#cwe-1284

共收录 182 条相关情报。

← 返回所有主题
漏洞预警2026-07-29 发布INFO

Improper Input Validation in the decode() function of the traceparser library could allow an attacker with a corrupted kernel trace event log (.kev) file, to execute arbitrary c...

CVE-2026-40272

Improper Input Validation in the decode() function of the traceparser library could allow an attacker with a corrupted k

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-27 发布INFO

Integer Underflow (Wrap or Wraparound) vulnerability in erlang otp erlang/otp (erts modules), erlang otp erts (erts modules) allows Forced Integer Overflow, Excessive Allocation...

CVE-2026-54890

Integer Underflow (Wrap or Wraparound) vulnerability in erlang otp erlang/otp (erts modules), erlang otp erts (erts modu

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-27 发布INFO

Unauthenticated Other Vulnerability Type in Booking and Rental Manager <= 2.7.2 versions.

CVE-2026-59532

Unauthenticated Other Vulnerability Type in Booking and Rental Manager <= 2.7.2 versions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-27 发布INFO

Unauthenticated Unknown in Falcon – WordPress Optimizations & Tweaks <= 2.10.0 versions.

CVE-2026-59531

Unauthenticated Unknown in Falcon – WordPress Optimizations & Tweaks <= 2.10.0 versions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-27 发布INFO

Improper Validation of Specified Quantity in Input, Out-of-bounds Read vulnerability in Apache Thrift C++ bindings. This issue affects Apache Thrift: before 0.24.0. Users are ...

CVE-2026-58662

Improper Validation of Specified Quantity in Input, Out-of-bounds Read vulnerability in Apache Thrift C++ bindings. Thi

历史摘要 · 未重新核验 · NVD

安全公告2026-07-25 发布INFO

Knot Resolver before 6.4.1 allows remote code execution via a heap-based buffer overflow in the...

CVE-2026-66374

Knot Resolver before 6.4.1 allows remote code execution via a heap-based buffer overflow in the DoQ (DNS-over-QUIC) rece

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-07-22 发布INFO

It is possible for an attacker's zone to respond to a query with an RRSIG that has a smaller number of labels than the zone in which the RRSIG is contained. This causes `named` ...

CVE-2026-11721

It is possible for an attacker's zone to respond to a query with an RRSIG that has a smaller number of labels than the z

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-22 发布INFO

If BIND encounters a particular invalid data structure in a DNS record, it will accept the invalid data, and may subsequently abort and exit. BIND will first need to store a DN...

CVE-2026-10822

If BIND encounters a particular invalid data structure in a DNS record, it will accept the invalid data, and may subsequ

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-22 发布INFO

In NLnet Labs Unbound 1.22.0 up to and including 1.25.1, when downstream DNS-over-QUIC (DoQ) is enabled, the first two bidirectional streams on a new QUIC connection (stream_id ...

CVE-2026-32665

In NLnet Labs Unbound 1.22.0 up to and including 1.25.1, when downstream DNS-over-QUIC (DoQ) is enabled, the first two b

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-21 发布INFO

CImg Library is a C++ library for image processing. Prior to version 4.0.0 in `_load_analyze()`, the header_size field is read as an `unsigned int` from the first 4 bytes of an ...

CVE-2026-47667

CImg Library is a C++ library for image processing. Prior to version 4.0.0 in `_load_analyze()`, the header_size field i

历史摘要 · 未重新核验 · NVD

安全公告2026-07-20 发布INFO

Mistune toc / TableOfContents directive: heading IDs use predictable `toc_N` numbering with no slugification, allowing collision with attacker-controlled `id="toc_N"` content

CVE-2026-59930

## Summary **Type:** Predictable identifier generation. The `toc` plugin and `TableOfContents` directive both default t

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-07-17 发布INFO

Improper Validation of Specified Quantity in Input in ZenHive mpp allows an unauthenticated remote client to drain the fee-payer wallet in a single request by naming an arbitrar...

CVE-2026-59695

Improper Validation of Specified Quantity in Input in ZenHive mpp allows an unauthenticated remote client to drain the f

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-17 发布INFO

Improper Validation of Specified Quantity in Input in ZenHive mpp allows an unauthenticated remote client to inflate the fee-payer's gas cost per payment by a large multiplier, ...

CVE-2026-59694

Improper Validation of Specified Quantity in Input in ZenHive mpp allows an unauthenticated remote client to inflate the

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-17 发布INFO

Improper Validation of Specified Quantity in Input in ZenHive mpp allows an unauthenticated remote client to drain the fee-payer wallet, resulting in denial of service for legit...

CVE-2026-59252

Improper Validation of Specified Quantity in Input in ZenHive mpp allows an unauthenticated remote client to drain the f

历史摘要 · 未重新核验 · NVD

安全公告2026-07-17 发布INFO

Missing gas_limit validation in mpp Tempo fee-payer enables wallet drain

CVE-2026-59252

Improper Validation of Specified Quantity in Input in ZenHive mpp allows an unauthenticated remote client to drain the f

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-07-17 发布INFO

Unbounded access list in mpp Tempo fee-payer inflates gas cost per payment

CVE-2026-59694

Improper Validation of Specified Quantity in Input in ZenHive mpp allows an unauthenticated remote client to inflate the

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-07-17 发布INFO

Unbounded max_fee_per_gas in mpp Tempo fee-payer enables single-request wallet drain

CVE-2026-59695

Improper Validation of Specified Quantity in Input in ZenHive mpp allows an unauthenticated remote client to drain the f

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-07-15 发布INFO

Pomerium Pre-Auth Memory Exhaustion via Unbounded zstd Decompression in HPKE Callback

CVE-2026-50285

## Summary The HPKE V2 URL decode path in `pkg/hpke/url.go` decompresses attacker-controlled zstd data without any size

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-07-13 发布INFO

Improper Validation of Specified Quantity in Input vulnerability in WPDeveloper Better Payment – Instant Payments, Donations, Fundraising with Subscriptions &amp; More better-pa...

CVE-2026-57364

Improper Validation of Specified Quantity in Input vulnerability in WPDeveloper Better Payment – Instant Payments, Donat

历史摘要 · 未重新核验 · NVD

安全公告2026-07-10 发布INFO

An Improper Validation of Specified Quantity in Input vulnerability in the Packet Forwarding...

CVE-2026-57019

An Improper Validation of Specified Quantity in Input vulnerability in the Packet Forwarding Engine (pfe) of Juniper Net

历史摘要 · 未重新核验 · GitHub Advisory