#cwe-1284

共收录 182 条相关情报。

← 返回所有主题
漏洞预警2026-08-27 发布INFO

ServiceNow has remediated a sandbox escape security issue that was identified in the Now Platform. This security issue could allow an unauthenticated user to execute arbitrary c...

CVE-2026-6876

ServiceNow has remediated a sandbox escape security issue that was identified in the Now Platform. This security issue c

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-27 发布INFO

DeadLetterPublishingRecovererFactory reads the retry_topic-original-timestamp header from an inbound ConsumerRecord and passes its raw bytes directly to new BigInteger(header.va...

CVE-2026-59317

DeadLetterPublishingRecovererFactory reads the retry_topic-original-timestamp header from an inbound ConsumerRecord and

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-21 发布INFO

Software installed and run as a non-privileged user may conduct improper GPU system calls to pass invalid log2 page size when allocating physical pages leading to OOB read and/o...

CVE-2026-45201

Software installed and run as a non-privileged user may conduct improper GPU system calls to pass invalid log2 page size

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-20 发布INFO

tor before 0.4.9.9 was prone to an infinite loop when decompressing a truncated zlib/gzip stream with done=1. A truncated stream never reaches Z_STREAM_END, causing zlib to re...

CVE-2026-77640

tor before 0.4.9.9 was prone to an infinite loop when decompressing a truncated zlib/gzip stream with done=1. A truncat

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-20 发布INFO

libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality into your application. Prior ...

CVE-2026-53587

libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-18 发布INFO

Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: REST). Supported versions that are affected are 17.0-26.6. Difficult to exploit vulnerabili...

CVE-2026-60820

Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: REST). Supported versions that are

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-18 发布INFO

Improper input validation in the capabilities route handler in OpenSearch Dashboards - the size of the request payload is not bounded - might allow remote attackers to cause a d...

CVE-2026-75897

Improper input validation in the capabilities route handler in OpenSearch Dashboards - the size of the request payload i

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-18 发布INFO

Unauthenticated Broken Access Control in Appointment Hour Booking <= 1.5.91 versions.

CVE-2026-66679

Unauthenticated Broken Access Control in Appointment Hour Booking <= 1.5.91 versions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-15 发布INFO

DBI versions before 1.652 for Perl allow a heap out-of-bounds write via an unvalidated numeric placeholder that sets the binder counter in preparse. preparse reserves seven out...

CVE-2026-73194

DBI versions before 1.652 for Perl allow a heap out-of-bounds write via an unvalidated numeric placeholder that sets the

历史摘要 · 未重新核验 · NVD

安全公告2026-08-14 发布INFO

An improper access control vulnerability exists where an authenticated non-administrative...

CVE-2026-19639

An improper access control vulnerability exists where an authenticated non-administrative application user could potenti

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-14 发布INFO

An improper access control vulnerability exists where an authenticated non-administrative application user could potentially view settings outside of their assigned scope.

CVE-2026-19639

An improper access control vulnerability exists where an authenticated non-administrative application user could potenti

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-13 发布INFO

rsync before 3.5.0 contains a logic error in --max-alloc handling that allows a sender or configuration setting --max-alloc=0 to disable allocation sanity checks entirely rather...

CVE-2026-53794

rsync before 3.5.0 contains a logic error in --max-alloc handling that allows a sender or configuration setting --max-al

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-12 发布INFO

Net::CIDR::Set versions before 0.23 for Perl allow memory exhaustion and malformed set ranges via unbounded IPv6 prefix lengths. The _encode method accepts any prefix length ma...

CVE-2026-19566

Net::CIDR::Set versions before 0.23 for Perl allow memory exhaustion and malformed set ranges via unbounded IPv6 prefix

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

Improper Validation of Specified Quantity in Input vulnerability in Samsung Open Source rlottie allows Input Data Manipulation.

CVE-2026-19518

Improper Validation of Specified Quantity in Input vulnerability in Samsung Open Source rlottie allows Input Data Manipu

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

Improper Validation of Specified Quantity in Input and Allocation of Resources Without Limits or Throttling vulnerability in Samsung Open Source rlottie allows Excessive Allocat...

CVE-2026-19517

Improper Validation of Specified Quantity in Input and Allocation of Resources Without Limits or Throttling vulnerabilit

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-10 发布INFO

GNU Emacs for Android improperly validates the table header input in sfnt_read_table_directory() in src/sfnt.c. Due to an incorrect comparison variable in the read-length check,...

CVE-2026-71394

GNU Emacs for Android improperly validates the table header input in sfnt_read_table_directory() in src/sfnt.c. Due to a

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-06 发布INFO

H5Z__filter_fletcher32 in H5Zfletcher32.c in HDF5 through 2.3.0 computes the data length to checksum by subtracting the 4-byte trailing checksum size from the input buffer size ...

CVE-2026-19028

H5Z__filter_fletcher32 in H5Zfletcher32.c in HDF5 through 2.3.0 computes the data length to checksum by subtracting the

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-05 发布INFO

H5Z__filter_nbit in H5Znbit.c in HDF5 through 2.3.0 dereferences cd_values[0] through cd_values[4] without validating that cd_values is non-NULL or that cd_nelmts is at least 5,...

CVE-2026-19026

H5Z__filter_nbit in H5Znbit.c in HDF5 through 2.3.0 dereferences cd_values[0] through cd_values[4] without validating th

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-05 发布INFO

Nuxt is an open-source web development framework for Vue.js. From 3.1.0 until 3.21.10 and 4.5.1, an unauthenticated attacker can use a server island v-for prop, including vforTo...

CVE-2026-71314

Nuxt is an open-source web development framework for Vue.js. From 3.1.0 until 3.21.10 and 4.5.1, an unauthenticated atta

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-05 发布INFO

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN engineering team has conducted a comprehensive internal security revie...

CVE-2026-20313

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN engineering t

历史摘要 · 未重新核验 · NVD