#cwe-1288

共收录 11 条相关情报。

← 返回所有主题
安全公告2026-09-24 发布INFO

`@bsv/wallet-toolbox` / `-client` / `-mobile` don't verify storage-supplied recipient output scripts against caller-requested outputs in createAction

CVE-2026-56744

Reported by @echennells (Eric Chennells). Migrated from public issue #191 to a private advisory. **Affected:** `@bsv/wa

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-05 发布INFO

The rpcap client code that processes a RPCAP_MSG_PACKET message received from the server incorrectly validates its headers. A malicious server can send a crafted message and ca...

CVE-2026-18238

The rpcap client code that processes a RPCAP_MSG_PACKET message received from the server incorrectly validates its heade

历史摘要 · 未重新核验 · NVD

安全公告2026-09-05 发布INFO

OOBR in rpcap client in libpcap before 1.10.7

CVE-2026-18238

The rpcap client code that processes a RPCAP_MSG_PACKET message received from the server incorrectly validates its heade

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-08-11 发布INFO

CVAT is an open source interactive video and image annotation tool for computer vision. From 2.17.0 until 2.72.0, a user with write access to a CVAT job can submit a batch autom...

CVE-2026-73219

CVAT is an open source interactive video and image annotation tool for computer vision. From 2.17.0 until 2.72.0, a user

历史摘要 · 未重新核验 · NVD

安全公告2026-08-11 发布INFO

CVAT: Denial of service with regards to automatic annotation

CVE-2026-73219

CVAT is an open source interactive video and image annotation tool for computer vision. From 2.17.0 until 2.72.0, a user

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-07-31 发布INFO

A flaw was found in the keycloak-services component of Keycloak, which handles OpenID Connect (OIDC) authentication flows. The issue occurs because the security check designed t...

CVE-2026-18209

A flaw was found in the keycloak-services component of Keycloak, which handles OpenID Connect (OIDC) authentication flow

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-17 发布INFO

A flaw was found in the Keycloak keycloak-services component, which handles the management of identity providers. The issue occurs when a delegated administrator updates an OIDC...

CVE-2026-15943

A flaw was found in the Keycloak keycloak-services component, which handles the management of identity providers. The is

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-14 发布INFO

Improper validation of consistency within input in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.

CVE-2026-42982

Improper validation of consistency within input in Windows Secure Kernel Mode allows an authorized attacker to elevate p

历史摘要 · 未重新核验 · NVD

安全公告2026-07-05 发布INFO

A flaw exists in the org.keycloak.broker.oidc package where the OIDC broker incorrectly...

CVE-2026-14781

A flaw exists in the org.keycloak.broker.oidc package where the OIDC broker incorrectly synchronizes the email_verified

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-07-05 发布INFO

A flaw exists in the org.keycloak.broker.oidc package where the OIDC broker incorrectly synchronizes the email_verified claim. When an OIDC identity provider is configured with ...

CVE-2026-14781

A flaw exists in the org.keycloak.broker.oidc package where the OIDC broker incorrectly synchronizes the email_verified

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-27 发布INFO

A flaw was found in Keycloak, an open-source identity and access management solution. When a client application is configured to accept broad redirect Uniform Resource Identifie...

CVE-2026-9689

A flaw was found in Keycloak, an open-source identity and access management solution. When a client application is confi

历史摘要 · 未重新核验 · NVD