#cwe-20

共收录 1738 条相关情报。

← 返回所有主题

漏洞预警2026-06-09 发布INFO

Improper input validation in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.

CVE-2026-48569

Improper input validation in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.

历史摘要 · 未重新核验 · NVD

#cve #cwe-20 #cwe-23

漏洞预警2026-06-09 发布INFO

Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by an Improper Input Validation vulnerability that could result in a Security feature bypass....

CVE-2026-48289

Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by an Improper Input Validation vuln

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-06-09 发布INFO

Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by an Improper Input Validation vulnerability that could result in a Security feature bypass....

CVE-2026-48288

Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by an Improper Input Validation vuln

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-06-09 发布INFO

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a netw...

CVE-2026-47641

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allo

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-06-09 发布INFO

Improper input validation in Microsoft Azure Attestation service and Device Health Attestation Service allows an authorized attacker to perform spoofing with a physical attack.

CVE-2026-45642

Improper input validation in Microsoft Azure Attestation service and Device Health Attestation Service allows an authori

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-06-09 发布INFO

Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.

CVE-2026-45636

Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.

历史摘要 · 未重新核验 · NVD

#cve #cwe-20 #cwe-122

漏洞预警2026-06-09 发布INFO

Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

CVE-2026-44811

Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

历史摘要 · 未重新核验 · NVD

#cve #cwe-20 #cwe-122

漏洞预警2026-06-09 发布INFO

Improper input validation in Visual Studio Code allows an unauthorized attacker to elevate privileges over a network.

CVE-2026-40376

Improper input validation in Visual Studio Code allows an unauthorized attacker to elevate privileges over a network.

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-06-09 发布INFO

Insufficient input validation in NETGEAR JR6150 (AC750 WiFi Router 802.11ac Dual Band Gigabit released in 2014) allows users connected to the local WiFi Networks to execute oper...

CVE-2026-0419

Insufficient input validation in NETGEAR JR6150 (AC750 WiFi Router 802.11ac Dual Band Gigabit released in 2014) allows u

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-06-09 发布INFO

Insufficient input validation vulnerability in NETGEAR devices allows authenticated administrators connected to the local network to tamper with the router's integrity.

CVE-2026-0417

Insufficient input validation vulnerability in NETGEAR devices allows authenticated administrators connected to the loca

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-06-09 发布INFO

Authenticated administrators connected to the local network can modify router functionality beyond what is intended through the standard management interface.

CVE-2026-0416

Authenticated administrators connected to the local network can modify router functionality beyond what is intended thro

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-06-09 发布INFO

Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification of ...

CVE-2026-0415

Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected t

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-06-09 发布INFO

Insufficient input validation vulnerability in NETGEAR JR6150 (AC750 WiFi Router 802.11ac Dual Band Gigabit released in 2014) allows administrators connected to the local networ...

CVE-2026-0412

Insufficient input validation vulnerability in NETGEAR JR6150 (AC750 WiFi Router 802.11ac Dual Band Gigabit released in

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-06-09 发布INFO

Authenticated administrators connected to the local network can gain elevated access to the router and make unauthorized changes to router software and functionality.

CVE-2026-0410

Authenticated administrators connected to the local network can gain elevated access to the router and make unauthorize

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

安全公告2026-06-09 发布INFO

Insufficient policy enforcement in Passwords in Google Chrome prior to 149.0.7827.103 allowed a...

CVE-2026-11689

Insufficient policy enforcement in Passwords in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had