#cwe-173

共收录 5 条相关情报。

漏洞预警2026-10-01 发布INFO

CVE-2026-103276

Ghost versions before 6.20.0 contain a file extension filtering bypass vulnerability that allows unauthenticated attacke

历史摘要 · 未重新核验 · NVD

安全公告2026-10-01 发布INFO

CVE-2026-103276

Ghost versions before 6.20.0 contain a file extension filtering bypass vulnerability that allows unauthenticated attacke

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-09-07 发布INFO

CVE-2026-81638

Improper Handling of Alternate Encoding vulnerability in ash-project ash_double_entry allows an attacker to submit sever

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-20 发布INFO

CVE-2026-19611

A flaw was found in WildFly Elytron. Password hashing and verification normalize input with Unicode NFKC, which can coll

历史摘要 · 未重新核验 · NVD

安全公告2026-07-22 发布INFO

CVE-2026-10050

### Summary The `DigestAuthentication.apply()` method in Jetty's HTTP client uses `getBytes(StandardCharsets.ISO_8859_1)

历史摘要 · 未重新核验 · GitHub Advisory