#cwe-191

共收录 203 条相关情报。

← 返回所有主题
漏洞预警2026-10-29 发布INFO

P-Net before 1.0.3 contains an integer underflow in pf_cpm_c_data_ind(). When handling a received cyclic data frame while the consumer is in the FRUN or RUN state, the offset of...

CVE-2026-111735

P-Net before 1.0.3 contains an integer underflow in pf_cpm_c_data_ind(). When handling a received cyclic data frame whil

来源摘录 · NVD

漏洞预警2026-10-28 发布HIGH

An Integer Underflow vulnerability in DhcpMessageDecoder in Juniper Networks Session Smart Router allows an attacker with local network access to cause information disclosure an...

CVE-2026-103411

An Integer Underflow vulnerability in DhcpMessageDecoder in Juniper Networks Session Smart Router allows an attacker wit

来源摘录 · NVD

漏洞预警2026-10-21 发布INFO

Apache Traffic Server can be used to exhaust an HTTP/1.1 origin's worker pool via a malformed padded HTTP/2 DATA frame. This issue affects Apache Traffic Server: from 8.0.0 t...

CVE-2026-111808

Apache Traffic Server can be used to exhaust an HTTP/1.1 origin's worker pool via a malformed padded HTTP/2 DATA frame.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-21 发布HIGH

An integer underflow in the mcpack2pb component of Apache bRPC (version < 1.18.0) on all platforms allows remote attackers to crash a bRPC server by sending a request containing...

CVE-2026-74755

An integer underflow in the mcpack2pb component of Apache bRPC (version < 1.18.0) on all platforms allows remote attacke

来源摘录 · NVD

漏洞预警2026-10-20 发布INFO

The TLS 1.3 Certificate-message parser in NetX Secure decrements the message length to skip a context byte without first establishing that the message has a byte to skip. A zero...

CVE-2026-92853

The TLS 1.3 Certificate-message parser in NetX Secure decrements the message length to skip a context byte without first

历史摘要 · 未重新核验 · NVD

安全公告2026-10-17 发布INFO

FreeRDP from 3.14.1 before 3.32.0 contains an integer underflow in the WinPR BMP writer, where a...

CVE-2026-111881

FreeRDP from 3.14.1 before 3.32.0 contains an integer underflow in the WinPR BMP writer, where a mismatched stride calcu

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-13 发布HIGH

Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.

CVE-2026-88143

Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges loca

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine

CVE-2026-85339

Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Integer underflow (wrap or wraparound) in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-83676

Integer underflow (wrap or wraparound) in Windows Installer allows an authorized attacker to elevate privileges locally.

来源摘录 · NVD

漏洞预警2026-10-13 发布CRITICAL

Integer underflow (wrap or wraparound) in Windows PowerShell allows an unauthorized attacker to execute code over a network.

CVE-2026-83578

Integer underflow (wrap or wraparound) in Windows PowerShell allows an unauthorized attacker to execute code over a netw

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Integer underflow (wrap or wraparound) in Windows Kerberos allows an authorized attacker to elevate privileges locally.

CVE-2026-70064

Integer underflow (wrap or wraparound) in Windows Kerberos allows an authorized attacker to elevate privileges locally.

来源摘录 · NVD

漏洞预警2026-10-13 发布INFO

Integer underflow (wrap or wraparound) in Windows Failover Cluster allows an unauthorized attacker to deny service over a network.

CVE-2026-102192

Integer underflow (wrap or wraparound) in Windows Failover Cluster allows an unauthorized attacker to deny service over

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

Heap-based buffer overflow in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network.

CVE-2026-100222

Heap-based buffer overflow in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

A flaw was found in BusyBox's udhcpc DHCP client. When processing raw DHCP packets, the client replaces the validated packet length with an attacker-controlled value from the IP...

CVE-2026-88833

A flaw was found in BusyBox's udhcpc DHCP client. When processing raw DHCP packets, the client replaces the validated pa

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

The openUBMC device-management process parses PLDM-over-MCTP and NCSI-over-MCTP responses from on-bus devices, and three response parsers in the shared transport libraries subtr...

CVE-2026-65200

The openUBMC device-management process parses PLDM-over-MCTP and NCSI-over-MCTP responses from on-bus devices, and three

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE ...

CVE-2026-102073

A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All ver

历史摘要 · 未重新核验 · NVD

安全公告2026-10-13 发布INFO

SAP Cloud Connector contains an improper authorization check, which could be exploited by a low...

CVE-2026-58242

SAP Cloud Connector contains an improper authorization check, which could be exploited by a low-privileged attacker thro

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-13 发布INFO

SAP NetWeaver and SAP Web Dispatcher do not properly validate certain fields in specially crafted...

CVE-2026-58249

SAP NetWeaver and SAP Web Dispatcher do not properly validate certain fields in specially crafted requests handled by an

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-13 发布INFO

SAP NetWeaver and SAP Web Dispatcher do not properly validate certain fields in specially crafted requests handled by an internal protocol component. An unauthenticated attacker...

CVE-2026-58249

SAP NetWeaver and SAP Web Dispatcher do not properly validate certain fields in specially crafted requests handled by an

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

SAP Cloud Connector contains an improper authorization check, which could be exploited by a low-privileged attacker through specially crafted requests. Exploitation requires the...

CVE-2026-58242

SAP Cloud Connector contains an improper authorization check, which could be exploited by a low-privileged attacker thro

历史摘要 · 未重新核验 · NVD