#cwe-125

共收录 1565 条相关情报。

← 返回所有主题
漏洞预警2026-10-06 发布INFO

A flaw was found in SSSD. A local attacker can exploit this issue by sending a specially crafted request with an invalid packet length to the autofs responder UNIX socket. This ...

CVE-2026-104037

A flaw was found in SSSD. A local attacker can exploit this issue by sending a specially crafted request with an invalid

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-05 发布INFO

A flaw was found in sssd. This vulnerability allows a local user to cause a Denial of Service (DoS) by submitting a specially crafted passkey authentication token that lacks nul...

CVE-2026-104030

A flaw was found in sssd. This vulnerability allows a local user to cause a Denial of Service (DoS) by submitting a spec

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-05 发布MEDIUM

A flaw was found in SSSD. A local attacker can exploit this vulnerability by sending a specially crafted request to the autofs responder UNIX socket. Due to improper buffer offs...

CVE-2026-104029

A flaw was found in SSSD. A local attacker can exploit this vulnerability by sending a specially crafted request to the

来源摘录 · NVD

漏洞预警2026-10-05 发布INFO

The JavaScript preprocessing (Duktape) engine on Zabbix server has a vulnerability where a limited administrator is able to read raw heap data potentially resulting in leaked da...

CVE-2026-59782

The JavaScript preprocessing (Duktape) engine on Zabbix server has a vulnerability where a limited administrator is able

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-05 发布INFO

A vulnerability was detected in vgmstream up to r2117. Affected by this vulnerability is the function ps_find_padding of the file src/coding/psx_decoder.c of the component VAG F...

CVE-2026-105251

A vulnerability was detected in vgmstream up to r2117. Affected by this vulnerability is the function ps_find_padding of

历史摘要 · 未重新核验 · NVD

安全公告2026-10-05 发布INFO

vgmstream VAG File psx_decoder.c ps_find_padding out-of-bounds

CVE-2026-105251

A vulnerability was detected in vgmstream up to r2117. Affected by this vulnerability is the function ps_find_padding of

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-10-05 发布INFO

In Modem, there is a possible out of bounds read due to an incorrect bounds check. This could...

CVE-2026-20534

In Modem, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote denial of s

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-05 发布INFO

In Modem, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station con...

CVE-2026-20534

In Modem, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote denial of s

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-04 发布INFO

A flaw has been found in NASA cFS up to 7.0.1. This issue affects the function CFE_FS_ParseInputFileNameEx of the file cfe/modules/fs/fsw/src/cfe_fs_api.c. This manipulation cau...

CVE-2026-105164

A flaw has been found in NASA cFS up to 7.0.1. This issue affects the function CFE_FS_ParseInputFileNameEx of the file c

历史摘要 · 未重新核验 · NVD

安全公告2026-10-04 发布INFO

NASA cFS cfe_fs_api.c CFE_FS_ParseInputFileNameEx out-of-bounds

CVE-2026-105164

A flaw has been found in NASA cFS up to 7.0.1. This issue affects the function CFE_FS_ParseInputFileNameEx of the file c

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-10-03 发布INFO

Mooncake transfer engine before 0.3.12 contains an out-of-bounds read vulnerability in the...

CVE-2026-104433

Mooncake transfer engine before 0.3.12 contains an out-of-bounds read vulnerability in the readString function of includ

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-03 发布INFO

Mooncake transfer engine before 0.3.12 contains an out-of-bounds read vulnerability in the readString function of include/common.h that allows unauthenticated attackers to crash...

CVE-2026-104433

Mooncake transfer engine before 0.3.12 contains an out-of-bounds read vulnerability in the readString function of includ

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-01 发布INFO

Fortra BoKS Manager contains an out-of-bounds read vulnerability in the custom TLS ClientHello parser used by boks_portmux. A remote unauthenticated attacker can submit a malfor...

CVE-2026-79896

Fortra BoKS Manager contains an out-of-bounds read vulnerability in the custom TLS ClientHello parser used by boks_portm

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-01 发布INFO

A flaw was found in tnef. An attacker can exploit this vulnerability by providing a specially crafted file containing uncompressed Rich Text Format (RTF) data. Because the appli...

CVE-2026-103678

A flaw was found in tnef. An attacker can exploit this vulnerability by providing a specially crafted file containing un

历史摘要 · 未重新核验 · NVD

安全公告2026-10-01 发布INFO

Tnef: heap out-of-bounds read in get_rtf_data_from_buf() via uncompressed rtf mapi value

CVE-2026-103678

A flaw was found in tnef. An attacker can exploit this vulnerability by providing a specially crafted file containing un

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-10-01 发布INFO

A flaw was found in GEGL. The Radiance HDR loader reads past the end of a memory-mapped image when an uncompressed scanline is shorter than the width declared in the file header...

CVE-2026-103641

A flaw was found in GEGL. The Radiance HDR loader reads past the end of a memory-mapped image when an uncompressed scanl

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

Out of bounds read in WebGL in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security seve...

CVE-2026-102318

Out of bounds read in WebGL in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to read memory outside the

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

pageant provides a [PageantStream] type that implements [AsyncRead] and [AsyncWrite] traits and can be used to talk to a running Pageant instance. Prior to pageant 0.2.3, the Wi...

CVE-2026-102820

pageant provides a [PageantStream] type that implements [AsyncRead] and [AsyncWrite] traits and can be used to talk to a

历史摘要 · 未重新核验 · NVD

安全公告2026-09-29 发布INFO

pageant: Out-of-bounds read / oversized allocation in `pageant` MemoryMap::read via a malicious Pageant agent (Windows)

CVE-2026-102820

pageant provides a [PageantStream] type that implements [AsyncRead] and [AsyncWrite] traits and can be used to talk to a

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-09-29 发布INFO

An unprivileged, memory-protected ThreadX module can have the kernel read and write memory at addresses of its choosing, in privileged mode, and can use that to clear the MPU en...

CVE-2026-102757

An unprivileged, memory-protected ThreadX module can have the kernel read and write memory at addresses of its choosing,

历史摘要 · 未重新核验 · NVD