#cwe-1284

共收录 182 条相关情报。

漏洞预警2026-10-12 发布INFO

modern-tar 0.3.5 through 0.8.5 contains a memory exhaustion vulnerability that allows attackers to produce negative entry sizes via non-octal bytes parsed by readOctal(). Attack...

CVE-2026-109380

modern-tar 0.3.5 through 0.8.5 contains a memory exhaustion vulnerability that allows attackers to produce negative entr

历史摘要 · 未重新核验 · NVD

#cve #cwe-1284

漏洞预警2026-10-12 发布INFO

Improper Validation of Specified Quantity in Input vulnerability in VideoWhisper.com Paid Videochat Turnkey Site ppv-live-webcams allows Input Data Manipulation.This issue affec...

CVE-2026-107429

Improper Validation of Specified Quantity in Input vulnerability in VideoWhisper.com Paid Videochat Turnkey Site ppv-liv

历史摘要 · 未重新核验 · NVD

#cve #cwe-1284

漏洞预警2026-10-12 发布INFO

Improper Validation of Specified Quantity in Input vulnerability in WP Desk Flexible Quantity – Measurement Price Calculator for WooCommerce flexible-quantity-measurement-price-...

CVE-2026-106605

Improper Validation of Specified Quantity in Input vulnerability in WP Desk Flexible Quantity – Measurement Price Calcul

历史摘要 · 未重新核验 · NVD

#cve #cwe-1284

漏洞预警2026-10-10 发布INFO

Subscriber Bypass Vulnerability in MicroPayments <= 3.2.9 versions.

CVE-2026-107434

Subscriber Bypass Vulnerability in MicroPayments <= 3.2.9 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-1284

漏洞预警2026-10-10 发布INFO

Heap buffer overflow in the HLL sketch deserialization of Apache DataSketches C++ (repo: datasketches-cpp). When deserializing a sketch in LIST mode, from either a byte buffer ...

CVE-2026-103501

Heap buffer overflow in the HLL sketch deserialization of Apache DataSketches C++ (repo: datasketches-cpp). When deseri

历史摘要 · 未重新核验 · NVD

#cve #cwe-122 #cwe-1284

安全公告2026-10-10 发布INFO

Apache DataSketches: datasketches-cpp: HLL CouponList Deserialization Buffer Overflow allows memory corruption via a crafted sketch

CVE-2026-103501

Heap buffer overflow in the HLL sketch deserialization of Apache DataSketches C++ (repo: datasketches-cpp). When deseri

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-122 #cwe-1284

漏洞预警2026-10-08 发布MEDIUM

A flaw was found in luksmeta. A local attacker with administrative privileges can cause data corruption when saving metadata to a Linux Unified Key Setup (LUKS) device. Due to i...

CVE-2026-107565

A flaw was found in luksmeta. A local attacker with administrative privileges can cause data corruption when saving meta

来源摘录 · NVD

#cve #cwe-1284

安全公告2026-10-05 发布INFO

vLLM: Scale-out disaggregated multimodal transport trusts caller-supplied features

CVE-2026-105754

## Affected - **Ecosystem / package:** pip / `vllm` - **Affected versions:** vLLM ≤ 0.25.1 (confirmed on 0.25.1, commit

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #pip #cwe-20 #cwe-617 #cwe-639 #cwe-668

漏洞预警2026-10-05 发布INFO

vLLM is an inference and serving engine for large language models. Prior to 0.30.0, the /inference/v1/generate endpoint in the disaggregated scale-out path accepts caller-suppli...

CVE-2026-105754

vLLM is an inference and serving engine for large language models. Prior to 0.30.0, the /inference/v1/generate endpoint

历史摘要 · 未重新核验 · NVD

#cve #cwe-20 #cwe-617 #cwe-639 #cwe-668 #cwe-704

漏洞预警2026-10-05 发布INFO

Improper Validation of Specified Quantity in Input vulnerability in VillaTheme BuildKit – Product Builder for WooCommerce – Custom PC Builder woo-product-builder allows Input Da...

