#cwe-20

共收录 1738 条相关情报。

漏洞预警2026-06-04 发布INFO

Insufficient validation of untrusted input in DevTools in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI gestures t...

CVE-2026-10922

Insufficient validation of untrusted input in DevTools in Google Chrome prior to 149.0.7827.53 allowed a remote attacker

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-06-04 发布INFO

Insufficient validation of untrusted input in WebShare in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to poten...

CVE-2026-10920

Insufficient validation of untrusted input in WebShare in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote a

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-06-04 发布INFO

Insufficient validation of untrusted input in Media in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially per...

CVE-2026-10917

Insufficient validation of untrusted input in Media in Google Chrome prior to 149.0.7827.53 allowed a remote attacker wh

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-06-04 发布INFO

Insufficient validation of untrusted input in DevTools in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to inject arbit...

CVE-2026-10916

Insufficient validation of untrusted input in DevTools in Google Chrome prior to 149.0.7827.53 allowed a remote attacker

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-06-04 发布INFO

Insufficient validation of untrusted input in Extensions in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to bypass sam...

CVE-2026-10912

Insufficient validation of untrusted input in Extensions in Google Chrome prior to 149.0.7827.53 allowed a remote attack

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-06-04 发布INFO

Insufficient validation of untrusted input in Media in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially per...

CVE-2026-10911

Insufficient validation of untrusted input in Media in Google Chrome prior to 149.0.7827.53 allowed a remote attacker wh

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-06-04 发布INFO

Inappropriate implementation in V8 in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromiu...

CVE-2026-10904

Inappropriate implementation in V8 in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrar

历史摘要 · 未重新核验 · NVD

#cve #cwe-20 #cwe-94 #cwe-119

安全公告2026-06-03 发布INFO

Jupyter Enterprise Gateway: ContainerProcessProxy._enforce_prohibited_ids Bypass

CVE-2026-44180

### Summary Jupyter Enterprise Gateway has a prohibited UID and GID feature that by default prevents launching kernels

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #pip #cwe-20 #cwe-180 #severity:critical

漏洞预警2026-06-03 发布INFO

The ugw-logstop method allows a remote attacker with user privileges to terminate arbitrary processes due to insufficient validation of user-supplied input.

CVE-2026-35081

The ugw-logstop method allows a remote attacker with user privileges to terminate arbitrary processes due to insufficien

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-06-02 发布INFO

authentik is an open-source identity provider. Prior to versions 2025.12.5, 2026.2.3, and 2026.5.1, authentik's SAML Source ACS endpoint is vulnerable to XML Signature Wrapping ...

CVE-2026-47201

authentik is an open-source identity provider. Prior to versions 2025.12.5, 2026.2.3, and 2026.5.1, authentik's SAML Sou

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-06-02 发布INFO

wire-ios is an iOS client for the Wire secure messaging application. Prior to version 4.16.0, upon receiving a crafted malicious Proteus external message with an encrypted paylo...

CVE-2026-35049

wire-ios is an iOS client for the Wire secure messaging application. Prior to version 4.16.0, upon receiving a crafted m

历史摘要 · 未重新核验 · NVD

#cve #cwe-20 #cwe-191

漏洞预警2026-06-02 发布INFO

OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard. From version 0.1.0 to before version 0.9.0, malformed MongoDB wire messages...

CVE-2026-45685

OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard. From version 0.1.0

历史摘要 · 未重新核验 · NVD

#cve #cwe-20 #cwe-248 #cwe-704

漏洞预警2026-06-02 发布INFO

OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard. Prior to version 0.9.0, the Postgres protocol parser assumes BIND message p...

CVE-2026-45678

OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard. Prior to version 0

历史摘要 · 未重新核验 · NVD

#cve #cwe-20 #cwe-754

漏洞预警2026-06-02 发布INFO

OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard. Prior to version 0.9.0, OBI's replacement ELF parser trusts section offsets...

CVE-2026-45676

OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard. Prior to version 0

历史摘要 · 未重新核验 · NVD

#cve #cwe-20 #cwe-248

漏洞预警2026-06-02 发布INFO

Klaw is a self-service Apache Kafka Topic Management/Governance tool/portal. Prior to version 2.10.4, a vulnerability exists in the user registration and login mechanisms due to...

CVE-2026-44367

Klaw is a self-service Apache Kafka Topic Management/Governance tool/portal. Prior to version 2.10.4, a vulnerability ex

历史摘要 · 未重新核验 · NVD

#cve #cwe-20 #cwe-178

安全公告2026-06-02 发布INFO

CWE-20: Improper Input Validation in web services in Progress Sitefinity 14.1.x through 14.3.x,...

CVE-2026-7195

CWE-20: Improper Input Validation in web services in Progress Sitefinity 14.1.x through 14.3.x, 14.4.x before 14.4.8152,

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-20 #severity:high

漏洞预警2026-06-02 发布INFO

CWE-20: Improper Input Validation in web services in Progress Sitefinity 14.1.x through 14.3.x, 14.4.x before 14.4.8152, 15.0.x before 15.0.8234, 15.1.x before 15.1.8335, 15.2.x...

CVE-2026-7195

CWE-20: Improper Input Validation in web services in Progress Sitefinity 14.1.x through 14.3.x, 14.4.x before 14.4.8152,

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-06-02 发布INFO

The Word Replacer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'replacement' parameter in all versions up to, and including, 0.4. This is due to ins...

CVE-2026-3620

The Word Replacer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'replacement' parameter in a

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

安全公告2026-06-02 发布INFO

A weakness has been identified in FoundationAgents MetaGPT up to 0.8.2. This affects the function...

CVE-2026-10566

A weakness has been identified in FoundationAgents MetaGPT up to 0.8.2. This affects the function Message.check_instruct

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-20 #severity:low

漏洞预警2026-06-02 发布INFO

A weakness has been identified in FoundationAgents MetaGPT up to 0.8.2. This affects the function Message.check_instruct_content of the file metagpt/schema.py. Executing a manip...

CVE-2026-10566

A weakness has been identified in FoundationAgents MetaGPT up to 0.8.2. This affects the function Message.check_instruct

历史摘要 · 未重新核验 · NVD

#cve #cwe-20 #cwe-502