#cwe-20

共收录 1723 条相关情报。

← 返回所有主题
漏洞预警2026-07-29 发布INFO

The Apache Traffic Server prefetch plugin can crash when processing attacker-influenced input. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.9, from 9.0.0 th...

CVE-2026-58183

The Apache Traffic Server prefetch plugin can crash when processing attacker-influenced input. This issue affects Apach

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-29 发布INFO

Improper Input Validation vulnerability in Apache Traffic Server. This issue affects Apache Traffic Server: from 9.2.0 through 9.2.14, from 10.1.0 through 10.1.3. Users are re...

CVE-2026-33267

Improper Input Validation vulnerability in Apache Traffic Server. This issue affects Apache Traffic Server: from 9.2.0

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-28 发布INFO

find-my-way is a framework-independent HTTP router that internally uses a Radix Tree and supports route parameters and wildcards. Versions prior to 9.7.0 are vulnerable to remot...

CVE-2026-47219

find-my-way is a framework-independent HTTP router that internally uses a Radix Tree and supports route parameters and w

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-28 发布INFO

Dompdf is an HTML to PDF converter for PHP. In versions 3.15 and prior, aAn attacker who controls the HTML input can bypass this restriction by embedding a target file path insi...

CVE-2026-56722

Dompdf is an HTML to PDF converter for PHP. In versions 3.15 and prior, aAn attacker who controls the HTML input can byp

历史摘要 · 未重新核验 · NVD

安全公告2026-07-28 发布INFO

Microsoft Security Advisory CVE-2026-32203 – .NET and Visual Studio Denial of Service Vulnerability

CVE-2026-32203

## Executive Summary: Microsoft is releasing this security advisory to provide information about a vulnerability in Sy

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-07-28 发布INFO

Dompdf is an HTML to PDF converter for PHP. In versions 3.15 and prior, the validateLocalUri() method enforces chroot boundaries with a strpos() prefix check after normalizing p...

CVE-2026-55554

Dompdf is an HTML to PDF converter for PHP. In versions 3.15 and prior, the validateLocalUri() method enforces chroot bo

历史摘要 · 未重新核验 · NVD

安全公告2026-07-28 发布INFO

Fission: HTTPTrigger admission omits RelativeURL / Prefix validation; kubectl apply bypasses CLI checks

CVE-2026-50569

`HTTPTriggerSpec.Validate()` validated `Methods`, `FunctionReference`, `Host`, `IngressConfig`, and `CorsConfig`, but si

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-07-28 发布INFO

Improper input validation in Microsoft Edge for Android allows an unauthorized attacker to perform tampering over a network.

CVE-2026-62828

Improper input validation in Microsoft Edge for Android allows an unauthorized attacker to perform tampering over a netw

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-28 发布INFO

Improper Input Validation vulnerability in Apache ActiveMQ AMQP, Apache ActiveMQ, Apache ActiveMQ All. A remote unauthenticated peer that can reach an exposed AMQP NIO connecto...

CVE-2026-59878

Improper Input Validation vulnerability in Apache ActiveMQ AMQP, Apache ActiveMQ, Apache ActiveMQ All. A remote unauthe

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-28 发布INFO

[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] The directory and Rock Ridge / SUSP walk in lib...

CVE-2026-62425

[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to whi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-27 发布INFO

A validation issue was addressed with improved input sanitization. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. A m...

CVE-2026-43813

A validation issue was addressed with improved input sanitization. This issue is fixed in iOS 26.6 and iPadOS 26.6, macO

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-27 发布INFO

An issue existed in the handling of environment variables. This issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, m...

CVE-2026-43793

An issue existed in the handling of environment variables. This issue was addressed with improved validation. This issue

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-27 发布INFO

This issue was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. A remote attacker may be able to cau...

CVE-2026-43777

This issue was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-27 发布INFO

The issue was addressed with improved input sanitization. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, visionOS ...

CVE-2026-43714

The issue was addressed with improved input sanitization. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-27 发布INFO

ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. Versions 10.1.1 through 10.2.0 are vulnerable to SSRF through misclassification of IP...

CVE-2026-54272

ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. Versions 10.1.1 through 10.2

历史摘要 · 未重新核验 · NVD

安全公告2026-07-24 发布INFO

Improper input validation in Microsoft Surface allows an authorized attacker to execute code over...

CVE-2026-54120

Improper input validation in Microsoft Surface allows an authorized attacker to execute code over a network.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-24 发布INFO

Skipper contains an incomplete fix for CVE-2026-50197 in which oversized request bodies bypass...

CVE-2026-65604

Skipper contains an incomplete fix for CVE-2026-50197 in which oversized request bodies bypass Open Policy Agent (OPA) d

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-23 发布INFO

Auth.js: getToken() throws an uncaught exception on malformed Bearer authorization headers

## Summary The exported `getToken()` helper (`next-auth/jwt` and `@auth/core/jwt`) can throw an uncaught exception when

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-23 发布INFO

A flaw has been found in boazsegev facil.io up to 0.7.4. Affected is the function...

CVE-2026-16632

A flaw has been found in boazsegev facil.io up to 0.7.4. Affected is the function websocket_on_protocol_error in the lib

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-07-23 发布HIGH

A flaw has been found in boazsegev facil.io up to 0.7.4. Affected is the function websocket_on_protocol_error in the library lib/facil/http/parsers/websocket_parser.h of the com...

CVE-2026-16632

CVE-2026-16632 是 boazsegev 开发的 facil.io 库(版本 ≤ 0.7.4)中的一个高危漏洞。该漏洞位于 WebSocket 帧解析器的 websocket_parser.h 文件中,具体涉及 websocke

历史摘要 · 未重新核验 · NVD