#cwe-126

共收录 128 条相关情报。

← 返回所有主题
漏洞预警2026-07-20 发布INFO

xrdp is an open source RDP server. Versions 0.10.6 and prior contain a vulnerability concerning the processing of RDP Confirm Active PDU, where during the capability negotiation...

CVE-2026-55238

xrdp is an open source RDP server. Versions 0.10.6 and prior contain a vulnerability concerning the processing of RDP Co

历史摘要 · 未重新核验 · NVD

安全公告2026-07-20 发布INFO

xrdp: Malformed Confirm Active capability sets cause out-of-bounds reads

CVE-2026-55238

xrdp is an open source RDP server. Versions 0.10.6 and prior contain a vulnerability concerning the processing of RDP Co

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-07-20 发布INFO

ProFTPD before 1.3.9c and 1.3.10rc3 contains a signed integer overflow vulnerability in the mod_sftp module's SCP size-record parser that allows authenticated low-privilege atta...

CVE-2026-63091

ProFTPD before 1.3.9c and 1.3.10rc3 contains a signed integer overflow vulnerability in the mod_sftp module's SCP size-r

历史摘要 · 未重新核验 · NVD

安全公告2026-07-20 发布INFO

ProFTPD mod_sftp Signed Integer Overflow via SCP Size-Record Parser

CVE-2026-63091

ProFTPD before 1.3.9c and 1.3.10rc3 contains a signed integer overflow vulnerability in the mod_sftp module's SCP size-r

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-07-16 发布INFO

An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. There is heap exposure in...

CVE-2026-47088

An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. There is heap exposure in nested MIME comment parsi

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-07-16 发布INFO

An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. There is heap exposure in nested MIME comment parsing. An authenticated IMAP user could craft an email messa...

CVE-2026-47088

An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. There is heap exposure in nested MIME comment parsi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-15 发布INFO

TDengine is a time-series database optimized for Internet of Things devices. Prior to 3.4.1.14, source/libs/parser/src/parTokenizer.c tGetToken() incremented past a trailing bac...

CVE-2026-62353

TDengine is a time-series database optimized for Internet of Things devices. Prior to 3.4.1.14, source/libs/parser/src/p

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-14 发布INFO

Tornado is a Python web framework and asynchronous networking library. Prior to 6.5.6, the optional native extension tornado.speedups implemented websocket_mask without validati...

CVE-2026-49854

Tornado is a Python web framework and asynchronous networking library. Prior to 6.5.6, the optional native extension tor

历史摘要 · 未重新核验 · NVD

安全公告2026-07-14 发布INFO

Tornado: Out-of-bounds memory access in C extension

CVE-2026-49854

Tornado is a Python web framework and asynchronous networking library. Prior to 6.5.6, the optional native extension tor

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-07-14 发布INFO

Buffer over-read in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.

CVE-2026-57968

Buffer over-read in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-14 发布INFO

Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVE-2026-55036

Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-14 发布INFO

Buffer over-read in Windows Kernel allows an authorized attacker to disclose information locally.

CVE-2026-50475

Buffer over-read in Windows Kernel allows an authorized attacker to disclose information locally.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-14 发布INFO

Buffer over-read in Windows RDP allows an unauthorized attacker to disclose information over a network.

CVE-2026-50445

Buffer over-read in Windows RDP allows an unauthorized attacker to disclose information over a network.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-14 发布INFO

Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.

CVE-2026-50435

Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-14 发布INFO

Incorrect conversion between numeric types in Windows NTFS allows an authorized attacker to elevate privileges locally.

CVE-2026-50402

Incorrect conversion between numeric types in Windows NTFS allows an authorized attacker to elevate privileges locally.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-14 发布INFO

Buffer over-read in Windows Print Spooler Components allows an authorized attacker to disclose information locally.

CVE-2026-50383

Buffer over-read in Windows Print Spooler Components allows an authorized attacker to disclose information locally.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-14 发布INFO

Buffer over-read in Windows Redirected Drive Buffering allows an authorized attacker to elevate privileges locally.

CVE-2026-50372

Buffer over-read in Windows Redirected Drive Buffering allows an authorized attacker to elevate privileges locally.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-14 发布INFO

A buffer over-read vulnerability in Fortinet FortiOS 7.6.0 through 7.6.2, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiProxy 7.6.0 through 7.6.5, FortiProxy 7.4.0...

CVE-2026-59840

A buffer over-read vulnerability in Fortinet FortiOS 7.6.0 through 7.6.2, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all v

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-14 发布INFO

A buffer over-read vulnerability in Fortinet FortiOS 7.6.0 through 7.6.2, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions may allow an authenticated remote attacker to ret...

CVE-2025-43892

A buffer over-read vulnerability in Fortinet FortiOS 7.6.0 through 7.6.2, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all v

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-08 发布INFO

An issue in SQLite before Fossil check-in 869a51ae84df allows a local attacker to obtain sensitive information via the Session Extension changeset concat/changegroup merge path

CVE-2026-50813

An issue in SQLite before Fossil check-in 869a51ae84df allows a local attacker to obtain sensitive information via the S

历史摘要 · 未重新核验 · NVD