#cwe-20

共收录 1738 条相关情报。

← 返回所有主题
安全公告2026-07-03 发布INFO

Gitea versions before 1.25.5 lack validation constraints for repository creation fields,...

CVE-2026-22547

Gitea versions before 1.25.5 lack validation constraints for repository creation fields, including length-limited templa

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-07-03 发布INFO

Improper input validation in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

CVE-2026-58292

Improper input validation in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a netw

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-03 发布INFO

Improper input validation in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

CVE-2026-57985

Improper input validation in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a netw

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-03 发布INFO

Gitea versions before 1.25.5 lack validation constraints for repository creation fields, including length-limited template fields and trust model or object format values.

CVE-2026-22547

Gitea versions before 1.25.5 lack validation constraints for repository creation fields, including length-limited templa

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-03 发布INFO

webpack-dev-server versions 5.2.5 and earlier terminate the whole Node.js process when an unauthenticated peer sends either a normal HTTP request with a malformed Host header or...

CVE-2026-14631

webpack-dev-server versions 5.2.5 and earlier terminate the whole Node.js process when an unauthenticated peer sends eit

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-03 发布INFO

A vulnerability exists in the Kong Konnect Model Context Protocol (MCP) server prior to version 1.0.0, which could allow a remote attacker to perform an indirect prompt injectio...

CVE-2026-13341

A vulnerability exists in the Kong Konnect Model Context Protocol (MCP) server prior to version 1.0.0, which could allow

历史摘要 · 未重新核验 · NVD

安全公告2026-07-02 发布INFO

Steeltoe.Discovery.Eureka: Unrecognized DataCenterInfo.Name poisons entire registry fetch

CVE-2026-50196

### Summary `DataCenterInfo.FromJson` throws `ArgumentException` for any `name` value other than `"MyOwn"` or `"Amazon"

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-02 发布INFO

Insufficient validation of untrusted input in Dawn in Google Chrome on Android prior to 150.0...

CVE-2026-14428

Insufficient validation of untrusted input in Dawn in Google Chrome on Android prior to 150.0.7871.46 allowed a remote a

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-02 发布INFO

Insufficient validation of untrusted input in Skia in Google Chrome prior to 150.0.7871.46...

CVE-2026-14429

Insufficient validation of untrusted input in Skia in Google Chrome prior to 150.0.7871.46 allowed a remote attacker who

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-02 发布INFO

Insufficient validation of untrusted input in Skia in Google Chrome prior to 150.0.7871.46...

CVE-2026-14414

Insufficient validation of untrusted input in Skia in Google Chrome prior to 150.0.7871.46 allowed a remote attacker who

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-02 发布INFO

Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 150.0.7871.46...

CVE-2026-14411

Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-02 发布INFO

Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 150.0.7871.46...

CVE-2026-14382

Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-02 发布INFO

Insufficient validation of untrusted input in ANGLE in Google Chrome on Android prior to 150.0...

CVE-2026-14401

Insufficient validation of untrusted input in ANGLE in Google Chrome on Android prior to 150.0.7871.46 allowed a remote

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-02 发布INFO

Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 150.0.7871.46...

CVE-2026-14412

Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker wh

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-07-01 发布INFO

Insufficient validation of untrusted input in Skia in Google Chrome prior to 150.0.7871.46 allowed a remote attacker who had compromised the renderer process to potentially perf...

CVE-2026-14429

Insufficient validation of untrusted input in Skia in Google Chrome prior to 150.0.7871.46 allowed a remote attacker who

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-01 发布INFO

Insufficient validation of untrusted input in Dawn in Google Chrome on Android prior to 150.0.7871.46 allowed a remote attacker who had compromised the renderer process to poten...

CVE-2026-14428

Insufficient validation of untrusted input in Dawn in Google Chrome on Android prior to 150.0.7871.46 allowed a remote a

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-01 发布INFO

Insufficient validation of untrusted input in Skia in Google Chrome prior to 150.0.7871.46 allowed a remote attacker who had compromised the renderer process to obtain potential...

CVE-2026-14414

Insufficient validation of untrusted input in Skia in Google Chrome prior to 150.0.7871.46 allowed a remote attacker who

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-01 发布INFO

Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker who had compromised the renderer process to potentially per...

CVE-2026-14412

Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker wh

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-01 发布INFO

Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML ...

CVE-2026-14411

Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-01 发布INFO

Insufficient validation of untrusted input in ANGLE in Google Chrome on Android prior to 150.0.7871.46 allowed a remote attacker who had compromised the renderer process to pote...

CVE-2026-14401

Insufficient validation of untrusted input in ANGLE in Google Chrome on Android prior to 150.0.7871.46 allowed a remote

历史摘要 · 未重新核验 · NVD