#cwe-20

共收录 1738 条相关情报。

← 返回所有主题
漏洞预警2026-06-12 发布INFO

jmespath.php allows users to use JMESPath, software for declaratively specifying how to extract elements from a JSON document, in PHP applications with PHP data structures. Vers...

CVE-2026-54133

jmespath.php allows users to use JMESPath, software for declaratively specifying how to extract elements from a JSON doc

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-12 发布INFO

Quest Bot is an opensource Discord Bot. Prior to version 1.1.6, the automod add command trims user input but does not reject an empty result. Adding a rule containing only white...

CVE-2026-47196

Quest Bot is an opensource Discord Bot. Prior to version 1.1.6, the automod add command trims user input but does not re

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-12 发布INFO

A JNDI Injection vulnerability has been discovered in Apache CXF's JCA integration module, which can allow for code execution, if an attacker is able to manipulate the JCA deplo...

CVE-2026-50633

A JNDI Injection vulnerability has been discovered in Apache CXF's JCA integration module, which can allow for code exec

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-12 发布INFO

A further incomplete fix for a previous advisory CVE-2026-44417 (Untrusted JMS configuration can lead to RCE) for Apache CXF has been identified, which can allow code execution ...

CVE-2026-50632

A further incomplete fix for a previous advisory CVE-2026-44417 (Untrusted JMS configuration can lead to RCE) for Apache

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-12 发布INFO

A logic error in OAuthRequestFilter rejects legitimate requests originating from the bound IP address, while blindly allowing requests from any other IP address. Enabling this ...

CVE-2026-50628

A logic error in OAuthRequestFilter rejects legitimate requests originating from the bound IP address, while blindly all

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-12 发布INFO

A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in certain devices running UniFi OS to execute a C...

CVE-2026-47370

A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-12 发布INFO

A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in certain devices running UniFi OS to escalate pr...

CVE-2026-47369

A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-12 发布INFO

A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UID Enterprise Agent to execute a Command Injec...

CVE-2026-47367

A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability

历史摘要 · 未重新核验 · NVD

安全公告2026-06-12 发布INFO

Insufficient validation of untrusted input in Network in Google Chrome prior to 149.0.7827.115...

CVE-2026-12025

Insufficient validation of untrusted input in Network in Google Chrome prior to 149.0.7827.115 allowed a remote attacker

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-12 发布INFO

Insufficient validation of untrusted input in Linux Toolkit Theming in Google Chrome on Linux...

CVE-2026-12034

Insufficient validation of untrusted input in Linux Toolkit Theming in Google Chrome on Linux prior to 149.0.7827.115 al

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-12 发布INFO

Inappropriate implementation in Extensions in Google Chrome prior to 149.0.7827.115 allowed a...

CVE-2026-12017

Inappropriate implementation in Extensions in Google Chrome prior to 149.0.7827.115 allowed a remote attacker who had co

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-12 发布INFO

Inappropriate implementation in DevTools in Google Chrome prior to 149.0.7827.115 allowed a...

CVE-2026-12016

Inappropriate implementation in DevTools in Google Chrome prior to 149.0.7827.115 allowed a remote attacker who had comp

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-12 发布INFO

Insufficient validation of untrusted input in Accessibility in Google Chrome on Mac prior to 149...

CVE-2026-12009

Insufficient validation of untrusted input in Accessibility in Google Chrome on Mac prior to 149.0.7827.115 allowed a re

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-06-11 发布INFO

Insufficient validation of untrusted input in Linux Toolkit Theming in Google Chrome on Linux prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer ...

CVE-2026-12034

Insufficient validation of untrusted input in Linux Toolkit Theming in Google Chrome on Linux prior to 149.0.7827.115 al

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-11 发布INFO

Insufficient validation of untrusted input in Network in Google Chrome prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to leak cross-o...

CVE-2026-12025

Insufficient validation of untrusted input in Network in Google Chrome prior to 149.0.7827.115 allowed a remote attacker

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-11 发布INFO

Inappropriate implementation in Extensions in Google Chrome prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to bypass site isolation v...

CVE-2026-12017

Inappropriate implementation in Extensions in Google Chrome prior to 149.0.7827.115 allowed a remote attacker who had co

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-11 发布INFO

Inappropriate implementation in DevTools in Google Chrome prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to potentially perform a san...

CVE-2026-12016

Inappropriate implementation in DevTools in Google Chrome prior to 149.0.7827.115 allowed a remote attacker who had comp

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-11 发布INFO

Insufficient validation of untrusted input in Accessibility in Google Chrome on Mac prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to...

CVE-2026-12009

Insufficient validation of untrusted input in Accessibility in Google Chrome on Mac prior to 149.0.7827.115 allowed a re

历史摘要 · 未重新核验 · NVD

安全公告2026-06-11 发布INFO

Russh SSH message fields were decoded through allocation-first parsers before field-specific bounds

CVE-2026-48110

# SSH message fields were decoded through allocation-first parsers before field-specific bounds ### Summary Several `r

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-11 发布INFO

Russh: SSH identification parsing accepted non-canonical client banners and did not bound pre-banner input

CVE-2026-48108

### Summary `russh` did not enforce the SSH identification-string rules as deliberately as OpenSSH. In particular, the

历史摘要 · 未重新核验 · GitHub Advisory