#cwe-122

共收录 1245 条相关情报。

← 返回所有主题
漏洞预警2026-05-07 发布INFO

A security flaw has been discovered in OSGeo gdal up to 3.13.0dev-4. Impacted is the function GDnentries of the file frmts/hdf4/hdf-eos/GDapi.c. Performing a manipulation of the...

CVE-2026-8087

A security flaw has been discovered in OSGeo gdal up to 3.13.0dev-4. Impacted is the function GDnentries of the file frm

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-07 发布INFO

A vulnerability was identified in OSGeo gdal up to 3.13.0dev-4. This issue affects the function SWnentries of the file frmts/hdf4/hdf-eos/SWapi.c. Such manipulation of the argum...

CVE-2026-8086

A vulnerability was identified in OSGeo gdal up to 3.13.0dev-4. This issue affects the function SWnentries of the file f

历史摘要 · 未重新核验 · NVD

安全公告2026-05-06 发布INFO

Heap-based Buffer Overflow vulnerability in mod_proxy_ajp of Apache HTTP Server. If mod_proxy_ajp...

CVE-2026-28780

Heap-based Buffer Overflow vulnerability in mod_proxy_ajp of Apache HTTP Server. If mod_proxy_ajp connects to a maliciou

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-05 发布HIGH

Heap-based Buffer Overflow vulnerability in mod_proxy_ajp of Apache HTTP Server. If mod_proxy_ajp connects to a malicious AJP server this AJP server can send a malicious AJP mes...

CVE-2026-28780

Apache HTTP Server 的 mod_proxy_ajp 模块存在堆缓冲区溢出漏洞(CVE-2026-28780)。当 mod_proxy_ajp 作为反向代理连接到恶意的 AJP 后端服务器时,该恶意服务器可返回特制的 AJP

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-05 发布INFO

RedisBloom is a probabilistic data structures module for Redis. In all versions of RedisBloom before 2.8.20, the module does not properly validate serialized values processed th...

CVE-2026-25589

RedisBloom is a probabilistic data structures module for Redis. In all versions of RedisBloom before 2.8.20, the module

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-05 发布INFO

RedisTimeSeries is a time-series module for Redis. In all versions before 1.12.14 of RedisTimeSeries, the module does not properly validate serialized values processed through t...

CVE-2026-25588

RedisTimeSeries is a time-series module for Redis. In all versions before 1.12.14 of RedisTimeSeries, the module does no

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-05 发布INFO

Redis is an in-memory data structure store. In versions of redis-server up to 8.6.3, the RESTORE command does not properly validate serialized values. An authenticated attacker ...

CVE-2026-25243

Redis is an in-memory data structure store. In versions of redis-server up to 8.6.3, the RESTORE command does not proper

历史摘要 · 未重新核验 · NVD

安全公告2026-05-04 发布INFO

Pillow has a heap buffer overflow with nested list coordinates

CVE-2026-42309

Passing nested lists as coordinates to APIs that accept coordinates such as `ImagePath.Path`, `ImageDraw.ImageDraw.polyg

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-04 发布INFO

BusyBox before commit 42202bf contains a heap buffer overflow vulnerability in the DHCPv6 client (udhcpc6) DNS_SERVERS option handler in networking/udhcp/d6_dhcpc.c that allows ...

CVE-2026-29004

BusyBox before commit 42202bf contains a heap buffer overflow vulnerability in the DHCPv6 client (udhcpc6) DNS_SERVERS o

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-01 发布INFO

A heap-based buffer overflow in the Kerberos hash parser in hashcat v7.1.2 allows an attacker to cause a denial of service or possibly execute arbitrary code via a crafted Kerbe...

CVE-2026-42483

A heap-based buffer overflow in the Kerberos hash parser in hashcat v7.1.2 allows an attacker to cause a denial of servi

历史摘要 · 未重新核验 · NVD

安全公告2026-05-01 发布INFO

SBC codec crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service and...

CVE-2026-5403

SBC codec crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service and possible code execution

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-01 发布INFO

RDP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of...

CVE-2026-5405

RDP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service and possible code

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-01 发布INFO

RDP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service and possible code execution

CVE-2026-5405

RDP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service and possible code

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-01 发布INFO

SBC codec crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service and possible code execution

CVE-2026-5403

SBC codec crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service and possible code execution

历史摘要 · 未重新核验 · NVD

安全公告2026-04-30 发布INFO

When processing the header of an incoming message, libnv failed to properly validate the message...

CVE-2026-35547

When processing the header of an incoming message, libnv failed to properly validate the message size. The lack of vali

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-04-30 发布INFO

iLBC audio codec crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

CVE-2026-6529

iLBC audio codec crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-04-30 发布INFO

As dhclient is building an environment to pass to dhclient-script, it may need to resize the...

CVE-2026-42512

As dhclient is building an environment to pass to dhclient-script, it may need to resize the array of string pointers.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-04-30 发布INFO

DCP-ETSI protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial...

CVE-2026-6530

DCP-ETSI protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-04-30 发布INFO

TLS protocol dissector heap overflow in Wireshark 4.6.0 to 4.6.4 allows denial of service and...

CVE-2026-5402

TLS protocol dissector heap overflow in Wireshark 4.6.0 to 4.6.4 allows denial of service and possible code execution

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-04-30 发布INFO

DCP-ETSI protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial...

CVE-2026-5653

DCP-ETSI protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

历史摘要 · 未重新核验 · GitHub Advisory