#cwe-20

共收录 1723 条相关情报。

← 返回所有主题
漏洞预警2026-08-12 发布INFO

A low-privileged user may poison cached artifact metadata under specific conditions, potentially causing consumers to retrieve untrusted content.

CVE-2026-69106

A low-privileged user may poison cached artifact metadata under specific conditions, potentially causing consumers to re

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-12 发布INFO

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to add unexpected parameters to a command due to parameter injection.

CVE-2026-17109

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to add unexpected parameters to a command due t

历史摘要 · 未重新核验 · NVD

安全公告2026-08-12 发布INFO

phpMyFAQ: SQL LIKE Wildcard Injection in Chat User Search Allows Authenticated User Enumeration

CVE-2026-47132

### Summary An authenticated SQL LIKE wildcard injection vulnerability in phpMyFAQ’s chat user search allows any logg

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-11 发布INFO

Improper input validation for some Intel(R) Xeon(R) processors within firmware may allow an escalation of privilege. Startup code and smm adversary with a privileged user combin...

CVE-2026-20901

Improper input validation for some Intel(R) Xeon(R) processors within firmware may allow an escalation of privilege. Sta

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability t...

CVE-2026-71390

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security featur

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.

CVE-2026-70325

Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

Improper input validation in Microsoft Office allows an unauthorized attacker to disclose information locally.

CVE-2026-70323

Improper input validation in Microsoft Office allows an unauthorized attacker to disclose information locally.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.

CVE-2026-70322

Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.

CVE-2026-70320

Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

Improper input validation in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

CVE-2026-70319

Improper input validation in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

Improper input validation in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

CVE-2026-70318

Improper input validation in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.

CVE-2026-70316

Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

Improper input validation in Microsoft Office allows an unauthorized attacker to disclose information locally.

CVE-2026-70314

Improper input validation in Microsoft Office allows an unauthorized attacker to disclose information locally.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.

CVE-2026-70313

Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.

CVE-2026-70312

Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

Improper input validation in Power BI allows an authorized attacker to execute code over a network.

CVE-2026-65811

Improper input validation in Power BI allows an authorized attacker to execute code over a network.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network.

CVE-2026-63520

Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

Improper input validation in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

CVE-2026-62917

Improper input validation in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a networ

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

CVE-2026-61363

Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

CVE-2026-59134

Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

历史摘要 · 未重新核验 · NVD