#cwe-20
共收录 1723 条相关情报。
← 返回所有主题 漏洞预警2026-07-29 发布INFO
CVE-2026-58183
The Apache Traffic Server prefetch plugin can crash when processing attacker-influenced input.
This issue affects Apach
历史摘要 · 未重新核验 · NVD
漏洞预警2026-07-29 发布INFO
CVE-2026-33267
Improper Input Validation vulnerability in Apache Traffic Server.
This issue affects Apache Traffic Server: from 9.2.0
历史摘要 · 未重新核验 · NVD
漏洞预警2026-07-28 发布INFO
CVE-2026-47219
find-my-way is a framework-independent HTTP router that internally uses a Radix Tree and supports route parameters and w
历史摘要 · 未重新核验 · NVD
漏洞预警2026-07-28 发布INFO
CVE-2026-56722
Dompdf is an HTML to PDF converter for PHP. In versions 3.15 and prior, aAn attacker who controls the HTML input can byp
历史摘要 · 未重新核验 · NVD
安全公告2026-07-28 发布INFO
CVE-2026-32203
## Executive Summary:
Microsoft is releasing this security advisory to provide information about a vulnerability in Sy
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-07-28 发布INFO
CVE-2026-55554
Dompdf is an HTML to PDF converter for PHP. In versions 3.15 and prior, the validateLocalUri() method enforces chroot bo
历史摘要 · 未重新核验 · NVD
安全公告2026-07-28 发布INFO
CVE-2026-50569
`HTTPTriggerSpec.Validate()` validated `Methods`, `FunctionReference`, `Host`, `IngressConfig`, and `CorsConfig`, but si
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-07-28 发布INFO
CVE-2026-62828
Improper input validation in Microsoft Edge for Android allows an unauthorized attacker to perform tampering over a netw
历史摘要 · 未重新核验 · NVD
漏洞预警2026-07-28 发布INFO
CVE-2026-59878
Improper Input Validation vulnerability in Apache ActiveMQ AMQP, Apache ActiveMQ, Apache ActiveMQ All.
A remote unauthe
历史摘要 · 未重新核验 · NVD
漏洞预警2026-07-28 发布INFO
CVE-2026-62425
[This CNA information record relates to multiple CVEs; the
text explains which aspects/vulnerabilities correspond to whi
历史摘要 · 未重新核验 · NVD
漏洞预警2026-07-27 发布INFO
CVE-2026-43813
A validation issue was addressed with improved input sanitization. This issue is fixed in iOS 26.6 and iPadOS 26.6, macO
历史摘要 · 未重新核验 · NVD
漏洞预警2026-07-27 发布INFO
CVE-2026-43793
An issue existed in the handling of environment variables. This issue was addressed with improved validation. This issue
历史摘要 · 未重新核验 · NVD
漏洞预警2026-07-27 发布INFO
CVE-2026-43777
This issue was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.
历史摘要 · 未重新核验 · NVD
漏洞预警2026-07-27 发布INFO
CVE-2026-43714
The issue was addressed with improved input sanitization. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia
历史摘要 · 未重新核验 · NVD
漏洞预警2026-07-27 发布INFO
CVE-2026-54272
ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. Versions 10.1.1 through 10.2
历史摘要 · 未重新核验 · NVD
安全公告2026-07-24 发布INFO
CVE-2026-54120
Improper input validation in Microsoft Surface allows an authorized attacker to execute code over a network.
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-07-24 发布INFO
CVE-2026-65604
Skipper contains an incomplete fix for CVE-2026-50197 in which oversized request bodies bypass Open Policy Agent (OPA) d
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-07-23 发布INFO
## Summary
The exported `getToken()` helper (`next-auth/jwt` and `@auth/core/jwt`) can throw an uncaught exception when
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-07-23 发布INFO
CVE-2026-16632
A flaw has been found in boazsegev facil.io up to 0.7.4. Affected is the function websocket_on_protocol_error in the lib
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-07-23 发布HIGH
CVE-2026-16632
CVE-2026-16632 是 boazsegev 开发的 facil.io 库(版本 ≤ 0.7.4)中的一个高危漏洞。该漏洞位于 WebSocket 帧解析器的 websocket_parser.h 文件中,具体涉及 websocke
历史摘要 · 未重新核验 · NVD