#cwe-20

共收录 1721 条相关情报。

← 返回所有主题
漏洞预警2026-10-29 发布INFO

Improper input validation in Bixby prior to version 4.0.85.6 allows privileged local attackers to launch arbitrary activity.

CVE-2026-21157

Improper input validation in Bixby prior to version 4.0.85.6 allows privileged local attackers to launch arbitrary activ

来源摘录 · NVD

漏洞预警2026-10-28 发布HIGH

OpenCATS is an open-source applicant tracking system and recruitment CRM for staffing agencies and hiring teams. Prior to version 0.10.0, activity DataGrid date filtering in `ho...

CVE-2026-54455

OpenCATS is an open-source applicant tracking system and recruitment CRM for staffing agencies and hiring teams. Prior t

来源摘录 · NVD

漏洞预警2026-10-28 发布MEDIUM

A vulnerability was found in a2ui up to 0.10.4. This vulnerability affects unknown code of the file src/v0_9/basic_catalog/components/Image.js of the component Image Player/Vide...

CVE-2026-118537

A vulnerability was found in a2ui up to 0.10.4. This vulnerability affects unknown code of the file src/v0_9/basic_catal

来源摘录 · NVD / GitHub Advisory

漏洞预警2026-10-28 发布HIGH

A user with query access to an Azure Monitor data source in Grafana can cause server-side requests to an attacker-controlled endpoint that disclose the data source's Azure acces...

CVE-2026-88967

A user with query access to an Azure Monitor data source in Grafana can cause server-side requests to an attacker-contro

来源摘录 · NVD

漏洞预警2026-10-28 发布MEDIUM

A user with the Viewer role in Grafana can crash the server by submitting a crafted server-side math expression (uncontrolled recursion). A user with permission to provision ale...

CVE-2026-88858

A user with the Viewer role in Grafana can crash the server by submitting a crafted server-side math expression (uncontr

来源摘录 · NVD

漏洞预警2026-10-28 发布INFO

Several Kafka deserialization paths read a size or count field from input data and use it directly to allocate an array, collection, or byte buffer, with no check against the by...

CVE-2026-111551

Several Kafka deserialization paths read a size or count field from input data and use it directly to allocate an array,

来源摘录 · NVD

漏洞预警2026-10-28 发布INFO

HCL BigFix AEX product is affected by a vulnerability in the aws-sdk package.. It may cause AWS API requests to be sent to unintended or non‐AWS endpoints.

CVE-2026-21830

HCL BigFix AEX product is affected by a vulnerability in the aws-sdk package.. It may cause AWS API requests to be sent

历史摘要 · 未重新核验 · NVD

安全公告2026-10-28 发布INFO

Improper input validation in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote...

CVE-2026-118348

Improper input validation in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execu

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-28 发布INFO

Improper input validation in Command in Google Chrome prior to 156.0.8078.73 allowed a remote...

CVE-2026-118355

Improper input validation in Command in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially ex

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-28 发布INFO

Improper input validation in ReadingList in Google Chrome prior to 156.0.8078.73 allowed a remote...

CVE-2026-118343

Improper input validation in ReadingList in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentiall

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-28 发布INFO

Improper input validation in Headless in Google Chrome prior to 156.0.8078.73 allowed a remote...

CVE-2026-118336

Improper input validation in Headless in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially e

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-28 发布INFO

Improper input validation in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote...

CVE-2026-118354

Improper input validation in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execu

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-28 发布INFO

Improper input validation in Core in Google Chrome on on Android prior to 156.0.8078.73 allowed a...

CVE-2026-118321

Improper input validation in Core in Google Chrome on on Android prior to 156.0.8078.73 allowed a remote attacker to pot

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-28 发布INFO

Improper input validation in UI in Google Chrome on on Android prior to 156.0.8078.73 allowed a...

CVE-2026-118314

Improper input validation in UI in Google Chrome on on Android prior to 156.0.8078.73 allowed a remote attacker to poten

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-28 发布INFO

Improper input validation in WebRTC in Google Chrome prior to 156.0.8078.73 allowed a remote...

CVE-2026-118328

Improper input validation in WebRTC in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially exe

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-28 发布INFO

Improper input validation in Compositing in Google Chrome prior to 156.0.8078.73 allowed a remote...

CVE-2026-118332

Improper input validation in Compositing in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentiall

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-28 发布INFO

Improper input validation in ANGLE in Google Chrome on on Mac prior to 156.0.8078.73 allowed a...

CVE-2026-118329

Improper input validation in ANGLE in Google Chrome on on Mac prior to 156.0.8078.73 allowed a remote attacker to potent

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-28 发布INFO

Improper input validation in Metrics in Google Chrome on on Mac prior to 156.0.8078.73 allowed a...

CVE-2026-118335

Improper input validation in Metrics in Google Chrome on on Mac prior to 156.0.8078.73 allowed a remote attacker to pote

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-28 发布INFO

Improper input validation in V8 in Google Chrome prior to 156.0.8078.73 allowed a remote attacker...

CVE-2026-118316

Improper input validation in V8 in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-28 发布INFO

Improper input validation in FileAPI in Google Chrome prior to 156.0.8078.73 allowed a remote...

CVE-2026-118331

Improper input validation in FileAPI in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially ex

历史摘要 · 未重新核验 · GitHub Advisory