#cwe-20
共收录 1738 条相关情报。
← 返回所有主题 漏洞预警2026-06-12 发布INFO
CVE-2026-54133
jmespath.php allows users to use JMESPath, software for declaratively specifying how to extract elements from a JSON doc
历史摘要 · 未重新核验 · NVD
漏洞预警2026-06-12 发布INFO
CVE-2026-47196
Quest Bot is an opensource Discord Bot. Prior to version 1.1.6, the automod add command trims user input but does not re
历史摘要 · 未重新核验 · NVD
漏洞预警2026-06-12 发布INFO
CVE-2026-50633
A JNDI Injection vulnerability has been discovered in Apache CXF's JCA integration module, which can allow for code exec
历史摘要 · 未重新核验 · NVD
漏洞预警2026-06-12 发布INFO
CVE-2026-50632
A further incomplete fix for a previous advisory CVE-2026-44417 (Untrusted JMS configuration can lead to RCE) for Apache
历史摘要 · 未重新核验 · NVD
漏洞预警2026-06-12 发布INFO
CVE-2026-50628
A logic error in OAuthRequestFilter rejects legitimate requests originating from the bound IP address, while blindly all
历史摘要 · 未重新核验 · NVD
漏洞预警2026-06-12 发布INFO
CVE-2026-47370
A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability
历史摘要 · 未重新核验 · NVD
漏洞预警2026-06-12 发布INFO
CVE-2026-47369
A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability
历史摘要 · 未重新核验 · NVD
漏洞预警2026-06-12 发布INFO
CVE-2026-47367
A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability
历史摘要 · 未重新核验 · NVD
安全公告2026-06-12 发布INFO
CVE-2026-12025
Insufficient validation of untrusted input in Network in Google Chrome prior to 149.0.7827.115 allowed a remote attacker
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-06-12 发布INFO
CVE-2026-12034
Insufficient validation of untrusted input in Linux Toolkit Theming in Google Chrome on Linux prior to 149.0.7827.115 al
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-06-12 发布INFO
CVE-2026-12017
Inappropriate implementation in Extensions in Google Chrome prior to 149.0.7827.115 allowed a remote attacker who had co
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-06-12 发布INFO
CVE-2026-12016
Inappropriate implementation in DevTools in Google Chrome prior to 149.0.7827.115 allowed a remote attacker who had comp
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-06-12 发布INFO
CVE-2026-12009
Insufficient validation of untrusted input in Accessibility in Google Chrome on Mac prior to 149.0.7827.115 allowed a re
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-06-11 发布INFO
CVE-2026-12034
Insufficient validation of untrusted input in Linux Toolkit Theming in Google Chrome on Linux prior to 149.0.7827.115 al
历史摘要 · 未重新核验 · NVD
漏洞预警2026-06-11 发布INFO
CVE-2026-12025
Insufficient validation of untrusted input in Network in Google Chrome prior to 149.0.7827.115 allowed a remote attacker
历史摘要 · 未重新核验 · NVD
漏洞预警2026-06-11 发布INFO
CVE-2026-12017
Inappropriate implementation in Extensions in Google Chrome prior to 149.0.7827.115 allowed a remote attacker who had co
历史摘要 · 未重新核验 · NVD
漏洞预警2026-06-11 发布INFO
CVE-2026-12016
Inappropriate implementation in DevTools in Google Chrome prior to 149.0.7827.115 allowed a remote attacker who had comp
历史摘要 · 未重新核验 · NVD
漏洞预警2026-06-11 发布INFO
CVE-2026-12009
Insufficient validation of untrusted input in Accessibility in Google Chrome on Mac prior to 149.0.7827.115 allowed a re
历史摘要 · 未重新核验 · NVD
安全公告2026-06-11 发布INFO
CVE-2026-48110
# SSH message fields were decoded through allocation-first parsers before field-specific bounds
### Summary
Several `r
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-06-11 发布INFO
CVE-2026-48108
### Summary
`russh` did not enforce the SSH identification-string rules as deliberately as OpenSSH. In particular, the
历史摘要 · 未重新核验 · GitHub Advisory