#cwe-191

共收录 203 条相关情报。

← 返回所有主题
漏洞预警2026-10-12 发布INFO

odhcpd is the DHCPv6, DHCPv4, and router-advertisement server used by OpenWrt. In commit cfddd56 and earlier, an unauthenticated host on the same link can first obtain two bindi...

CVE-2026-53922

odhcpd is the DHCPv6, DHCPv4, and router-advertisement server used by OpenWrt. In commit cfddd56 and earlier, an unauthe

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-12 发布INFO

FreeRDP before 3.32.0 contains a divide-by-zero vulnerability in the freerdp-shadow-cli shadow server: the frame id in a client's Frame Acknowledge PDU is stored without a range...

CVE-2026-109246

FreeRDP before 3.32.0 contains a divide-by-zero vulnerability in the freerdp-shadow-cli shadow server: the frame id in a

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-10 发布INFO

ExtUtils::Typemaps::STL::List versions before 1.07 for Perl allocate a 32 GiB array on an empty list. The OUTPUT typemaps call av_extend( av, len-1 ). On an empty list, this un...

CVE-2026-107794

ExtUtils::Typemaps::STL::List versions before 1.07 for Perl allocate a 32 GiB array on an empty list. The OUTPUT typema

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-10 发布INFO

ExtUtils::Typemaps::STL::Vector versions before 1.05 for Perl allocate a 32 GiB array on an empty list. The OUTPUT typemaps call av_extend( av, len-1 ). On an empty list, this ...

CVE-2013-10076

ExtUtils::Typemaps::STL::Vector versions before 1.05 for Perl allocate a 32 GiB array on an empty list. The OUTPUT type

历史摘要 · 未重新核验 · NVD

安全公告2026-10-10 发布INFO

ExtUtils::Typemaps::STL::List versions before 1.07 for Perl allocate a 32 GiB array on an empty list

CVE-2026-107794

ExtUtils::Typemaps::STL::List versions before 1.07 for Perl allocate a 32 GiB array on an empty list. The OUTPUT typema

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-10-10 发布INFO

Out-of-bounds read in the VarOpt union deserialization of Apache DataSketches C++ (repo: datasketches-cpp). var_opt_union::deserialize() read the 32-byte preamble of a non-empt...

CVE-2026-103636

Out-of-bounds read in the VarOpt union deserialization of Apache DataSketches C++ (repo: datasketches-cpp). var_opt_uni

历史摘要 · 未重新核验 · NVD

安全公告2026-10-10 发布INFO

Apache DataSketches: datasketches-cpp: Out-of-bounds read in VarOpt union deserialization allows denial of service via a truncated sketch

CVE-2026-103636

Out-of-bounds read in the VarOpt union deserialization of Apache DataSketches C++ (repo: datasketches-cpp). var_opt_uni

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-10-09 发布INFO

RIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embedded systems. In 2026.07 and earlier, the nanoCoAP client function ...

CVE-2026-107836

RIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embedded syste

历史摘要 · 未重新核验 · NVD

安全公告2026-10-09 发布INFO

RIOT: nanoCoAP Block2 client slice handling underflows on inconsistent server-controlled block size

CVE-2026-107836

RIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embedded syste

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-10-07 发布INFO

Unsigned integer underflow in wstrncat() in src/port.c in wolfSSL wolfSSH from v1.4.11 through v1.5.0 on non-Windows platforms allows an authenticated remote attacker to write o...

CVE-2026-83742

Unsigned integer underflow in wstrncat() in src/port.c in wolfSSL wolfSSH from v1.4.11 through v1.5.0 on non-Windows pla

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-06 发布INFO

On affected Arista Wi-Fi access points with Captive Portal enabled, an unauthenticated wireless client connected to a Captive-Portal-enabled SSID can crash the portal service wi...

CVE-2026-102168

On affected Arista Wi-Fi access points with Captive Portal enabled, an unauthenticated wireless client connected to a Ca

历史摘要 · 未重新核验 · NVD

安全公告2026-10-03 发布INFO

The web management service in affected RouterOS versions contains an integer underflow in its...

CVE-2026-84411

The web management service in affected RouterOS versions contains an integer underflow in its HTTP request body handling

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-02 发布INFO

The web management service in affected RouterOS versions contains an integer underflow in its HTTP request body handling that is reachable before authentication. This can be lev...

CVE-2026-84411

The web management service in affected RouterOS versions contains an integer underflow in its HTTP request body handling

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-02 发布INFO

Uncaught exception, Loop with unreachable exit condition ('infinite loop'), Integer underflow (wrap or wraparound) vulnerability in Apache Thrift D language bindings. This is...

CVE-2026-86537

Uncaught exception, Loop with unreachable exit condition ('infinite loop'), Integer underflow (wrap or wraparound) vulne

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-02 发布INFO

Integer underflow (wrap or wraparound), Out-of-bounds write vulnerability in Apache Thrift C++ 32 bit THeaderTransport. This issue affects Apache Thrift: before 0.25.0. Us...

CVE-2026-82459

Integer underflow (wrap or wraparound), Out-of-bounds write vulnerability in Apache Thrift C++ 32 bit THeaderTransport.

历史摘要 · 未重新核验 · NVD

安全公告2026-09-30 发布INFO

An integer underflow vulnerability in the WatchGuard Fireware OS IKEv2 daemon (iked) allows a...

CVE-2026-86132

An integer underflow vulnerability in the WatchGuard Fireware OS IKEv2 daemon (iked) allows a remote, unauthenticated at

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-30 发布INFO

An integer underflow vulnerability in the WatchGuard Fireware OS IKE daemon (iked) allows a...

CVE-2026-86133

An integer underflow vulnerability in the WatchGuard Fireware OS IKE daemon (iked) allows a remote attacker who has comp

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-30 发布INFO

An integer underflow vulnerability in the WatchGuard Fireware OS IKE daemon (iked) allows a remote attacker who has completed the initial IKEv2 handshake to crash the iked proce...

CVE-2026-86133

An integer underflow vulnerability in the WatchGuard Fireware OS IKE daemon (iked) allows a remote attacker who has comp

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-30 发布INFO

An integer underflow vulnerability in the WatchGuard Fireware OS IKEv2 daemon (iked) allows a remote, unauthenticated attacker to crash the process by sending a specially crafte...

CVE-2026-86132

An integer underflow vulnerability in the WatchGuard Fireware OS IKEv2 daemon (iked) allows a remote, unauthenticated at

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

`_nx_icmpv6_validate_options()` scans the option area with `while (length > 2)` (`common/src/nx_icmpv6_validate_options.c:79`). An area whose size leaves a one- or two-byte resi...

CVE-2026-102714

`_nx_icmpv6_validate_options()` scans the option area with `while (length > 2)` (`common/src/nx_icmpv6_validate_options.

历史摘要 · 未重新核验 · NVD