#cwe-20

共收录 1738 条相关情报。

← 返回所有主题
漏洞预警2026-06-29 发布INFO

The issue was addressed with improved input sanitization. This issue is fixed in iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2. An app may be able to leak sensitive kernel st...

CVE-2026-43722

The issue was addressed with improved input sanitization. This issue is fixed in iOS 26.5.2 and iPadOS 26.5.2, macOS Tah

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-29 发布INFO

The issue was addressed with improved input validation. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2. A malicious website may exfiltrat...

CVE-2026-43708

The issue was addressed with improved input validation. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-29 发布INFO

This issue was addressed with improved input validation. This issue is fixed in iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2. An app may be able to cause unexpected system t...

CVE-2026-39868

This issue was addressed with improved input validation. This issue is fixed in iOS 26.5.2 and iPadOS 26.5.2, macOS Taho

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-26 发布INFO

OpenProject is open-source, web-based project management software. Prior to 17.3.3 and 17.4.1, cache store poisoning leads to Remote Code Execution (RCE). This vulnerability is ...

CVE-2026-52780

OpenProject is open-source, web-based project management software. Prior to 17.3.3 and 17.4.1, cache store poisoning lea

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-26 发布INFO

A flaw was found in KubeVirt's network annotation generator. When a tenant creates a VirtualMachineInstance with a Multus network configuration, the supplied networkName value i...

CVE-2026-13434

A flaw was found in KubeVirt's network annotation generator. When a tenant creates a VirtualMachineInstance with a Multu

历史摘要 · 未重新核验 · NVD

安全公告2026-06-25 发布INFO

ImageMagick: Policy Bypass in DCM decoder could result in image with invalid dimensions

CVE-2026-49218

A missing check in the DCM decoder could result in an image with invalid dimensions and that could cause crashes in othe

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-06-25 发布INFO

An invalid zone might pass ZONEMD validation while it should not. This is only relevant if ZoneToCache is configured with ZONEMD validation.

CVE-2026-42390

An invalid zone might pass ZONEMD validation while it should not. This is only relevant if ZoneToCache is configured wit

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-25 发布INFO

This fix provides extra hardening for the 5.4.x branch by doing extra validation of incoming answers from authoritative servers.

CVE-2026-42389

This fix provides extra hardening for the 5.4.x branch by doing extra validation of incoming answers from authoritative

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-25 发布INFO

Incomplete validation of the SOA record present in a catalog zone might lead to a crash.

CVE-2026-42388

Incomplete validation of the SOA record present in a catalog zone might lead to a crash.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-25 发布INFO

A malicious authoritative server can send a crafted zone via the ZoneToCache function that leads to a crash of the Recursor due to insuffcient input validation.

CVE-2026-42387

A malicious authoritative server can send a crafted zone via the ZoneToCache function that leads to a crash of the Recur

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-25 发布INFO

NSD version 4.14.0 introduced a bug where a specially crafted APL RR, with an adflength larger than permitted for the address family will overwrite the stack when the zone is wr...

CVE-2026-12246

NSD version 4.14.0 introduced a bug where a specially crafted APL RR, with an adflength larger than permitted for the ad

历史摘要 · 未重新核验 · NVD

安全公告2026-06-24 发布INFO

Race in DevTools in Google Chrome prior to 149.0.7827.197 allowed a remote attacker who had...

CVE-2026-13025

Race in DevTools in Google Chrome prior to 149.0.7827.197 allowed a remote attacker who had compromised the renderer pro

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-24 发布INFO

Insufficient validation of untrusted input in Navigation in Google Chrome prior to 149.0.7827.197...

CVE-2026-13024

Insufficient validation of untrusted input in Navigation in Google Chrome prior to 149.0.7827.197 allowed a remote attac

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-06-24 发布INFO

Gogs is an open source self-hosted Git service. Prior to 0.14.3, the Gogs Mirror Settings functionality provide an alternative way from the well protected New Migration function...

CVE-2026-52801

Gogs is an open source self-hosted Git service. Prior to 0.14.3, the Gogs Mirror Settings functionality provide an alter

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-24 发布INFO

Gogs is an open source self-hosted Git service. Prior to 0.14.3, a malicious user with rights to create a new file on a repository or wiki page can trigger a denial of service c...

CVE-2025-64719

Gogs is an open source self-hosted Git service. Prior to 0.14.3, a malicious user with rights to create a new file on a

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-24 发布INFO

Race in DevTools in Google Chrome prior to 149.0.7827.197 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafte...

CVE-2026-13025

Race in DevTools in Google Chrome prior to 149.0.7827.197 allowed a remote attacker who had compromised the renderer pro

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-24 发布INFO

Insufficient validation of untrusted input in Navigation in Google Chrome prior to 149.0.7827.197 allowed a remote attacker who had compromised the renderer process to bypass si...

CVE-2026-13024

Insufficient validation of untrusted input in Navigation in Google Chrome prior to 149.0.7827.197 allowed a remote attac

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-24 发布INFO

Warp is an agentic development environment. From 0.2025.03.05.08.02.stable_00 until 0.2026.05.06.15.42.stable_01, Warp accepts non-inline `OSC 1337;File` payloads from terminal ...

CVE-2026-48720

Warp is an agentic development environment. From 0.2025.03.05.08.02.stable_00 until 0.2026.05.06.15.42.stable_01, Warp a

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-24 发布INFO

Warp is an agentic development environment. From 0.2023.10.24.08.03.stable_00 until 0.2026.05.06.15.42.stable_01, Warp may open executable local files through the operating syst...

CVE-2026-48704

Warp is an agentic development environment. From 0.2023.10.24.08.03.stable_00 until 0.2026.05.06.15.42.stable_01, Warp m

历史摘要 · 未重新核验 · NVD

安全公告2026-06-24 发布INFO

OliveTin has Unvalidated `ot_`-prefixed Arguments that Bypass Input Filtering

CVE-2026-53541

### Description The `filterToDefinedArgumentsOnly` function in the executor is intended to discard any arguments not ex

历史摘要 · 未重新核验 · GitHub Advisory