CVE-2026-97275

Improper Validation of Specified Quantity in Input vulnerability in VillaTheme BuildKit – Product Builder for WooCommerc

历史摘要 · 未重新核验 · NVD

#cve #cwe-1284

漏洞预警2026-10-05 发布INFO

Improper Validation of Specified Quantity in Input vulnerability in Magepeople inc. Taxi Booking Manager for WooCommerce ecab-taxi-booking-manager allows Input Data Manipulation...

CVE-2026-103351

Improper Validation of Specified Quantity in Input vulnerability in Magepeople inc. Taxi Booking Manager for WooCommerce

历史摘要 · 未重新核验 · NVD

#cve #cwe-1284

安全公告2026-10-03 发布INFO

Improper Validation of Specified Quantity in Input vulnerability in Themeum Kirki kirki allows...

CVE-2026-103065

Improper Validation of Specified Quantity in Input vulnerability in Themeum Kirki kirki allows Accessing Functionality N

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-1284 #severity:high

漏洞预警2026-10-03 发布HIGH

Improper Validation of Specified Quantity in Input vulnerability in Themeum Kirki kirki allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Kirki:...

CVE-2026-103065

CVE-2026-103065 影响 WordPress 生态中广泛使用的定制器框架库 Themeum Kirki（Kirki），影响范围为 6.3.1 及之前的全部版本。该漏洞被归类为「输入中指定数量验证不当」（Improper Vali

历史摘要 · 未重新核验 · NVD

#cve #cwe-1284

漏洞预警2026-10-02 发布INFO

Uncaught exception, Improper validation of specified quantity in input, Improperly controlled modification of object prototype attributes ('prototype pollution') vulnerability i...

CVE-2026-94646

Uncaught exception, Improper validation of specified quantity in input, Improperly controlled modification of object pro

历史摘要 · 未重新核验 · NVD

#cve #cwe-248 #cwe-1284 #cwe-1321

漏洞预警2026-10-02 发布INFO

Improper handling of highly compressed data (data amplification), Function call with incorrectly specified arguments, Improper validation of specified quantity in input vulnerab...

CVE-2026-94636

Improper handling of highly compressed data (data amplification), Function call with incorrectly specified arguments, Im

历史摘要 · 未重新核验 · NVD

#cve #cwe-409 #cwe-628 #cwe-1284

漏洞预警2026-10-02 发布INFO

Improper validation of specified quantity in input, Allocation of resources without limits or throttling vulnerability in Apache Thrift nodejs bindings. This issue affects Ap...

CVE-2026-94645

Improper validation of specified quantity in input, Allocation of resources without limits or throttling vulnerability i

历史摘要 · 未重新核验 · NVD

#cve #cwe-770 #cwe-1284

漏洞预警2026-10-02 发布INFO

Improper validation of specified quantity in input, Allocation of resources without limits or throttling, Excessive Iteration vulnerability in Apache Thrift PHP bindings. Thi...

CVE-2026-91137

Improper validation of specified quantity in input, Allocation of resources without limits or throttling, Excessive Iter

历史摘要 · 未重新核验 · NVD

#cve #cwe-770 #cwe-834 #cwe-1284

漏洞预警2026-10-01 发布INFO

IVFFlat index build in pgvector before 0.8.7 allows a database user to write data out-of-bounds, which can lead to arbitrary code execution.

CVE-2026-103484

IVFFlat index build in pgvector before 0.8.7 allows a database user to write data out-of-bounds, which can lead to arbit

历史摘要 · 未重新核验 · NVD

#cve #cwe-787 #cwe-1284

安全公告2026-10-01 发布INFO

pgvector buffer overflow in IVFFlat index build

CVE-2026-103484

IVFFlat index build in pgvector before 0.8.7 allows a database user to write data out-of-bounds, which can lead to arbit

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-1284 #cwe-787

漏洞预警2026-09-30 发布INFO

Kiteworks did not enforce the maximum permitted value for a configurable security-policy setting. An authenticated administrator could set this value outside its intended range ...

CVE-2026-102111

Kiteworks did not enforce the maximum permitted value for a configurable security-policy setting. An authenticated admin

历史摘要 · 未重新核验 · NVD

#cve #cwe-1284