#cwe-1286

共收录 40 条相关情报。

漏洞预警2026-10-27 发布INFO

A NULL pointer dereference vulnerability in WatchGuard Fireware OS’s management interface allows a remote, unauthenticated attacker with network access to the management interfa...

CVE-2026-111107

A NULL pointer dereference vulnerability in WatchGuard Fireware OS’s management interface allows a remote, unauthenticat

历史摘要 · 未重新核验 · NVD

#cve #cwe-248 #cwe-476 #cwe-1286

漏洞预警2026-10-19 发布HIGH

Cpanel::JSON::XS versions from 4.33 before 4.80 for Perl accept malformed UTF-8 in bare hash keys under allow_barekey in decode_hv. With utf8 and allow_barekey, which relaxed e...

CVE-2026-110675

Cpanel::JSON::XS versions from 4.33 before 4.80 for Perl accept malformed UTF-8 in bare hash keys under allow_barekey in

来源摘录 · NVD

#cve #cwe-1286

漏洞预警2026-10-13 发布HIGH

Improper validation of syntactic correctness of input in Windows Hyper-V allows an authorized attacker to perform spoofing locally.

CVE-2026-83728

Improper validation of syntactic correctness of input in Windows Hyper-V allows an authorized attacker to perform spoofi

来源摘录 · NVD

#cve #cwe-1286

漏洞预警2026-10-12 发布INFO

Tink-go (tink-crypto/tink-go) through 2.8.0 contains an input-validation vulnerability where keyset.NewHandleWithNoSecrets() and ReadWithNoSecrets() skip the structural Validate...

CVE-2026-109425

Tink-go (tink-crypto/tink-go) through 2.8.0 contains an input-validation vulnerability where keyset.NewHandleWithNoSecre

历史摘要 · 未重新核验 · NVD

#cve #cwe-1286

漏洞预警2026-09-28 发布INFO

A vulnerability was determined in Barco ClickShare CX-20 Gen2 up to 02.26.00.0007. Affected by this issue is some unknown functionality of the file /wallpaper of the component W...

CVE-2026-100902

A vulnerability was determined in Barco ClickShare CX-20 Gen2 up to 02.26.00.0007. Affected by this issue is some unknow

历史摘要 · 未重新核验 · NVD

#cve #cwe-20 #cwe-1286

漏洞预警2026-09-22 发布INFO

Net::IDN::Punycode versions before 2.590 for Perl hang, crash or return a wrong label via unvalidated malformed UTF-8 in encode_punycode. Neither backend checks that its input ...

CVE-2026-87082

Net::IDN::Punycode versions before 2.590 for Perl hang, crash or return a wrong label via unvalidated malformed UTF-8 in

历史摘要 · 未重新核验 · NVD

#cve #cwe-835 #cwe-1286

漏洞预警2026-09-22 发布INFO

Net::IDN::Punycode::PP versions before 2.590 for Perl decode a truncated label to a name containing a character it never encoded in decode_punycode. The pure-Perl decoder reads...

CVE-2026-87080

Net::IDN::Punycode::PP versions before 2.590 for Perl decode a truncated label to a name containing a character it never

历史摘要 · 未重新核验 · NVD

#cve #cwe-1286

安全公告2026-09-22 发布INFO

Net::IDN::Punycode versions before 2.590 for Perl hang, crash or return a wrong label via unvalidated malformed UTF-8 in encode_punycode

CVE-2026-87082

Net::IDN::Punycode versions before 2.590 for Perl hang, crash or return a wrong label via unvalidated malformed UTF-8 in

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-1286 #cwe-835

安全公告2026-09-22 发布INFO

Net::IDN::Punycode::PP versions before 2.590 for Perl decode a truncated label to a name containing a character it never encoded in decode_punycode

CVE-2026-87080

Net::IDN::Punycode::PP versions before 2.590 for Perl decode a truncated label to a name containing a character it never

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-1286

漏洞预警2026-09-15 发布INFO

Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, ResponseCookie.render writes attacker-influenced name, content, domain, path, and extension values...

