#cwe-20
共收录 1738 条相关情报。
← 返回所有主题 漏洞预警2026-06-09 发布INFO
CVE-2026-11658
Insufficient validation of untrusted input in Extensions in Google Chrome prior to 149.0.7827.103 allowed a remote attac
历史摘要 · 未重新核验 · NVD
漏洞预警2026-06-09 发布INFO
CVE-2026-11653
Inappropriate implementation in Extensions in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had co
历史摘要 · 未重新核验 · NVD
漏洞预警2026-06-08 发布INFO
CVE-2026-49234
When sending a specifically crafted non-UTF-8 string as select-asn query parameter to the /api/v1/origins endpoint, Rout
历史摘要 · 未重新核验 · NVD
漏洞预警2026-06-08 发布INFO
CVE-2026-47430
## Summary
The iOS implementation of `cordova-plugin-inappbrowser` passes the `id` field from a `WKScriptMessage` body
历史摘要 · 未重新核验 · NVD
安全公告2026-06-07 发布INFO
CVE-2026-11460
A flaw has been found in Boost Serialization up to 1.91. The impacted element is an unknown function. This manipulation
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-06-07 发布HIGH
CVE-2026-11460
A flaw has been found in Boost Serialization. The impacted element is an unknown function. This manipulation causes impr
来源摘录 · NVD
安全公告2026-06-05 发布INFO
CVE-2026-47732
### Description
`SandboxNodeVisitor` enforces `SecurityPolicy::checkMethodAllowed()` for implicit `__toString()` calls
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-06-05 发布INFO
CVE-2026-46357
HAX CMS helps manage microsite universe with PHP or NodeJs backends. Prior to version 26.0.0, the HAX CMS NodeJS applica
历史摘要 · 未重新核验 · NVD
安全公告2026-06-05 发布INFO
CVE-2026-8714
A denial-of-service
vulnerability exists in the RTSP server component of TP-Link Tapo C520WS v2 due to improper handling
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-06-05 发布INFO
CVE-2025-5089
In a CVX cluster, an EOS switch connected to a CVX server is not resilient to certain malformed messages received from t
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-06-05 发布INFO
CVE-2025-5090
CVX is not resilient to unexpected messages from a connected switch. This leads to agent crashes on CVX causing instabil
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-06-05 发布INFO
CVE-2026-45291
Cloudburst Network provides network components used within Cloudburst projects. A vulnerability in versions prior to `1.
历史摘要 · 未重新核验 · NVD
漏洞预警2026-06-05 发布INFO
CVE-2026-8714
A denial-of-service
vulnerability exists in the RTSP server component of TP-Link Tapo C520WS v2 due to improper handling
历史摘要 · 未重新核验 · NVD
漏洞预警2026-06-05 发布INFO
CVE-2025-5090
CVX is not resilient to unexpected messages from a connected switch. This leads to agent crashes on CVX causing instabil
历史摘要 · 未重新核验 · NVD
漏洞预警2026-06-05 发布INFO
CVE-2025-5089
In a CVX cluster, an EOS switch connected to a CVX server is not resilient to certain malformed messages received from t
历史摘要 · 未重新核验 · NVD
安全公告2026-06-05 发布INFO
CVE-2026-47668
### Summary
DbGate's JSON script runner (`POST /runners/start`) allows remote code execution via code injection in the `
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-06-05 发布INFO
CVE-2026-11297
Insufficient validation of untrusted input in Reader Mode in Google Chrome on Android prior to 149.0.7827.53 allowed a l
历史摘要 · 未重新核验 · NVD
漏洞预警2026-06-05 发布INFO
CVE-2026-11287
Insufficient policy enforcement in Navigation in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attack
历史摘要 · 未重新核验 · NVD
漏洞预警2026-06-05 发布INFO
CVE-2026-11286
Insufficient validation of untrusted input in Wallet in Google Chrome prior to 149.0.7827.53 allowed a remote attacker w
历史摘要 · 未重新核验 · NVD
漏洞预警2026-06-05 发布INFO
CVE-2026-11283
Insufficient validation of untrusted input in Shortcuts in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote
历史摘要 · 未重新核验 · NVD