#cwe-20

共收录 1723 条相关情报。

← 返回所有主题

漏洞预警2026-07-06 发布INFO

Improper Input Validation vulnerability in Apache Camel AWS2-SQS Component. The camel-aws2-sqs component map inbound message attributes into the Camel Exchange through a compo...

CVE-2026-46456

Improper Input Validation vulnerability in Apache Camel AWS2-SQS Component. The camel-aws2-sqs component map inbound m

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-07-06 发布INFO

Improper Input Validation vulnerability in Apache Camel Cometd Component. The camel-cometd component maps inbound Bayeux (CometD) message headers into the Camel Exchange withou...

CVE-2026-46454

Improper Input Validation vulnerability in Apache Camel Cometd Component. The camel-cometd component maps inbound Bayeu

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-07-06 发布INFO

Improper Input Validation, Authorization Bypass Through User-Controlled Key vulnerability in Apache Camel ElasticSearch Rest Client. The camel-elasticsearch-rest-client compone...

CVE-2026-46453

Improper Input Validation, Authorization Bypass Through User-Controlled Key vulnerability in Apache Camel ElasticSearch

历史摘要 · 未重新核验 · NVD

#cve #cwe-20 #cwe-639

安全公告2026-07-05 发布INFO

An unauthenticated improper input validation vulnerability in the POST /fetch_cve_data endpoint...

CVE-2026-59509

An unauthenticated improper input validation vulnerability in the POST /fetch_cve_data endpoint in cve-search. A remote

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-20 #severity:critical

漏洞预警2026-07-05 发布INFO

An unauthenticated improper input validation vulnerability in the POST /fetch_cve_data endpoint in cve-search. A remote attacker can manipulate request parameters controlling th...

CVE-2026-59509

An unauthenticated improper input validation vulnerability in the POST /fetch_cve_data endpoint in cve-search. A remote

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

安全公告2026-07-05 发布INFO

A vulnerability was determined in AD-Security AD_Miner 1.9.0. Affected is the function request_a...

CVE-2026-14723

A vulnerability was determined in AD-Security AD_Miner 1.9.0. Affected is the function request_a of the file ad_miner/sc

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-20 #severity:medium

漏洞预警2026-07-05 发布INFO

A vulnerability was determined in AD-Security AD_Miner 1.9.0. Affected is the function request_a of the file ad_miner/scripts/analyse_cache.py of the component Cache Handler. Th...

CVE-2026-14723

A vulnerability was determined in AD-Security AD_Miner 1.9.0. Affected is the function request_a of the file ad_miner/sc

历史摘要 · 未重新核验 · NVD

#cve #cwe-20 #cwe-502

安全公告2026-07-04 发布INFO

A security vulnerability has been detected in kirilkirkov Ecommerce-CodeIgniter-Bootstrap up to...

CVE-2026-14637

A security vulnerability has been detected in kirilkirkov Ecommerce-CodeIgniter-Bootstrap up to 13fd582aaf49aeab7438acc0

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-20 #severity:high

漏洞预警2026-07-04 发布INFO

A security vulnerability has been detected in kirilkirkov Ecommerce-CodeIgniter-Bootstrap up to 13fd582aaf49aeab7438acc0fc3eb973a1f5e6a7. The affected element is the function ge...

CVE-2026-14637

A security vulnerability has been detected in kirilkirkov Ecommerce-CodeIgniter-Bootstrap up to 13fd582aaf49aeab7438acc0

历史摘要 · 未重新核验 · NVD

#cve #cwe-20 #cwe-502

安全公告2026-07-03 发布INFO

Improper input validation in Microsoft Edge (Chromium-based) allows an unauthorized attacker to...

CVE-2026-58292

Improper input validation in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a netw

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-20 #severity:high

安全公告2026-07-03 发布INFO

Improper input validation in Microsoft Edge (Chromium-based) allows an unauthorized attacker to...

CVE-2026-57985

Improper input validation in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a netw

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-20 #severity:high

安全公告2026-07-03 发布INFO

Gitea versions before 1.25.5 lack validation constraints for repository creation fields,...

CVE-2026-22547

Gitea versions before 1.25.5 lack validation constraints for repository creation fields, including length-limited templa

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-20

漏洞预警2026-07-03 发布INFO

Improper input validation in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

CVE-2026-58292

Improper input validation in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a netw

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-07-03 发布INFO

Improper input validation in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

CVE-2026-57985

Improper input validation in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a netw

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-07-03 发布INFO

Gitea versions before 1.25.5 lack validation constraints for repository creation fields, including length-limited template fields and trust model or object format values.

CVE-2026-22547

Gitea versions before 1.25.5 lack validation constraints for repository creation fields, including length-limited templa

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-07-03 发布INFO

webpack-dev-server versions 5.2.5 and earlier terminate the whole Node.js process when an unauthenticated peer sends either a normal HTTP request with a malformed Host header or...

CVE-2026-14631

webpack-dev-server versions 5.2.5 and earlier terminate the whole Node.js process when an unauthenticated peer sends eit

历史摘要 · 未重新核验 · NVD

#cve #cwe-20 #cwe-248

漏洞预警2026-07-03 发布INFO

A vulnerability exists in the Kong Konnect Model Context Protocol (MCP) server prior to version 1.0.0, which could allow a remote attacker to perform an indirect prompt injectio...

CVE-2026-13341

A vulnerability exists in the Kong Konnect Model Context Protocol (MCP) server prior to version 1.0.0, which could allow

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

安全公告2026-07-02 发布INFO

Steeltoe.Discovery.Eureka: Unrecognized DataCenterInfo.Name poisons entire registry fetch

CVE-2026-50196

### Summary `DataCenterInfo.FromJson` throws `ArgumentException` for any `name` value other than `"MyOwn"` or `"Amazon"

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #nuget #cwe-20 #cwe-400 #severity:high

安全公告2026-07-02 发布INFO

Insufficient validation of untrusted input in Dawn in Google Chrome on Android prior to 150.0...

CVE-2026-14428

Insufficient validation of untrusted input in Dawn in Google Chrome on Android prior to 150.0.7871.46 allowed a remote a

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-20 #severity:high

安全公告2026-07-02 发布INFO

Insufficient validation of untrusted input in Skia in Google Chrome prior to 150.0.7871.46...

CVE-2026-14429

Insufficient validation of untrusted input in Skia in Google Chrome prior to 150.0.7871.46 allowed a remote attacker who

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-20 #severity:high