#cwe-190

共收录 699 条相关情报。

漏洞预警2026-08-15 发布INFO

DBI versions before 1.652 for Perl allow a heap out-of-bounds write on 32-bit perl via an integer wraparound in the output buffer size computed by preparse. preparse reserves i...

CVE-2026-73193

DBI versions before 1.652 for Perl allow a heap out-of-bounds write on 32-bit perl via an integer wraparound in the outp

历史摘要 · 未重新核验 · NVD

#cve #cwe-190 #cwe-787

安全公告2026-08-13 发布INFO

IBM i 7.6, 7.5, 7.4, and 7.3 could allow an authenticated attacker to force a NetServer server...

CVE-2026-18671

IBM i 7.6, 7.5, 7.4, and 7.3 could allow an authenticated attacker to force a NetServer server thread exception, caused

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-190 #severity:medium

安全公告2026-08-13 发布INFO

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to an...

CVE-2026-17216

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to an integer error when pro

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-190 #severity:medium

漏洞预警2026-08-13 发布INFO

IBM i 7.6, 7.5, 7.4, and 7.3 could allow an authenticated attacker to force a NetServer server thread exception, caused by an integer overflow during bounds checking in request ...

CVE-2026-18671

IBM i 7.6, 7.5, 7.4, and 7.3 could allow an authenticated attacker to force a NetServer server thread exception, caused

历史摘要 · 未重新核验 · NVD

#cve #cwe-190

漏洞预警2026-08-13 发布INFO

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to an integer error when processing DRDA large-object headers.

CVE-2026-17216

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to an integer error when pro

历史摘要 · 未重新核验 · NVD

#cve #cwe-190

漏洞预警2026-08-13 发布INFO

OpenZeppelin Confidential Contracts is an experimental library for developing applications on the Zama fhEVM. Prior to 0.3.1, the ERC7984 contract tracked confidential total sup...

CVE-2026-73645

OpenZeppelin Confidential Contracts is an experimental library for developing applications on the Zama fhEVM. Prior to 0

历史摘要 · 未重新核验 · NVD

#cve #cwe-190

漏洞预警2026-08-13 发布INFO

frp is a fast reverse proxy. From 0.53.0 until 0.70.1, frp's optional SSH Tunnel Gateway in pkg/ssh/server.go parses an SSH exec channel request by adding 4 to an attacker-contr...

CVE-2026-73564

frp is a fast reverse proxy. From 0.53.0 until 0.70.1, frp's optional SSH Tunnel Gateway in pkg/ssh/server.go parses an

历史摘要 · 未重新核验 · NVD

#cve #cwe-129 #cwe-190

安全公告2026-08-13 发布INFO

OpenZeppelin Confidential Contracts ERC7984ERC20Wrapper: once a wrapper is filled, subsequent wrap requests do not revert and result in loss of funds.

CVE-2026-73645

OpenZeppelin Confidential Contracts is an experimental library for developing applications on the Zama fhEVM. Prior to 0

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-190

漏洞预警2026-08-13 发布INFO

CVE-2026-55400 is an integer underflow in Secure Access servers prior to version 14.57. Attackers with an authenticated session can send specially crafted traffic to a server ...

CVE-2026-55400

CVE-2026-55400 is an integer underflow in Secure Access servers prior to version 14.57. Attackers with an authenticated

历史摘要 · 未重新核验 · NVD

#cve #cwe-190

漏洞预警2026-08-13 发布INFO

vLLM is an inference and serving engine for large language models. Prior to 0.27.0, an integer overflow in blockIdx.x * 2 * d in activation_kernels.cu can cause act_and_mul_kern...

CVE-2026-73558

vLLM is an inference and serving engine for large language models. Prior to 0.27.0, an integer overflow in blockIdx.x *

历史摘要 · 未重新核验 · NVD

#cve #cwe-190

漏洞预警2026-08-13 发布INFO

rsync 3.1.0 before 3.5.0 contains a signed integer overflow vulnerability in the I/O timeout implementation that allows attackers to permanently disable connection timeouts by i...

CVE-2026-70462

rsync 3.1.0 before 3.5.0 contains a signed integer overflow vulnerability in the I/O timeout implementation that allows

历史摘要 · 未重新核验 · NVD

#cve #cwe-190 #cwe-835

漏洞预警2026-08-13 发布INFO

Integer wraparound in PostgreSQL fuzzystrmatch allows a user to direct writes to a huge range of addresses, executing arbitrary code as the operating system user running the dat...

CVE-2026-15742

Integer wraparound in PostgreSQL fuzzystrmatch allows a user to direct writes to a huge range of addresses, executing ar

历史摘要 · 未重新核验 · NVD

#cve #cwe-190

漏洞预警2026-08-13 发布INFO

Integer wraparound in PostgreSQL 32-bit builds of pltcl and plperl allows an object creator to cause the server to undersize an allocation and write out-of-bounds via crafted fu...

CVE-2026-14677

Integer wraparound in PostgreSQL 32-bit builds of pltcl and plperl allows an object creator to cause the server to under

历史摘要 · 未重新核验 · NVD

#cve #cwe-190

漏洞预警2026-08-13 发布INFO

Integer wraparound in PostgreSQL tsvector and tsquery data type functions allows an unprivileged database user to cause the server to undersize an allocation and write out-of-bo...

CVE-2026-14662

Integer wraparound in PostgreSQL tsvector and tsquery data type functions allows an unprivileged database user to cause

历史摘要 · 未重新核验 · NVD

#cve #cwe-190

安全公告2026-08-12 发布INFO

The MongoDB BI Connector ODBC Driver may write outside the bounds of a fixed-size buffer when an...

CVE-2026-19001

The MongoDB BI Connector ODBC Driver may write outside the bounds of a fixed-size buffer when an application supplies an

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-190 #severity:critical

漏洞预警2026-08-12 发布INFO

The MongoDB BI Connector ODBC Driver may write outside the bounds of a fixed-size buffer when an application supplies an unusually long catalog, schema, or object name to a meta...

CVE-2026-19001

The MongoDB BI Connector ODBC Driver may write outside the bounds of a fixed-size buffer when an application supplies an

历史摘要 · 未重新核验 · NVD

#cve #cwe-190

安全公告2026-08-11 发布INFO

Microsoft Security Advisory CVE-2026-62897 – .NET Remote Code Execution Vulnerability

CVE-2026-62897

## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Wind

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #nuget #cwe-190 #severity:high

安全公告2026-08-11 发布INFO

Microsoft Security Advisory CVE-2026-62886 – .NET Elevation of Privilege Vulnerability

CVE-2026-62886

## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Wind

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #nuget #cwe-122 #cwe-190 #severity:high

漏洞预警2026-08-11 发布INFO

Lightroom Classic is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation o...

CVE-2026-47940

Lightroom Classic is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code exe

历史摘要 · 未重新核验 · NVD

#cve #cwe-190

漏洞预警2026-08-11 发布INFO

nanoid is a secure, URL-friendly, unique string ID generator for JavaScript. Prior to versions 3.3.12 and 5.1.11, the nanoid(size) function in index.js and index.cjs coerces the...

CVE-2026-73086

nanoid is a secure, URL-friendly, unique string ID generator for JavaScript. Prior to versions 3.3.12 and 5.1.11, the na

历史摘要 · 未重新核验 · NVD

#cve #cwe-190