#cwe-130

共收录 53 条相关情报。

漏洞预警2026-10-30 发布MEDIUM

tcpflow through 1.6.1 contains an out-of-bounds read vulnerability that allows unauthenticated attackers to read process memory by sending packets with forged IP payload lengths...

CVE-2026-119600

tcpflow through 1.6.1 contains an out-of-bounds read vulnerability that allows unauthenticated attackers to read process

来源摘录 · NVD

#cve #cwe-130

漏洞预警2026-10-29 发布MEDIUM

MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. From 3.0.0 until 3.3.7, 3.4.5, and 3.5.10, the ReadableByteBuf.readLength()...

CVE-2026-119279

MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. From 3.0.0 until 3

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-130 #cwe-190 #maven #severity:medium

漏洞预警2026-10-29 发布MEDIUM

MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. From 3.0.0 until 3.3.7, 3.4.5, and 3.5.11, decoders for OK packet session-s...

CVE-2026-119277

MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. From 3.0.0 until 3

来源摘录 · NVD

#cve #cwe-125 #cwe-130

漏洞预警2026-10-29 发布MEDIUM

MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. From 3.0.0 until 3.3.7, 3.4.5, and 3.5.11, when CLIENT_SESSION_TRACK was ne...

CVE-2026-119276

MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. From 3.0.0 until 3

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-130 #cwe-789 #maven #severity:medium

漏洞预警2026-10-29 发布INFO

P-Net before 1.0.3 passes the application alarm callback a data length derived from the variable part length field of a received RTA alarm frame without checking it against the ...

CVE-2026-115794

P-Net before 1.0.3 passes the application alarm callback a data length derived from the variable part length field of a

来源摘录 · NVD

#cve #cwe-130

漏洞预警2026-10-28 发布INFO

HTTP::Body versions before 1.23_01 for Perl lose track of chunk boundaries in chunked request bodies when a read ends inside a chunk. In chunked mode, used when no content leng...

CVE-2026-116531

HTTP::Body versions before 1.23_01 for Perl lose track of chunk boundaries in chunked request bodies when a read ends in

来源摘录 · NVD / OSV.dev

#advisory #cve #cwe-130

漏洞预警2026-10-27 发布INFO

In EPICS Base release 7.0.10 and prior, an insufficient validation of element or length values in a network message can cause the application to read beyond the bounds of an all...

CVE-2026-114597

In EPICS Base release 7.0.10 and prior, an insufficient validation of element or length values in a network message can

历史摘要 · 未重新核验 · NVD

#cve #cwe-130

安全公告2026-10-24 发布INFO

OpenResty lua-resty-dns before 0.24 contains an improper input validation vulnerability in...

CVE-2026-116013

OpenResty lua-resty-dns before 0.24 contains an improper input validation vulnerability in parse_section() and _decode_n

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-130 #severity:medium

漏洞预警2026-10-24 发布LOW

OpenResty lua-resty-dns before 0.24 contains an improper input validation vulnerability in parse_section() and _decode_name() that fails to check resource record lengths against...

CVE-2026-116013

OpenResty lua-resty-dns before 0.24 contains an improper input validation vulnerability in parse_section() and _decode_n

来源摘录 · NVD

#cve #cwe-130

漏洞预警2026-10-20 发布HIGH

Enabling `CURLOPT_CRLF` causes curl to advertise the raw input byte count in the `IMAP APPEND {N}` literal while transmitting line-ending expanded data. The server reads only $N...

CVE-2026-87864

Enabling `CURLOPT_CRLF` causes curl to advertise the raw input byte count in the `IMAP APPEND {N}` literal while transmi

来源摘录 · NVD

#cve #cwe-130

漏洞预警2026-10-20 发布MEDIUM

PEAK-System PCAN contains a vulnerable operation involving a variable-length receive-record copy. The driver uses a requested or queued record count without sufficiently capping...

CVE-2026-105960

PEAK-System PCAN contains a vulnerable operation involving a variable-length receive-record copy. The driver uses a requ

来源摘录 · NVD

#cve #cwe-130

漏洞预警2026-10-12 发布INFO

IBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to cause a denial of service due to improper handling of malformed frames, resulting in termination of the h...

CVE-2026-90921

IBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to cause a denial of service due to improper handli

历史摘要 · 未重新核验 · NVD

#cve #cwe-130

漏洞预警2026-10-12 发布INFO

AnyDesk before 8.0.3 allows unauthenticated remote attackers to execute arbitrary code via a heap-based buffer overflow, as demonstrated on Linux for command execution as root w...

CVE-2026-109390

AnyDesk before 8.0.3 allows unauthenticated remote attackers to execute arbitrary code via a heap-based buffer overflow,

历史摘要 · 未重新核验 · NVD

#cve #cwe-130

漏洞预警2026-10-02 发布INFO

Memory allocation with excessive size value, Improper handling of length parameter inconsistency vulnerability in Apache Thrift nodejs and D lang bindings. Both bindings' WebS...

CVE-2026-83745

Memory allocation with excessive size value, Improper handling of length parameter inconsistency vulnerability in Apache

历史摘要 · 未重新核验 · NVD

#cve #cwe-130 #cwe-789

漏洞预警2026-10-02 发布INFO

Memory allocation with excessive size value, Improper handling of length parameter inconsistency vulnerability in Apache Thrift Dart bindings. This issue affects Apache Thrif...

CVE-2026-94633

Memory allocation with excessive size value, Improper handling of length parameter inconsistency vulnerability in Apache

历史摘要 · 未重新核验 · NVD

#cve #cwe-130 #cwe-789

漏洞预警2026-10-02 发布INFO

Improper handling of length parameter inconsistency, Uncaught exception, Inefficient Algorithmic Complexity, Memory allocation with excessive size value, Initialization of a res...

CVE-2026-85494

Improper handling of length parameter inconsistency, Uncaught exception, Inefficient Algorithmic Complexity, Memory allo

历史摘要 · 未重新核验 · NVD

#cve #cwe-130 #cwe-248 #cwe-407 #cwe-789 #cwe-1188

漏洞预警2026-10-02 发布INFO

Allocation of resources without limits or throttling, Improper handling of length parameter inconsistency vulnerability in Apache Thrift Lua bindings. This issue affects Apac...

CVE-2026-94635

Allocation of resources without limits or throttling, Improper handling of length parameter inconsistency vulnerability

历史摘要 · 未重新核验 · NVD

#cve #cwe-130 #cwe-770

安全公告2026-10-02 发布INFO

This vulnerability enables unauthenticated remote code execution (RCE) on a victim's machine by...

CVE-2026-18397

This vulnerability enables unauthenticated remote code execution (RCE) on a victim's machine by exploiting a combination

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-130 #severity:critical

漏洞预警2026-10-01 发布INFO

This vulnerability enables unauthenticated remote code execution (RCE) on a victim's machine by exploiting a combination of cryptographic weaknesses and memory management issues...

CVE-2026-18397

This vulnerability enables unauthenticated remote code execution (RCE) on a victim's machine by exploiting a combination

历史摘要 · 未重新核验 · NVD

#cve #cwe-130 #cwe-252 #cwe-347 #cwe-457

漏洞预警2026-09-23 发布INFO

Improper handling of length parameter inconsistency vulnerability in Apache Tomcat allows WebSocket message smuggling when per-message-deflate is used. This issue affects Apa...

CVE-2026-87022

Improper handling of length parameter inconsistency vulnerability in Apache Tomcat allows WebSocket message smuggling wh

历史摘要 · 未重新核验 · NVD

#cve #cwe-130