#cwe-20

共收录 1723 条相关情报。

漏洞预警2026-08-11 发布INFO

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability t...

CVE-2026-48436

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security featur

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-08-11 发布INFO

ColdFusion is affected by an Improper Input Validation vulnerability that could result in an application denial-of-service. An attacker with high privileges could exploit this v...

CVE-2026-48384

ColdFusion is affected by an Improper Input Validation vulnerability that could result in an application denial-of-servi

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-08-11 发布INFO

Improper input validation for some vLLM Hardware Plugin for Intel(R) Gaudi(R) software before version 0.16.0 within Ring 3: User Applications may allow a denial of service. Auth...

CVE-2026-27765

Improper input validation for some vLLM Hardware Plugin for Intel(R) Gaudi(R) software before version 0.16.0 within Ring

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-08-11 发布INFO

is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measur...

CVE-2026-21279

is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker co

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-08-11 发布INFO

is affected by an Improper Input Validation vulnerability that could result in privilege escalation. A low-privileged attacker could exploit this vulnerability to gain unauthori...

CVE-2026-21273

is affected by an Improper Input Validation vulnerability that could result in privilege escalation. A low-privileged at

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-08-11 发布INFO

Improper input validation for some Intel(R) Neural Compressor software before version v3.7 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged so...

CVE-2026-20913

Improper input validation for some Intel(R) Neural Compressor software before version v3.7 within Ring 3: User Applicati

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-08-11 发布INFO

Improper input validation in some firmware for some Intel(R) Active Management Technology (Intel(R) AMT) and some Intel(R) Standard Manageability may allow a denial of service. ...

CVE-2026-20715

Improper input validation in some firmware for some Intel(R) Active Management Technology (Intel(R) AMT) and some Intel(

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-08-11 发布INFO

Insufficient input validation vulnerability in the NETGEAR R7000 models allows authenticated administrators connected to the local network to make unauthorized modification to...

CVE-2026-9214

Insufficient input validation vulnerability in the NETGEAR R7000 models allows authenticated administrators connected t

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-08-11 发布INFO

Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification to ...

CVE-2026-11738

Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected t

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-08-11 发布INFO

Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification t...

CVE-2026-11737

Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-08-11 发布INFO

A stack-based buffer overflow vulnerability affects certain NETGEAR models allowing an authenticated admin user to make unauthorized modification to router software and function...

CVE-2026-11736

A stack-based buffer overflow vulnerability affects certain NETGEAR models allowing an authenticated admin user to make

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-08-11 发布INFO

Streambert is a cross-platform Electron Desktop App to stream and download video content. Versions prior to 2.5.0 improperly validate executable paths supplied to the run-down...

CVE-2026-48056

Streambert is a cross-platform Electron Desktop App to stream and download video content. Versions prior to 2.5.0 impro

历史摘要 · 未重新核验 · NVD

#cve #cwe-20 #cwe-749

漏洞预警2026-08-11 发布INFO

Affected versions of cti-transmute insufficiently validate saved graph configuration data. Graph configurations can contain style properties that are later consumed by Pivotick,...

CVE-2026-73158

Affected versions of cti-transmute insufficiently validate saved graph configuration data. Graph configurations can cont

历史摘要 · 未重新核验 · NVD

#cve #cwe-20 #cwe-79

漏洞预警2026-08-11 发布INFO

A flaw was found in iperf3. A remote attacker can exploit this vulnerability by sending crafted control-channel JSON with oversized numeric parameters, such as `parallel` and `l...

CVE-2026-71217

A flaw was found in iperf3. A remote attacker can exploit this vulnerability by sending crafted control-channel JSON wit

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-08-10 发布INFO

Dokploy is a free, self-hostable Platform as a Service (PaaS). From 0.29.3 until 0.29.13, the incomplete fix for CVE-2026-45628 leaves packages/server/src/db/schema/compose.ts b...

CVE-2026-72867

Dokploy is a free, self-hostable Platform as a Service (PaaS). From 0.29.3 until 0.29.13, the incomplete fix for CVE-202

历史摘要 · 未重新核验 · NVD

#cve #cwe-20 #cwe-78 #cwe-602

漏洞预警2026-08-10 发布INFO

Discourse is an open-source discussion platform. Prior to 2026.1.7, an authenticated user could submit specially formed URLs that bypassed the Onebox allowlist and embedded mali...

CVE-2026-72728

Discourse is an open-source discussion platform. Prior to 2026.1.7, an authenticated user could submit specially formed

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-08-10 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Check bounds on CRIU restore queue type and mqd size We weren't checking whether the values pro...

CVE-2026-68258

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Check bounds on CRIU restore queue type

来源摘录 · NVD

#cve #cwe-20

漏洞预警2026-08-10 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: tcp: challenge ACK for non-exact RST in SYN-RECEIVED The SYN-RECEIVED request-socket path in tcp_check_req(...

CVE-2026-68118

In the Linux kernel, the following vulnerability has been resolved: tcp: challenge ACK for non-exact RST in SYN-RECEIVE

来源摘录 · NVD

#cve #cwe-20

漏洞预警2026-08-10 发布INFO

Remote Code Execution via JDBC URL Injection in Apache Ranger <= 2.8.0 Users are recommended to upgrade to version 2.9.0, which fixes this issue.

CVE-2026-42537

Remote Code Execution via JDBC URL Injection in Apache Ranger <= 2.8.0 Users are recommended to upgrade to version 2.9.0

历史摘要 · 未重新核验 · NVD

#cve #cwe-20 #cwe-94

漏洞预警2026-08-10 发布INFO

Privilege Escalation via URL Parameter is reported in Apache Ranger versions <= 2.8.0. Users are recommended to upgrade to version 2.9.0, which fixes this issue.

CVE-2026-40920

Privilege Escalation via URL Parameter is reported in Apache Ranger versions <= 2.8.0. Users are recommended to upgrade

历史摘要 · 未重新核验 · NVD

#cve #cwe-20 #cwe-269 #cwe-287