#cwe-20

共收录 1723 条相关情报。

← 返回所有主题
漏洞预警2026-08-03 发布INFO

In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privileges needed

CVE-2026-21550

In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-03 发布INFO

In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privileges needed

CVE-2026-21549

In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-03 发布INFO

In nr modem, there is a possible improper input validation. This could lead to remote denial of service with System execution privileges needed.

CVE-2026-21548

In nr modem, there is a possible improper input validation. This could lead to remote denial of service with System exec

历史摘要 · 未重新核验 · NVD

安全公告2026-08-03 发布INFO

In Bouncy Castle for Java before 1.85, MTI/A0 DH agreement exponentiates unvalidated peer value....

CVE-2026-59650

In Bouncy Castle for Java before 1.85, MTI/A0 DH agreement exponentiates unvalidated peer value. This issue also affects

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-03 发布INFO

In Bouncy Castle for Java before 1.85, MTI/A0 DH agreement exponentiates unvalidated peer value. This issue also affects Bouncy Castle for Java LTS before 2.73.12.

CVE-2026-59650

In Bouncy Castle for Java before 1.85, MTI/A0 DH agreement exponentiates unvalidated peer value. This issue also affects

历史摘要 · 未重新核验 · NVD

安全公告2026-08-03 发布INFO

MTI/A0 DH agreement exponentiates unvalidated peer value

CVE-2026-59650

In Bouncy Castle for Java before 1.85, MTI/A0 DH agreement exponentiates unvalidated peer value. This issue also affects

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-08-02 发布INFO

Better Auth relies on better-call, which uses the rou3 router library. In affected versions of...

CVE-2025-71399

Better Auth relies on better-call, which uses the rou3 router library. In affected versions of rou3, paths are normalize

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-02 发布INFO

Better Auth relies on better-call, which uses the rou3 router library. In affected versions of rou3, paths are normalized by removing empty segments, so /path, //path, and ///pa...

CVE-2025-71399

Better Auth relies on better-call, which uses the rou3 router library. In affected versions of rou3, paths are normalize

历史摘要 · 未重新核验 · NVD

安全公告2026-08-02 发布INFO

Better Auth before 1.4.4 Path Normalization Bypass via rou3

CVE-2025-71399

Better Auth relies on better-call, which uses the rou3 router library. In affected versions of rou3, paths are normalize

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-08-01 发布INFO

@better-auth/scim (a better-auth plugin) versions >= 1.4.0-beta.27 through <= 1.6.21 and >= 1.7.0...

CVE-2026-67330

@better-auth/scim (a better-auth plugin) versions >= 1.4.0-beta.27 through = 1.7.0-beta.0 through <= 1.7.0-beta.9 contai

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-01 发布INFO

GitPython before 3.1.50 fails to validate newline characters in the section parameter of...

CVE-2026-67326

GitPython before 3.1.50 fails to validate newline characters in the section parameter of config_writer(), allowing attac

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-01 发布INFO

FreeRDP before 3.29.0 contains a denial of service vulnerability in the RDPEI server channel...

CVE-2026-67296

FreeRDP before 3.29.0 contains a denial of service vulnerability in the RDPEI server channel handler that fails to valid

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-01 发布INFO

@better-auth/scim (a better-auth plugin) versions >= 1.4.0-beta.27 through <= 1.6.21 and >= 1.7.0-beta.0 through <= 1.7.0-beta.9 contain an authorization bypass. SCIM token issu...

CVE-2026-67330

@better-auth/scim (a better-auth plugin) versions >= 1.4.0-beta.27 through = 1.7.0-beta.0 through <= 1.7.0-beta.9 contai

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-01 发布INFO

GitPython before 3.1.50 fails to validate newline characters in the section parameter of config_writer(), allowing attackers to inject arbitrary section headers into .git/config...

CVE-2026-67326

GitPython before 3.1.50 fails to validate newline characters in the section parameter of config_writer(), allowing attac

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-01 发布INFO

FreeRDP before 3.29.0 contains a denial of service vulnerability in the RDPEI server channel handler that fails to validate maximum PDU body length before stream allocation. A m...

CVE-2026-67296

FreeRDP before 3.29.0 contains a denial of service vulnerability in the RDPEI server channel handler that fails to valid

历史摘要 · 未重新核验 · NVD

安全公告2026-08-01 发布INFO

GitPython before 3.1.50 Newline Injection via config_writer section

CVE-2026-67326

GitPython before 3.1.50 fails to validate newline characters in the section parameter of config_writer(), allowing attac

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-08-01 发布INFO

FreeRDP before 3.29.0 Denial of Service via RDPEI PDU

CVE-2026-67296

FreeRDP before 3.29.0 contains a denial of service vulnerability in the RDPEI server channel handler that fails to valid

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-07-31 发布MEDIUM

pion/stun is a Go implementation of STUN. Prior to 3.1.3, XORMappedAddress.GetFromAs can panic while parsing a malformed short XOR-MAPPED-ADDRESS attribute in STUN or ICE Bindin...

CVE-2026-54909

CVE-2026-54909 影响 pion/stun,这是一个用 Go 语言实现的 STUN(Session Traversal Utilities for NAT)协议库,广泛用于 WebRTC、ICE 等实时通信场景。该库在 3.1.

历史摘要 · 未重新核验 · NVD

安全公告2026-07-31 发布INFO

Pion STUN vulnerable to remote denial of service via panic while parsing a malformed XOR-MAPPED-ADDRESS attribute

CVE-2026-54909

### Impact Remote denial of service via panic while parsing a malformed XOR-MAPPED-ADDRESS attribute ### Patches Upgrad

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-07-31 发布INFO

free5GC is an open-source implementation of the 5G core network. Prior to 1.4.5, the free5GC AUSF (Authentication Server Function) does not validate the supiOrSuci field in UE a...

CVE-2026-53551

free5GC is an open-source implementation of the 5G core network. Prior to 1.4.5, the free5GC AUSF (Authentication Server

历史摘要 · 未重新核验 · NVD