#cwe-170

共收录 17 条相关情报。

漏洞预警2026-10-27 发布MEDIUM

Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, an ...

CVE-2026-57185

Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 2

来源摘录 · NVD / OSV.dev

#advisory #cve #cwe-126 #cwe-170

安全公告2026-10-27 发布INFO

Asterisk: Buffer over-read in Asterisk PJSIP MWI body parser

CVE-2026-57185

Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 2

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-126 #cwe-170

漏洞预警2026-10-13 发布MEDIUM

Out-of-bounds read in Windows USB Print Driver allows an authorized attacker to disclose information locally.

CVE-2026-96860

Out-of-bounds read in Windows USB Print Driver allows an authorized attacker to disclose information locally.

来源摘录 · NVD

#cve #cwe-125 #cwe-170

漏洞预警2026-09-22 发布INFO

radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's binary property-list Unicode parser was vulnerable because the binary-pr...

CVE-2026-81882

radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's binary property

历史摘要 · 未重新核验 · NVD

#cve #cwe-125 #cwe-170

安全公告2026-09-22 发布INFO

radare2: Missing string termination causes heap out-of-bounds read in radare2 bplist parser

CVE-2026-81882

radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's binary property

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-125 #cwe-170

漏洞预警2026-08-19 发布INFO

Wazuh is a free and open source platform used for threat prevention, detection, and response. From 4.5.0 until 4.14.6 and 5.0.0-beta2, compare_wazuh_versions() in src/shared/ver...

CVE-2026-45798

Wazuh is a free and open source platform used for threat prevention, detection, and response. From 4.5.0 until 4.14.6 an

历史摘要 · 未重新核验 · NVD

#cve #cwe-121 #cwe-170

漏洞预警2026-07-16 发布INFO

h2o is an HTTP server with support for HTTP/1.x, HTTP/2 and HTTP/3. Prior to commit 8dc37cb, when h2o receives a ClientHello message over TLS or QUIC and it contains a zero-leng...

CVE-2026-44452

h2o is an HTTP server with support for HTTP/1.x, HTTP/2 and HTTP/3. Prior to commit 8dc37cb, when h2o receives a ClientH

历史摘要 · 未重新核验 · NVD

#cve #cwe-125 #cwe-170

安全公告2026-07-16 发布INFO

h2o is vulnerable to heap overrun

CVE-2026-44452

h2o is an HTTP server with support for HTTP/1.x, HTTP/2 and HTTP/3. Prior to commit 8dc37cb, when h2o receives a ClientH

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-125 #cwe-170

安全公告2026-07-05 发布INFO

Improper null termination vulnerability in TUBITAK BILGEM Software Technologies Research...

CVE-2026-12386

Improper null termination vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Pen allows Ove

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-170 #severity:low

漏洞预警2026-07-05 发布INFO

Improper null termination vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Pen allows Overflow Buffers. This issue affects Pardus Pen: from <=4.1...

CVE-2026-12386

Improper null termination vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Pen allows Ove

历史摘要 · 未重新核验 · NVD

#cve #cwe-170

漏洞预警2026-06-09 发布INFO

A remote, unauthenticated attacker can trigger memory corruption in Zephyr's HTTP server WebSocket upgrade path by sending a crafted Sec-WebSocket-Key header. The HTTP/1 header ...

CVE-2026-5067

A remote, unauthenticated attacker can trigger memory corruption in Zephyr's HTTP server WebSocket upgrade path by sendi

历史摘要 · 未重新核验 · NVD

#cve #cwe-170 #cwe-787

安全公告2026-05-17 发布INFO

Crypt::OpenSSL::PKCS12 versions through 1.94 for Perl truncates passwords with embedded NULLs. ...

CVE-2026-8721

Crypt::OpenSSL::PKCS12 versions through 1.94 for Perl truncates passwords with embedded NULLs. Password parameters in P

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-170

漏洞预警2026-05-17 发布INFO

Crypt::OpenSSL::PKCS12 versions through 1.94 for Perl truncates passwords with embedded NULLs. Password parameters in PKCS12.xs are declared char *, which routes through Perl's...

CVE-2026-8721

Crypt::OpenSSL::PKCS12 versions through 1.94 for Perl truncates passwords with embedded NULLs. Password parameters in P

历史摘要 · 未重新核验 · NVD

#cve #cwe-170

漏洞预警2026-05-07 发布CRITICAL

A flaw was found in gnutls. Servers configured with RSA-PSK (Rivest–Shamir–Adleman – Pre-Shared Key) wrongfully matched usernames containing a NUL character with truncated usern...

CVE-2026-42010

A flaw was found in gnutls. Servers configured with RSA-PSK (Rivest–Shamir–Adleman – Pre-Shared Key) wrongfully matched

来源摘录 · NVD

#cve #cwe-170 #cwe-626

漏洞预警2026-05-05 发布INFO

Sandboxie-Plus is an open source sandbox-based isolation software for Windows. In versions 1.17.2 and earlier, NamedPipeServer::OpenHandler copies the server field from NAMED_PI...

CVE-2026-34464

Sandboxie-Plus is an open source sandbox-based isolation software for Windows. In versions 1.17.2 and earlier, NamedPipe

历史摘要 · 未重新核验 · NVD

#cve #cwe-121 #cwe-170

漏洞预警2026-05-05 发布INFO

Sandboxie-Plus is an open source sandbox-based isolation software for Windows. In versions 1.17.2 and earlier, several ProcessServer handlers (KillAllHandler, SuspendAllHandler,...

CVE-2026-34462

Sandboxie-Plus is an open source sandbox-based isolation software for Windows. In versions 1.17.2 and earlier, several P

历史摘要 · 未重新核验 · NVD

#cve #cwe-121 #cwe-170

漏洞预警2026-05-04 发布INFO

Improper Null Termination, Out-of-bounds Read vulnerability in Apache HTTP Server. This issue affects Apache HTTP Server: through 2.4.66. Users are recommended to upgrade to v...

CVE-2026-34032

Improper Null Termination, Out-of-bounds Read vulnerability in Apache HTTP Server. This issue affects Apache HTTP Serve

历史摘要 · 未重新核验 · NVD

#cve #cwe-125 #cwe-170