#cwe-20

共收录 1723 条相关情报。

← 返回所有主题

漏洞预警2026-08-10 发布INFO

Improper input validation in Smart Switch prior to version 3.7.72.6 allows adjacent attackers to access sensitive data.

CVE-2026-21083

Improper input validation in Smart Switch prior to version 3.7.72.6 allows adjacent attackers to access sensitive data.

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-08-10 发布INFO

Improper input validation in VC1 codec in libsavsvc.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory.

CVE-2026-21072

Improper input validation in VC1 codec in libsavsvc.so prior to SMR Aug-2026 Release 1 allows local attackers to write o

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-08-10 发布INFO

Improper input validation in MPEG4 codec in libsavsvc.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory.

CVE-2026-21071

Improper input validation in MPEG4 codec in libsavsvc.so prior to SMR Aug-2026 Release 1 allows local attackers to write

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-08-10 发布INFO

Improper input validation in Samsung Message prior to SMR Aug-2026 Release 1 allows physical attackers to access sensitive information.

CVE-2026-21070

Improper input validation in Samsung Message prior to SMR Aug-2026 Release 1 allows physical attackers to access sensiti

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-08-10 发布INFO

Improper input validation in libcodec2_sec_flacdec.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory.

CVE-2026-21066

Improper input validation in libcodec2_sec_flacdec.so prior to SMR Aug-2026 Release 1 allows local attackers to write ou

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-08-10 发布INFO

Improper input validation in Samsung Dialer prior to SMR Aug-2026 Release 1 allows remote attackers to access SIM related functions. User interaction is required for triggering ...

CVE-2026-21061

Improper input validation in Samsung Dialer prior to SMR Aug-2026 Release 1 allows remote attackers to access SIM relate

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-08-10 发布INFO

Improper input validation in Samsung Contacts prior to SMR Aug-2026 Release 1 allows physical attackers to access data across multiple user profiles.

CVE-2026-21060

Improper input validation in Samsung Contacts prior to SMR Aug-2026 Release 1 allows physical attackers to access data a

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-08-10 发布INFO

Improper input validation in Samsung Contacts prior to SMR Aug-2026 Release 1 allows local attackers to delete file with Samsung Contacts' privilege.

CVE-2026-21058

Improper input validation in Samsung Contacts prior to SMR Aug-2026 Release 1 allows local attackers to delete file with

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

安全公告2026-08-09 发布INFO

A vulnerability was found in lmammino oidc-authorizer up to 0.4.0. Impacted is the function...

CVE-2026-19363

A vulnerability was found in lmammino oidc-authorizer up to 0.4.0. Impacted is the function unwrap of the file src/handl

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-20 #severity:medium

安全公告2026-08-07 发布INFO

An input validation vulnerability exists in the HTTP-WRITEOEM handler due to insufficient...

CVE-2026-9031

An input validation vulnerability exists in the HTTP-WRITEOEM handler due to insufficient validation of user-supplied da

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-20 #severity:medium

漏洞预警2026-08-07 发布INFO

An input validation vulnerability exists in the HTTP-WRITEOEM handler due to insufficient validation of user-supplied data before it is processed by internal flash-write handlin...

CVE-2026-9031

An input validation vulnerability exists in the HTTP-WRITEOEM handler due to insufficient validation of user-supplied da

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-08-07 发布INFO

Kata Containers is an open source project focusing on a standard implementation of lightweight Virtual Machines (VMs) that perform like containers. Prior to version 4.0.0, kata-...

CVE-2026-50540

Kata Containers is an open source project focusing on a standard implementation of lightweight Virtual Machines (VMs) th

历史摘要 · 未重新核验 · NVD

#cve #cwe-20 #cwe-22

漏洞预警2026-08-07 发布INFO

Pathling is a set of tools that make it easier to use FHIR and clinical terminology within health data analytics. Prior to version 2.0.0 of Pathling Server, the `$import-pnp` op...

CVE-2026-47664

Pathling is a set of tools that make it easier to use FHIR and clinical terminology within health data analytics. Prior

历史摘要 · 未重新核验 · NVD

#cve #cwe-20 #cwe-345 #cwe-918

漏洞预警2026-08-07 发布INFO

Pathling is a set of tools that make it easier to use FHIR and clinical terminology within health data analytics. Prior to version 2.0.0 of Pathling Server, Pathling's typed CRU...

CVE-2026-47662

Pathling is a set of tools that make it easier to use FHIR and clinical terminology within health data analytics. Prior

历史摘要 · 未重新核验 · NVD

#cve #cwe-20 #cwe-522 #cwe-918

漏洞预警2026-08-07 发布INFO

HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare interoperability in Java. Prior to 6.9.11, XhtmlParser.java imposes no maximum element nesting dep...

CVE-2026-62296

HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare interoperability in Java. Prior to 6.9.11

历史摘要 · 未重新核验 · NVD

#cve #cwe-20 #cwe-400 #cwe-674

漏洞预警2026-08-07 发布INFO

HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare interoperability in Java. Prior to 6.9.11, the JSON utility parser in org.hl7.fhir.utilities.json....

CVE-2026-62295

HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare interoperability in Java. Prior to 6.9.11

历史摘要 · 未重新核验 · NVD

#cve #cwe-20 #cwe-400 #cwe-674

漏洞预警2026-08-07 发布INFO

HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare interoperability in Java. Prior to 6.9.11, the hidden scan command concatenates attacker-controlle...

CVE-2026-62293

HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare interoperability in Java. Prior to 6.9.11

历史摘要 · 未重新核验 · NVD

#cve #cwe-20 #cwe-79

漏洞预警2026-08-07 发布INFO

Tobit Laboratories AG TeamDavid's Webbox application is vulnerable to a stored XSS vulnerability. An attacker can send an email containing malicious JavaScript code. When a us...

CVE-2026-54217

Tobit Laboratories AG TeamDavid's Webbox application is vulnerable to a stored XSS vulnerability. An attacker can send

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-08-07 发布INFO

Tobit Laboratories AG TeamDavid's Webbox application is vulnerable to arbitrary file write, allowing an unauthenticated attacker to create or write into existing files on the ...

CVE-2026-54208

Tobit Laboratories AG TeamDavid's Webbox application is vulnerable to arbitrary file write, allowing an unauthenticated

历史摘要 · 未重新核验 · NVD

#cve #cwe-20 #cwe-284

漏洞预警2026-08-07 发布INFO

Tobit Laboratories AG TeamDavid's Webbox 's move archive functionality (“!ArcEntryMove”) accepts an arbitrary path, which can be set to network locations using UNC paths (e.g....

CVE-2026-54207

Tobit Laboratories AG TeamDavid's Webbox 's move archive functionality (“!ArcEntryMove”) accepts an arbitrary path, whi

历史摘要 · 未重新核验 · NVD

#cve #cwe-20 #cwe-918