#cwe-20

共收录 1738 条相关情报。

← 返回所有主题
漏洞预警2026-06-09 发布INFO

Insufficient validation of untrusted input in Extensions in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to bypass si...

CVE-2026-11658

Insufficient validation of untrusted input in Extensions in Google Chrome prior to 149.0.7827.103 allowed a remote attac

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-09 发布INFO

Inappropriate implementation in Extensions in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to bypass site isolation v...

CVE-2026-11653

Inappropriate implementation in Extensions in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had co

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-08 发布INFO

When sending a specifically crafted non-UTF-8 string as select-asn query parameter to the /api/v1/origins endpoint, Routinator crashes. This only affects users who allow API a...

CVE-2026-49234

When sending a specifically crafted non-UTF-8 string as select-asn query parameter to the /api/v1/origins endpoint, Rout

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-08 发布INFO

## Summary The iOS implementation of `cordova-plugin-inappbrowser` passes the `id` field from a `WKScriptMessage` body to `commandDelegate sendPluginResult:callbackId:` with no...

CVE-2026-47430

## Summary The iOS implementation of `cordova-plugin-inappbrowser` passes the `id` field from a `WKScriptMessage` body

历史摘要 · 未重新核验 · NVD

安全公告2026-06-07 发布INFO

A flaw has been found in Boost Serialization up to 1.91. The impacted element is an unknown...

CVE-2026-11460

A flaw has been found in Boost Serialization up to 1.91. The impacted element is an unknown function. This manipulation

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-06-07 发布HIGH

A flaw has been found in Boost Serialization. The impacted element is an unknown function. This manipulation causes improper validation of specified type of input. It is possibl...

CVE-2026-11460

A flaw has been found in Boost Serialization. The impacted element is an unknown function. This manipulation causes impr

来源摘录 · NVD

安全公告2026-06-05 发布INFO

Twig: Sandbox: multiple `__toString()` policy bypasses via unguarded string coercion points

CVE-2026-47732

### Description `SandboxNodeVisitor` enforces `SecurityPolicy::checkMethodAllowed()` for implicit `__toString()` calls

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-06-05 发布INFO

HAX CMS helps manage microsite universe with PHP or NodeJs backends. Prior to version 26.0.0, the HAX CMS NodeJS application crashes when an authenticated attacker sends a speci...

CVE-2026-46357

HAX CMS helps manage microsite universe with PHP or NodeJs backends. Prior to version 26.0.0, the HAX CMS NodeJS applica

历史摘要 · 未重新核验 · NVD

安全公告2026-06-05 发布INFO

A denial-of-service vulnerability exists in the RTSP server component of TP-Link Tapo C520WS v2...

CVE-2026-8714

A denial-of-service vulnerability exists in the RTSP server component of TP-Link Tapo C520WS v2 due to improper handling

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-05 发布INFO

In a CVX cluster, an EOS switch connected to a CVX server is not resilient to certain malformed...

CVE-2025-5089

In a CVX cluster, an EOS switch connected to a CVX server is not resilient to certain malformed messages received from t

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-05 发布INFO

CVX is not resilient to unexpected messages from a connected switch. This leads to agent crashes...

CVE-2025-5090

CVX is not resilient to unexpected messages from a connected switch. This leads to agent crashes on CVX causing instabil

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-06-05 发布INFO

Cloudburst Network provides network components used within Cloudburst projects. A vulnerability in versions prior to `1.0.0.CR3-20260418.124334-32` impacts publicly accessible s...

CVE-2026-45291

Cloudburst Network provides network components used within Cloudburst projects. A vulnerability in versions prior to `1.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-05 发布INFO

A denial-of-service vulnerability exists in the RTSP server component of TP-Link Tapo C520WS v2 due to improper handling of syntactically invalid input.  Crafted inputs can trig...

CVE-2026-8714

A denial-of-service vulnerability exists in the RTSP server component of TP-Link Tapo C520WS v2 due to improper handling

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-05 发布INFO

CVX is not resilient to unexpected messages from a connected switch. This leads to agent crashes on CVX causing instability in the CVX cluster. An attacker could use this behavi...

CVE-2025-5090

CVX is not resilient to unexpected messages from a connected switch. This leads to agent crashes on CVX causing instabil

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-05 发布INFO

In a CVX cluster, an EOS switch connected to a CVX server is not resilient to certain malformed messages received from the connected CVX server. Similarly, the CVX server is not...

CVE-2025-5089

In a CVX cluster, an EOS switch connected to a CVX server is not resilient to certain malformed messages received from t

历史摘要 · 未重新核验 · NVD

安全公告2026-06-05 发布INFO

DbGate: Unauthenticated Remote Code Execution via JSON Script Runner

CVE-2026-47668

### Summary DbGate's JSON script runner (`POST /runners/start`) allows remote code execution via code injection in the `

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-06-05 发布INFO

Insufficient validation of untrusted input in Reader Mode in Google Chrome on Android prior to 149.0.7827.53 allowed a local attacker to bypass navigation restrictions via a mal...

CVE-2026-11297

Insufficient validation of untrusted input in Reader Mode in Google Chrome on Android prior to 149.0.7827.53 allowed a l

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-05 发布INFO

Insufficient policy enforcement in Navigation in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to bypass nav...

CVE-2026-11287

Insufficient policy enforcement in Navigation in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attack

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-05 发布INFO

Insufficient validation of untrusted input in Wallet in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to perform UI spo...

CVE-2026-11286

Insufficient validation of untrusted input in Wallet in Google Chrome prior to 149.0.7827.53 allowed a remote attacker w

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-05 发布INFO

Insufficient validation of untrusted input in Shortcuts in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker to bypass navigation restrictions via a maliciou...

CVE-2026-11283

Insufficient validation of untrusted input in Shortcuts in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote

历史摘要 · 未重新核验 · NVD