CVE-2026-69211

Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, ResponseCookie.render writes attacker-inf

历史摘要 · 未重新核验 · NVD

#cve #cwe-113 #cwe-1286

漏洞预警2026-09-11 发布INFO

Authentication bypass using an alternate path or channel and Improper validation of syntactic correctness of input vulnerability in Brainzcompany Zenius EMS 8.0 allows Remote Co...

CVE-2026-88260

Authentication bypass using an alternate path or channel and Improper validation of syntactic correctness of input vulne

历史摘要 · 未重新核验 · NVD

#cve #cwe-288 #cwe-1286

安全公告2026-09-10 发布INFO

Traefik: Rootless HTTP/1 request-target routes as "/" but is forwarded verbatim, bypassing path-scoped routing, middleware guards and access logging

CVE-2026-88009

## Summary Traefik accepts an HTTP/1.x request whose request-target is in rootless / opaque form (for example `GET http

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #go #cwe-444 #cwe-1286 #severity:high

漏洞预警2026-09-10 发布INFO

Traefik is an open source HTTP reverse proxy and load balancer. Prior to 2.11.57, and 3.7.13, Traefik accepts a rootless HTTP/1 request target that Go stores in URL.Opaque while...

CVE-2026-88009

Traefik is an open source HTTP reverse proxy and load balancer. Prior to 2.11.57, and 3.7.13, Traefik accepts a rootless

历史摘要 · 未重新核验 · NVD

#cve #cwe-444 #cwe-1286

安全公告2026-09-10 发布INFO

Traefik: Rootless HTTP/1 request-target routes as "/" but is forwarded verbatim, bypassing path-scoped routing, middleware guards and access logging

CVE-2026-88009

Traefik is an open source HTTP reverse proxy and load balancer. Prior to 2.11.57, and 3.7.13, Traefik accepts a rootless

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-1286 #cwe-444

漏洞预警2026-09-01 发布INFO

xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module. Prior to @xmldom/xmldom versions 0.8.15 and 0.9.12, and in xmldom versi...

CVE-2026-83611

xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module. Prior to @xmld

历史摘要 · 未重新核验 · NVD

#cve #cwe-1286

安全公告2026-09-01 发布INFO

xmldom: Parser silently accepts a not-well-formed end tag whose name is followed by a line break and trailing content

CVE-2026-83611

xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module. Prior to @xmld

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-1286

漏洞预警2026-08-10 发布INFO

Mastodon is a free, open-source social network server based on ActivityPub. Prior to 4.4.21, 4.5.14, 4.6.4, and 4.7.0-beta.1, PrivateAddressCheck.private_address? in app/lib/pri...

CVE-2026-72916

Mastodon is a free, open-source social network server based on ActivityPub. Prior to 4.4.21, 4.5.14, 4.6.4, and 4.7.0-be

历史摘要 · 未重新核验 · NVD

#cve #cwe-918 #cwe-1286

安全公告2026-07-14 发布INFO

Fedify has an incomplete SSRF mitigation after GHSA-p9cg-vqcc-grcx: validatePublicUrl allows special-use IPv4 ranges

CVE-2026-50131

### Summary Fedify previously addressed SSRF/internal network access in GHSA-p9cg-vqcc-grcx by adding public URL valida

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #npm #cwe-918 #cwe-1286 #cwe-1389 #severity:high

安全公告2026-07-10 发布INFO

An Improper Validation of Syntactic Correctness of Input vulnerability in the SIP plugin of...

CVE-2026-57026

An Improper Validation of Syntactic Correctness of Input vulnerability in the SIP plugin of Juniper Networks Junos OS on

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-1286 #severity:high

漏洞预警2026-07-09 发布INFO

An Improper Validation of Syntactic Correctness of Input vulnerability in the SIP plugin of Juniper Networks Junos OS on MX Series with SPC3 and SRX Series allows an unauthentic...

CVE-2026-57026

An Improper Validation of Syntactic Correctness of Input vulnerability in the SIP plugin of Juniper Networks Junos OS on

历史摘要 · 未重新核验 · NVD

#cve #cwe-1286