#cwe-125

共收录 1574 条相关情报。

← 返回所有主题
漏洞预警2026-07-30 发布INFO

GoAccess is a real-time web log analyzer and interactive viewer that runs in a terminal in *nix systems or through the browser. Prior to 1.11, the parse_ios() function uses an a...

CVE-2026-55777

GoAccess is a real-time web log analyzer and interactive viewer that runs in a terminal in *nix systems or through the b

历史摘要 · 未重新核验 · NVD

安全公告2026-07-30 发布INFO

GoAccess: Out-of-bounds heap read in parse_ios() via crafted User-Agent leads to remote crash/DoS

CVE-2026-55777

GoAccess is a real-time web log analyzer and interactive viewer that runs in a terminal in *nix systems or through the b

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-07-30 发布INFO

re2 provides Node.js bindings for Google's RE2 regular expression engine. Prior to 1.25.2, re2 validates lastIndex against the UTF-8 byte length of a subject but uses it as a UT...

CVE-2026-67550

re2 provides Node.js bindings for Google's RE2 regular expression engine. Prior to 1.25.2, re2 validates lastIndex again

历史摘要 · 未重新核验 · NVD

安全公告2026-07-30 发布INFO

re2: Out-of-bounds heap read in `exec`/`test`/`match` via attacker-influenced `lastIndex` on a non-ASCII subject → uncatchable process crash (DoS)

CVE-2026-67550

re2 provides Node.js bindings for Google's RE2 regular expression engine. Prior to 1.25.2, re2 validates lastIndex again

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-07-30 发布INFO

Out of bounds read in Dawn in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to...

CVE-2026-17995

Out of bounds read in Dawn in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform an out of bounds

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-07-30 发布INFO

Out of bounds read in Dawn in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security ...

CVE-2026-17995

Out of bounds read in Dawn in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform an out of bounds

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-30 发布INFO

Out of bounds read in WebXR in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security...

CVE-2026-17869

Out of bounds read in WebXR in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform an out of bound

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-30 发布INFO

Out of bounds read in WebGL in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security...

CVE-2026-17772

Out of bounds read in WebGL in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform an out of bound

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-30 发布INFO

Out of bounds read in Media in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox es...

CVE-2026-17770

Out of bounds read in Media in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had compromised

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-30 发布INFO

Out of bounds read in Skia in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via...

CVE-2026-17745

Out of bounds read in Skia in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the ren

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-30 发布INFO

Insufficient validation of untrusted input in ANGLE in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentia...

CVE-2026-17701

Insufficient validation of untrusted input in ANGLE in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote atta

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-30 发布INFO

Out of bounds read in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape vi...

CVE-2026-17678

Out of bounds read in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the re

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-30 发布INFO

ImageMagick is free and open-source software used for editing and manipulating digital images. In versions prior to 7.1.2-27, the BGR decoder does not check for an end-of-file i...

CVE-2026-64685

ImageMagick is free and open-source software used for editing and manipulating digital images. In versions prior to 7.1.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-29 发布INFO

In subsys/debug/coredump/coredump_shell.c, print_coredump_hdr() used the 16-bit tgt_code field of a stored Zephyr coredump header directly as an index into coredump_target_code2...

CVE-2026-10684

In subsys/debug/coredump/coredump_shell.c, print_coredump_hdr() used the 16-bit tgt_code field of a stored Zephyr coredu

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-29 发布INFO

A maliciously crafted DWG or DXF file, when parsed through Autodesk AutoCAD, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to ...

CVE-2026-17550

A maliciously crafted DWG or DXF file, when parsed through Autodesk AutoCAD, can force an Out-of-Bounds Read vulnerabili

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-29 发布INFO

A maliciously crafted DWG or DXF file, when parsed through Autodesk AutoCAD, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to ...

CVE-2026-16465

A maliciously crafted DWG or DXF file, when parsed through Autodesk AutoCAD, can force an Out-of-Bounds Read vulnerabili

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-29 发布INFO

Apache Traffic Server reads out of bounds while parsing DNS answers. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.9, from 9.0.0 through 9.2.14, from 10.0.0 ...

CVE-2026-58160

Apache Traffic Server reads out of bounds while parsing DNS answers. This issue affects Apache Traffic Server: from 8.0

历史摘要 · 未重新核验 · NVD

安全公告2026-07-28 发布INFO

pglogical's apply worker does not sufficiently validate the length of certain fields in incoming...

CVE-2026-50735

pglogical's apply worker does not sufficiently validate the length of certain fields in incoming replication protocol me

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-07-28 发布INFO

pglogical's apply worker does not sufficiently validate the length of certain fields in incoming replication protocol messages before copying them, resulting in an out-of-bounds...

CVE-2026-50735

pglogical's apply worker does not sufficiently validate the length of certain fields in incoming replication protocol me

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-28 发布INFO

[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] The directory and Rock Ridge / SUSP walk in lib...

CVE-2026-42494

[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to whi

历史摘要 · 未重新核验 · NVD