attacker to elevate privileges locally.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

Heap-based buffer overflow in Windows DNS allows an authorized attacker to elevate privileges locally.

CVE-2026-70304

Heap-based buffer overflow in Windows DNS allows an authorized attacker to elevate privileges locally.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

CVE-2026-70130

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVE-2026-68815

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVE-2026-68812

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

历史摘要 · 未重新核验 · NVD