#cwe-20

共收录 1721 条相关情报。

漏洞预警2026-09-15 发布INFO

Improper validation of the quantity parameter in the add-to-cart path of Webkul Bagisto v2.4.9 allows authenticated attackers to reduce their order total below the legitimate pr...

CVE-2026-79410

Improper validation of the quantity parameter in the add-to-cart path of Webkul Bagisto v2.4.9 allows authenticated atta

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-09-15 发布INFO

In multiple locations, there is a possible escalation of privilege due to improper input validation. This could lead to local escalation of privilege with no additional executio...

CVE-2026-58744

In multiple locations, there is a possible escalation of privilege due to improper input validation. This could lead to

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-09-15 发布INFO

In smmu_detach_dev_nested of arm-smmu-v3.c, there is a possible escalation of privilege due to improper input validation. This could lead to local escalation of privilege with S...

CVE-2026-58718

In smmu_detach_dev_nested of arm-smmu-v3.c, there is a possible escalation of privilege due to improper input validation

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-09-15 发布INFO

In FsmReleaseKey of fsm.c, there is a possible permission bypass due to improper input validation. This could lead to local escalation of privilege with no additional execution ...

CVE-2026-58691

In FsmReleaseKey of fsm.c, there is a possible permission bypass due to improper input validation. This could lead to lo

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-09-15 发布INFO

In IP Multimedia Subsystem, there is a possible out-of-bounds write due to improper input validation. This could lead to remote code execution with no additional execution privi...

CVE-2026-58683

In IP Multimedia Subsystem, there is a possible out-of-bounds write due to improper input validation. This could lead to

历史摘要 · 未重新核验 · NVD

#cve #cwe-20 #cwe-787

漏洞预警2026-09-15 发布INFO

In Modem, there is a possible information disclosure due to improper input validation. This could lead to remote information disclosure with no additional execution privileges n...

CVE-2026-57008

In Modem, there is a possible information disclosure due to improper input validation. This could lead to remote informa

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-09-15 发布INFO

In Cellular Modem, there is a possible denial of service due to improper input validation. This could lead to remote (proximal/adjacent) denial of service with no additional exe...

CVE-2026-56975

In Cellular Modem, there is a possible denial of service due to improper input validation. This could lead to remote (pr

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-09-15 发布INFO

In Start of AudioRtpPayloadEncoderNode.cpp, there is a possible out-of-bounds write due to improper input validation. This could lead to remote code execution with no additional...

CVE-2026-56974

In Start of AudioRtpPayloadEncoderNode.cpp, there is a possible out-of-bounds write due to improper input validation. Th

历史摘要 · 未重新核验 · NVD

#cve #cwe-20 #cwe-787

漏洞预警2026-09-15 发布INFO

In validate_ns_buf of mbu_class.rs, there is a possible information disclosure due to improper input validation. This could lead to local information disclosure with System exec...

CVE-2026-56950

In validate_ns_buf of mbu_class.rs, there is a possible information disclosure due to improper input validation. This co

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-09-15 发布INFO

In Trusted Execution Environment, there is a possible memory corruption due to improper input validation. This could lead to local escalation of privilege with System execution ...

CVE-2026-56932

In Trusted Execution Environment, there is a possible memory corruption due to improper input validation. This could lea

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-09-15 发布INFO

In VPU, there is a possible shared memory overwrite due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. U...

CVE-2026-56907

In VPU, there is a possible shared memory overwrite due to improper input validation. This could lead to local escalatio

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-09-15 发布INFO

In multiple locations, there is a possible out-of-bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privilege...

CVE-2026-55332

In multiple locations, there is a possible out-of-bounds write due to improper input validation. This could lead to loca

历史摘要 · 未重新核验 · NVD

#cve #cwe-20 #cwe-787

漏洞预警2026-09-15 发布INFO

In printf of printf.c, there is a possible out-of-bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privilege...

CVE-2026-55317

In printf of printf.c, there is a possible out-of-bounds write due to improper input validation. This could lead to loca

历史摘要 · 未重新核验 · NVD

#cve #cwe-20 #cwe-787

漏洞预警2026-09-15 发布INFO

In Cellular Modem, there is a possible denial of service due to improper input validation. This could lead to remote denial of service with no additional execution privileges ne...

CVE-2026-55306

In Cellular Modem, there is a possible denial of service due to improper input validation. This could lead to remote den

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-09-15 发布INFO

In gf_ta_test_set_config of gf_ta_test.c, there is a possible out-of-bounds write due to improper input validation. This could lead to local escalation of privilege with no addi...

CVE-2026-0199

In gf_ta_test_set_config of gf_ta_test.c, there is a possible out-of-bounds write due to improper input validation. This

历史摘要 · 未重新核验 · NVD

#cve #cwe-20 #cwe-787

漏洞预警2026-09-15 发布INFO

Shopper is a Headless e-commerce Admin Panel. Prior to 2.9.0, the /cpanel/discounts administrative interface accepts negative fixed_amount discount values, persists them in sh_d...

CVE-2026-56831

Shopper is a Headless e-commerce Admin Panel. Prior to 2.9.0, the /cpanel/discounts administrative interface accepts neg

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-09-15 发布INFO

OpenCost provides cost monitoring for Kubernetes workloads and cloud costs. Prior to 1.121.0, the POST /serviceKey endpoint in pkg/costmodel/router.go allows a network client to...

CVE-2026-44300

OpenCost provides cost monitoring for Kubernetes workloads and cloud costs. Prior to 1.121.0, the POST /serviceKey endpo

历史摘要 · 未重新核验 · NVD

#cve #cwe-20 #cwe-309

漏洞预警2026-09-15 发布INFO

An issue in Prolink 13A Smart Plug Model Version: DS-3202M-UKv3 Wi-Fi and Application Version mEzee 2.6.7 allows attackers to cause a Denial of Service (DoS) or connection to an...

CVE-2025-66974

An issue in Prolink 13A Smart Plug Model Version: DS-3202M-UKv3 Wi-Fi and Application Version mEzee 2.6.7 allows attacke

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-09-15 发布INFO

Inspektor Gadget is a set of tools and framework for data collection and system inspection on Kubernetes clusters and Linux hosts using eBPF. From 0.28.0 until 0.53.1, the USDT ...

CVE-2026-44778

Inspektor Gadget is a set of tools and framework for data collection and system inspection on Kubernetes clusters and Li

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-09-15 发布INFO

Flowise before 3.1.4 contains a validation bypass vulnerability in MCP server configuration allowing authenticated attackers remote code execution through an unvalidated cwd par...

CVE-2026-91932

Flowise before 3.1.4 contains a validation bypass vulnerability in MCP server configuration allowing authenticated attac

历史摘要 · 未重新核验 · NVD

#cve #cwe-20