#cwe-20

共收录 1723 条相关情报。

← 返回所有主题
漏洞预警2026-07-14 发布INFO

Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over an adjacent network.

CVE-2026-50370

Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over an adjacent netwo

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-14 发布INFO

Uncaught exception in Windows Server Update Service allows an unauthorized attacker to perform tampering over a network.

CVE-2026-50328

Uncaught exception in Windows Server Update Service allows an unauthorized attacker to perform tampering over a network.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-14 发布INFO

A security flaw was discovered in the NETGEAR DGND3700v1 that could allow someone on the same local WiFi network to send unauthorized commands to the device. This issue was i...

CVE-2026-15757

A security flaw was discovered in the NETGEAR DGND3700v1 that could allow someone on the same local WiFi network to send

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-14 发布INFO

Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVE-2026-55899

Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

历史摘要 · 未重新核验 · NVD

安全公告2026-07-13 发布INFO

Apollo ConfigService access key authentication bypass via raw config file appId parsing

CVE-2026-59955

### Summary Apollo ConfigService may allow unauthorized access to raw configuration data when AccessKey / management key

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-13 发布INFO

Apollo ConfigService access key authentication bypass via appId parsing and non-canonical matching

CVE-2026-59954

### Summary Apollo ConfigService may allow unauthorized access to configuration data when AccessKey / management key aut

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-07-13 发布INFO

A POST request sent to a specific webserver endpoint can be used to write to arbitrary file locations. The endpoint accepts the filename parameter in the Content-Disposition hea...

CVE-2026-22102

A POST request sent to a specific webserver endpoint can be used to write to arbitrary file locations. The endpoint acce

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-13 发布INFO

A vulnerability was determined in AkariAsai self-rag up to 1fcdc420e48f50a7d7ab1ece5494221b93252e99. Affected by this issue is the function Indexer.deserialize_from of the file ...

CVE-2026-15535

A vulnerability was determined in AkariAsai self-rag up to 1fcdc420e48f50a7d7ab1ece5494221b93252e99. Affected by this is

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-13 发布INFO

A vulnerability has been found in yashbhalgat HashNeRF-pytorch up to 82885e698295982504eb6a26d060a6b2473e3706. Affected by this issue is the function torch.load of the file run_...

CVE-2026-15531

A vulnerability has been found in yashbhalgat HashNeRF-pytorch up to 82885e698295982504eb6a26d060a6b2473e3706. Affected

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-13 发布INFO

A vulnerability was detected in yzhao062 pyod 3.5.0/3.5.1/3.5.2. Affected is the function pyod.utils.persistence.load of the file pyod/utils/persistence.py. Performing a manipul...

CVE-2026-15529

A vulnerability was detected in yzhao062 pyod 3.5.0/3.5.1/3.5.2. Affected is the function pyod.utils.persistence.load of

历史摘要 · 未重新核验 · NVD

安全公告2026-07-11 发布INFO

The Planyo Online Reservation System plugin for WordPress is vulnerable to Server-Side Request...

CVE-2026-3576

The Planyo Online Reservation System plugin for WordPress is vulnerable to Server-Side Request Forgery leading to Local

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-07-11 发布INFO

The Planyo Online Reservation System plugin for WordPress is vulnerable to Server-Side Request Forgery leading to Local File Inclusion in all versions up to, and including, 3.0....

CVE-2026-3576

The Planyo Online Reservation System plugin for WordPress is vulnerable to Server-Side Request Forgery leading to Local

历史摘要 · 未重新核验 · NVD

安全公告2026-07-10 发布INFO

libp2p: CPU DoS via oversized IHAVE and IWANT control message arrays

CVE-2026-49866

### Summary gossipsub processes IHAVE and IWANT control messages by iterating every received message ID synchronously be

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-07-10 发布INFO

Out-of-bounds Read, Improper Input Validation vulnerability in Apache IoTDB C++ client. Out-of-bounds reads in IoTDB C++ client TsBlock deserializer crash client process on malf...

CVE-2026-40454

Out-of-bounds Read, Improper Input Validation vulnerability in Apache IoTDB C++ client. Out-of-bounds reads in IoTDB C++

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-10 发布INFO

The SureForms – Drag and Drop Form Builder for WordPress plugin for WordPress is vulnerable to Improper Input Validation in all versions up to, and including, 2.2.1. This is due...

CVE-2026-15288

The SureForms – Drag and Drop Form Builder for WordPress plugin for WordPress is vulnerable to Improper Input Validation

历史摘要 · 未重新核验 · NVD

安全公告2026-07-09 发布INFO

A file deletion vulnerability in Palo Alto Networks PAN-OS® software enables an unauthenticated...

CVE-2026-0282

A file deletion vulnerability in Palo Alto Networks PAN-OS® software enables an unauthenticated attacker with network ac

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-07-09 发布INFO

A file deletion vulnerability in Palo Alto Networks PAN-OS® software enables an unauthenticated attacker with network access to the management web interface to delete files from...

CVE-2026-0282

A file deletion vulnerability in Palo Alto Networks PAN-OS® software enables an unauthenticated attacker with network ac

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-09 发布INFO

An improper input handling vulnerability in the RTSP service of Tenda CP3 V3.0 (firmware V31.1.9.91) causes the device to abruptly terminate the TCP connection with a RST packet...

CVE-2026-51606

An improper input handling vulnerability in the RTSP service of Tenda CP3 V3.0 (firmware V31.1.9.91) causes the device t

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-09 发布INFO

An insufficient input validation vulnerability in the RTSP service of MERCURY MIPC252W v1.0.5 Build 230306 Rel.79931n allows an unauthenticated remote attacker to render an indi...

CVE-2026-51599

An insufficient input validation vulnerability in the RTSP service of MERCURY MIPC252W v1.0.5 Build 230306 Rel.79931n al

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-09 发布INFO

An input validation vulnerability in the RTSP service of MERCURY MIPC252W IP Camera v1.0.5 Build 230306 Rel.79931n) allows an unauthenticated, network-adjacent attacker to cause...

CVE-2026-51598

An input validation vulnerability in the RTSP service of MERCURY MIPC252W IP Camera v1.0.5 Build 230306 Rel.79931n) allo

历史摘要 · 未重新核验 · NVD