#cwe-129

共收录 141 条相关情报。

← 返回所有主题

漏洞预警2026-07-08 发布INFO

The application opens a PDF, but the cloud-like appearance of the construction process lacks proper setting of an upper limit and consistency checks. Out-of-bounds access to the...

CVE-2026-57251

The application opens a PDF, but the cloud-like appearance of the construction process lacks proper setting of an upper

历史摘要 · 未重新核验 · NVD

#cve #cwe-129

漏洞预警2026-07-02 发布HIGH

GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is an addon that can be installed with various GeoVision software (GV-VMS, GV-C...

CVE-2026-57272

GeoVision 软件（如 GV-VMS、GV-Cloud）的 GeoWebPlayer 插件（也称为 Web Plugin 或 WS Player）中，其 WebSocket 服务器在处理来自 localhost 的命令时，对部分命令中

历史摘要 · 未重新核验 · NVD

#cve #cwe-129

漏洞预警2026-07-02 发布HIGH

GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is an addon that can be installed with various GeoVision software (GV-VMS, GV-C...

CVE-2026-57271

CVE-2026-57271 是 GeoVision 系列软件中 GeoWebPlayer 插件的一个高危漏洞。GeoWebPlayer（在 GV-VMS 文档中称为“Web Plugin”，在 VMS-Cloud 中称为“WS Playe

历史摘要 · 未重新核验 · NVD

#cve #cwe-129

漏洞预警2026-07-02 发布HIGH

GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is an addon that can be installed with various GeoVision software (GV-VMS, GV-C...

CVE-2026-57270

GeoWebPlayer（在GV-VMS文档中称为“Web Plugin”，在VMS-Cloud中称为“WS Player”）是随多个GeoVision软件（如GV-VMS、GV-Cloud等）一起安装的附加组件。该组件会创建一个WebSo

历史摘要 · 未重新核验 · NVD

#cve #cwe-129

漏洞预警2026-07-02 发布HIGH

GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is an addon that can be installed with various GeoVision software (GV-VMS, GV-C...

CVE-2026-57269

CVE-2026-57269 是 GeoWebPlayer（也称为 GV-VMS 中的 Web Plugin 或 VMS-Cloud 中的 WS Player）插件中的一个越界访问漏洞。该插件可随 GeoVision 的多种软件（如 GV-

历史摘要 · 未重新核验 · NVD

#cve #cwe-129

漏洞预警2026-07-02 发布HIGH

GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is an addon that can be installed with various GeoVision software (GV-VMS, GV-C...

CVE-2026-57268

GeoWebPlayer（也称为GV-VMS文档中的“Web Plugin”和VMS-Cloud的“WS Player”）是GeoVision系列软件（如GV-VMS、GV-Cloud等）的一个附加组件，用于创建WebSocket服务器以扩

历史摘要 · 未重新核验 · NVD

#cve #cwe-129

漏洞预警2026-07-02 发布HIGH

GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is an addon that can be installed with various GeoVision software (GV-VMS, GV-C...

CVE-2026-57267

GeoWebPlayer（GV-VMS 文档中称为“Web Plugin”，VMS-Cloud 中称为“WS Player”）是 GeoVision 系列软件（GV-VMS、GV-Cloud 等）的一个附加组件。该组件创建一个 WebSoc

历史摘要 · 未重新核验 · NVD

#cve #cwe-129

漏洞预警2026-07-02 发布HIGH

GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is an addon that can be installed with various GeoVision software (GV-VMS, GV-C...

CVE-2026-57266

GeoVision 系列软件（GV-VMS、GV-Cloud 等）中的 GeoWebPlayer 插件（亦称“Web Plugin”或“WS Player”）存在一个高危的数组越界漏洞。该插件会创建一个 WebSocket 服务器，用于增强

历史摘要 · 未重新核验 · NVD

#cve #cwe-129

漏洞预警2026-07-02 发布HIGH

GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is an addon that can be installed with various GeoVision software (GV-VMS, GV-C...

CVE-2026-57265

GeoWebPlayer（在GV-VMS文档中也称为“Web Plugin”，在VMS-Cloud中称为“WS Player”）是GeoVision系列软件（如GV-VMS、GV-Cloud等）的一个附加组件。该组件创建一个WebSocke

历史摘要 · 未重新核验 · NVD

#cve #cwe-129

漏洞预警2026-07-02 发布HIGH

GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is an addon that can be installed with various GeoVision software (GV-VMS, GV-C...

