#cwe-20

共收录 1723 条相关情报。

← 返回所有主题

漏洞预警2026-07-30 发布INFO

Insufficient validation of untrusted input in Media in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to leak...

CVE-2026-17706

Insufficient validation of untrusted input in Media in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-07-30 发布INFO

Insufficient validation of untrusted input in Actor in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to leak cross-orig...

CVE-2026-17700

Insufficient validation of untrusted input in Actor in Google Chrome prior to 151.0.7922.72 allowed a remote attacker wh

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-07-30 发布INFO

Insufficient validation of untrusted input in UI in Google Chrome on Android prior to 151.0.7922.72 allowed a local attacker to leak cross-origin data via a crafted HTML page. (...

CVE-2026-17698

Insufficient validation of untrusted input in UI in Google Chrome on Android prior to 151.0.7922.72 allowed a local atta

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-07-30 发布INFO

Insufficient validation of untrusted input in PDF in Google Chrome on Android prior to 151.0.7922.72 allowed a local attacker to leak cross-origin data via a crafted HTML page. ...

CVE-2026-17690

Insufficient validation of untrusted input in PDF in Google Chrome on Android prior to 151.0.7922.72 allowed a local att

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-07-30 发布INFO

Insufficient validation of untrusted input in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to bypass site...

CVE-2026-17686

Insufficient validation of untrusted input in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacke

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-07-30 发布INFO

Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to...

CVE-2026-17684

Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a re

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-07-30 发布INFO

Insufficient validation of untrusted input in Web Authentication in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer pr...

CVE-2026-17681

Insufficient validation of untrusted input in Web Authentication in Google Chrome on Android prior to 151.0.7922.72 allo

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-07-30 发布INFO

Insufficient validation of untrusted input in Print Preview in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to leak cr...

CVE-2026-17679

Insufficient validation of untrusted input in Print Preview in Google Chrome prior to 151.0.7922.72 allowed a remote att

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-07-30 发布INFO

Insufficient validation of untrusted input in Chromecast in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentiall...

CVE-2026-17672

Insufficient validation of untrusted input in Chromecast in Google Chrome prior to 151.0.7922.72 allowed a remote attack

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-07-30 发布INFO

Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially per...

CVE-2026-17671

Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker wh

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-07-30 发布INFO

Insufficient validation of untrusted input in Loader in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to leak cross-ori...

CVE-2026-17664

Insufficient validation of untrusted input in Loader in Google Chrome prior to 151.0.7922.72 allowed a remote attacker w

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-07-30 发布INFO

Insufficient validation of untrusted input in GPU in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potent...

CVE-2026-17663

Insufficient validation of untrusted input in GPU in Google Chrome on Android prior to 151.0.7922.72 allowed a remote at

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-07-30 发布INFO

Insufficient validation of untrusted input in Network in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially p...

CVE-2026-17660

Insufficient validation of untrusted input in Network in Google Chrome prior to 151.0.7922.72 allowed a remote attacker

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-07-30 发布INFO

Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML ...

CVE-2026-17655

Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-07-30 发布INFO

Insufficient validation of untrusted input in Dawn in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a cra...

CVE-2026-17651

Insufficient validation of untrusted input in Dawn in Google Chrome on Android prior to 151.0.7922.72 allowed a remote a

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-07-29 发布INFO

Linuxfabrik monitoring-plugins provides Python monitoring plugins for Icinga, Nagios, and related monitoring systems. In 6.0.0 and earlier, the redfish-* plugins built request U...

CVE-2026-67436

Linuxfabrik monitoring-plugins provides Python monitoring plugins for Icinga, Nagios, and related monitoring systems. In

历史摘要 · 未重新核验 · NVD

#cve #cwe-20 #cwe-200 #cwe-918

漏洞预警2026-07-29 发布INFO

swagger-typescript-api generates API clients for Fetch or Axios from OpenAPI specifications. Prior to 13.12.2, src/resolved-swagger-schema.ts warmUpRemoteSchemasCache resolves e...

CVE-2026-54663

swagger-typescript-api generates API clients for Fetch or Axios from OpenAPI specifications. Prior to 13.12.2, src/resol

历史摘要 · 未重新核验 · NVD

#cve #cwe-20 #cwe-441 #cwe-918

漏洞预警2026-07-29 发布INFO

@fastify/forwarded resolves client addresses from the X-Forwarded-For header. In versions before 3.0.2, when the header contains two or more comma separated entries, the parser ...

CVE-2026-18174

@fastify/forwarded resolves client addresses from the X-Forwarded-For header. In versions before 3.0.2, when the header

历史摘要 · 未重新核验 · NVD

#cve #cwe-20 #cwe-184

漏洞预警2026-07-29 发布INFO

Joomla Extension - joomlacontenteditor.net - Creation of hidden files and unintended file overwrite via rename function in Joomla Content Editor (JCE) < 2.20.2 - Improper input ...

CVE-2026-65891

Joomla Extension - joomlacontenteditor.net - Creation of hidden files and unintended file overwrite via rename function

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-07-29 发布INFO

The Apache Traffic Server webp_transform plugin can decode unsafely and serve mislabeled, cacheable responses. This issue affects Apache Traffic Server: from 8.0.0 through 8.1....

CVE-2026-58186

The Apache Traffic Server webp_transform plugin can decode unsafely and serve mislabeled, cacheable responses. This iss

历史摘要 · 未重新核验 · NVD

#cve #cwe-20