#cwe-20

共收录 1723 条相关情报。

← 返回所有主题
漏洞预警2026-07-19 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/jpeg: set no_user_fence for JPEG v2.5 ring JPEG rings do not support 64-bit user fence writes, r...

CVE-2026-63847

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/jpeg: set no_user_fence for JPEG v2.5 ri

来源摘录 · NVD

漏洞预警2026-07-19 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/jpeg: set no_user_fence for JPEG v3.0 ring JPEG rings do not support 64-bit user fence writes, r...

CVE-2026-63846

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/jpeg: set no_user_fence for JPEG v3.0 ri

来源摘录 · NVD

漏洞预警2026-07-19 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/jpeg: set no_user_fence for JPEG v4.0 ring JPEG rings do not support 64-bit user fence writes, r...

CVE-2026-63845

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/jpeg: set no_user_fence for JPEG v4.0 ri

来源摘录 · NVD

漏洞预警2026-07-17 发布INFO

Symfony UX is a JavaScript ecosystem for Symfony. From 2.8.0 until 2.36.0 and 3.1.0, when a #[LiveProp] is typed as DateTimeInterface and no explicit format is configured, Symfo...

CVE-2026-49208

Symfony UX is a JavaScript ecosystem for Symfony. From 2.8.0 until 2.36.0 and 3.1.0, when a #[LiveProp] is typed as Date

历史摘要 · 未重新核验 · NVD

安全公告2026-07-17 发布INFO

vLLM has Remote DoS via Invalid Recovered Token Reinjection

CVE-2026-54234

## Summary A frontend-legal multi-request speculative workload can make vLLM produce an out-of-vocabulary recovered tok

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-17 发布INFO

vLLM: Processing differential in multi-channel audio downmixing enables hidden-input/moderation bypass for audio models

CVE-2026-34760

## Issue Description Librosa defaults to using `numpy.mean` for mono downmixing (`to_mono`), while the international sta

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-17 发布INFO

Symfony UX: Format-less date LiveProps parsed with the permissive DateTime constructor

CVE-2026-49208

Symfony UX is a JavaScript ecosystem for Symfony. From 2.8.0 until 2.36.0 and 3.1.0, when a #[LiveProp] is typed as Date

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-07-17 发布INFO

HCL Aftermarket EPC is vulnerable since the application does not have a validation for HOST header and accepts arbitrary hosts when requested in http protocol. When an applicati...

CVE-2024-23577

HCL Aftermarket EPC is vulnerable since the application does not have a validation for HOST header and accepts arbitrary

历史摘要 · 未重新核验 · NVD

安全公告2026-07-17 发布INFO

Improper Input Validation in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and...

CVE-2026-53412

Improper Input Validation in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for Wind

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-17 发布INFO

A time-of-check to time-of-use (TOCTOU) race condition in the installation and uninstallation...

CVE-2026-53411

A time-of-check to time-of-use (TOCTOU) race condition in the installation and uninstallation process of certain Zoom Cl

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-07-16 发布INFO

Improper Input Validation in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for Windows may allow an unauthenticated user to conduct an accou...

CVE-2026-53412

Improper Input Validation in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for Wind

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-16 发布INFO

A time-of-check to time-of-use (TOCTOU) race condition in the installation and uninstallation process of certain Zoom Clients for Windows could allow an authenticated local user...

CVE-2026-53411

A time-of-check to time-of-use (TOCTOU) race condition in the installation and uninstallation process of certain Zoom Cl

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-16 发布INFO

Jupyter Enterprise Gateway launches remote Jupyter Notebook kernels across distributed clusters like Apache Spark, Kubernetes, and Docker Swarm. Versions 2.0.0rc1 and above prio...

CVE-2026-44180

Jupyter Enterprise Gateway launches remote Jupyter Notebook kernels across distributed clusters like Apache Spark, Kuber

历史摘要 · 未重新核验 · NVD

安全公告2026-07-16 发布INFO

Jupyter Enterprise Gateway: ContainerProcessProxy._enforce_prohibited_ids can be Bypassed

CVE-2026-44180

Jupyter Enterprise Gateway launches remote Jupyter Notebook kernels across distributed clusters like Apache Spark, Kuber

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-07-16 发布INFO

Improper Privilege Management in Zoom Rooms for Windows before version 7.1.0 may allow an...

CVE-2026-53409

Improper Privilege Management in Zoom Rooms for Windows before version 7.1.0 may allow an authenticated user to conduct

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-07-16 发布INFO

Improper Privilege Management in Zoom Rooms for Windows before version 7.1.0 may allow an authenticated user to conduct an escalation of privilege via local access.

CVE-2026-53409

Improper Privilege Management in Zoom Rooms for Windows before version 7.1.0 may allow an authenticated user to conduct

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-16 发布INFO

WWBN AVideo is an open source video platform. Versions prior to 29.0 expose .env files to unauthenticated users through the official Docker compose configuration. The official d...

CVE-2026-33692

WWBN AVideo is an open source video platform. Versions prior to 29.0 expose .env files to unauthenticated users through

历史摘要 · 未重新核验 · NVD

安全公告2026-07-16 发布INFO

AVideo Has Unauthenticated .env File Exposure via Official Docker Compose Configuration

CVE-2026-33692

WWBN AVideo is an open source video platform. Versions prior to 29.0 expose .env files to unauthenticated users through

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-07-16 发布INFO

bunkerweb is an Open-source and next-generation Web Application Firewall (WAF). Prior to BunkerWeb 1.6.12 and BunkerWeb PRO 0.57, authenticated Host header handling in the Bunke...

CVE-2026-54728

bunkerweb is an Open-source and next-generation Web Application Firewall (WAF). Prior to BunkerWeb 1.6.12 and BunkerWeb

历史摘要 · 未重新核验 · NVD

安全公告2026-07-16 发布INFO

Envoy Gateway: Authentication Bypass via Improper Input Validation in EnvoyExtensionPolicy Lua Allows Secret Disclosure

CVE-2026-53713

### Impact The `to_absolute_normalized_path` function (security.lua:28-43) does not collapse redundant path separators

历史摘要 · 未重新核验 · GitHub Advisory