CVE-2026-57264

GeoWebPlayer（在GV-VMS文档中称为“Web Plugin”，在VMS-Cloud中称为“WS Player”）是GeoVision软件（如GV-VMS、GV-Cloud等）的一个附加组件，用于创建WebSocket服务器以扩

历史摘要 · 未重新核验 · NVD

#cve #cwe-129

漏洞预警2026-07-02 发布HIGH

GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is an addon that can be installed with various GeoVision software (GV-VMS, GV-C...

CVE-2026-13132

CVE-2026-13132 影响 GeoVision 旗下多款软件（如 GV-VMS、GV-Cloud 等）的可选插件 GeoWebPlayer（也称作 Web Plugin 或 WS Player）。该插件会创建一个 WebSocket

历史摘要 · 未重新核验 · NVD

#cve #cwe-129

漏洞预警2026-07-02 发布HIGH

GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is an addon that can be installed with various GeoVision software (GV-VMS, GV-C...

CVE-2026-13131

CVE-2026-13131 影响 GeoVision 软件系列（如 GV-VMS、GV-Cloud 等）中安装的 GeoWebPlayer 插件（也称为 Web Plugin 或 WS Player）。该插件创建一个 WebSocket

历史摘要 · 未重新核验 · NVD

#cve #cwe-129

漏洞预警2026-07-01 发布INFO

DVP80ES300T with Improper Validation of Array Index Vulnerability

CVE-2026-14193

DVP80ES300T with Improper Validation of Array Index Vulnerability

历史摘要 · 未重新核验 · NVD

#cve #cwe-129

漏洞预警2026-07-01 发布INFO

An out-of-bounds heap write exists in the RAR5 recovery-volume (.rev) parser in WinRAR and UnRAR (RecVolumes5::ReadHeader in recvol5.cpp). The RecItems vector is sized only when...

CVE-2026-14191

An out-of-bounds heap write exists in the RAR5 recovery-volume (.rev) parser in WinRAR and UnRAR (RecVolumes5::ReadHeade

历史摘要 · 未重新核验 · NVD

#cve #cwe-129 #cwe-787

安全公告2026-06-26 发布INFO

vtk vtk-dicom vtkDICOMItem::NewDataElement heap-based buffer overflow vulnerability

CVE-2026-22879

vtk vtk-dicom vtkDICOMItem::NewDataElement heap-based buffer overflow vulnerability

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-129 #severity:high

漏洞预警2026-06-25 发布INFO

vtk vtk-dicom vtkDICOMItem::NewDataElement heap-based buffer overflow vulnerability

CVE-2026-22879

vtk vtk-dicom vtkDICOMItem::NewDataElement heap-based buffer overflow vulnerability

历史摘要 · 未重新核验 · NVD

#cve #cwe-129

安全公告2026-06-25 发布INFO

golang.org/x/crypto/ssh/agent: Invoking pathological inputs can lead to client panic

CVE-2026-46598

For certain crafted inputs, a 'ed25519.PrivateKey' was created by casting malformed wire bytes, leading to a panic when

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #go #cwe-129 #severity:medium

漏洞预警2026-06-25 发布INFO

libais through 0.15 VdmStream::AddLine uses an unchecked sentinel value as a vector index when processing AIS sentences with empty or out-of-range sequential message IDs. Remote...

CVE-2026-56770

libais through 0.15 VdmStream::AddLine uses an unchecked sentinel value as a vector index when processing AIS sentences

历史摘要 · 未重新核验 · NVD

#cve #cwe-129

漏洞预警2026-06-24 发布INFO

Marlin Firmware through 2.1.2.7, fixed in commit 1f255d1, when built with MESH_BED_LEVELING enabled, contains an out-of-bounds write vulnerability in the M421 G-code handler tha...

CVE-2026-56111

Marlin Firmware through 2.1.2.7, fixed in commit 1f255d1, when built with MESH_BED_LEVELING enabled, contains an out-of-

历史摘要 · 未重新核验 · NVD

#cve #cwe-129

安全公告2026-06-17 发布INFO

When NGINX Gateway Fabric is configured using GRPCRoutes, an authenticated, remote attacker with...

CVE-2026-32682

When NGINX Gateway Fabric is configured using GRPCRoutes, an authenticated, remote attacker with permission to create or

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-129 #severity:high