#cwe-20

共收录 1738 条相关情报。

漏洞预警2026-05-28 发布INFO

Insufficient validation of untrusted input in Passwords in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chrom...

CVE-2026-10004

Insufficient validation of untrusted input in Passwords in Google Chrome prior to 148.0.7778.216 allowed a remote attack

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-05-28 发布INFO

Improper Input Validation (CWE-20) in the Kibana Fleet agent policy management feature can lead to privilege escalation. An authenticated user with Fleet management privileges c...

CVE-2026-49095

Improper Input Validation (CWE-20) in the Kibana Fleet agent policy management feature can lead to privilege escalation.

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-05-28 发布INFO

An issue in SourceBans Material Admin before v.1.1.6 (3ecd95e) allows attackers to manipulate arbitrary user data in the web app via a crafted XAJAX call.

CVE-2026-30760

An issue in SourceBans Material Admin before v.1.1.6 (3ecd95e) allows attackers to manipulate arbitrary user data in the

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-05-27 发布INFO

Anchor is a framework providing several convenient developer tools for writing Solana programs. From 1.0.0 to before 1.0.2, an logic error causes anchor programs to accept any p...

CVE-2026-45137

Anchor is a framework providing several convenient developer tools for writing Solana programs. From 1.0.0 to before 1.0

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

安全公告2026-05-27 发布INFO

An authenticated command injection vulnerability exists in the Archer BE450 v1 and BE7200 v1...

CVE-2026-5509

An authenticated command injection vulnerability exists in the Archer BE450 v1 and BE7200 v1 router that allows an admin

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-20 #severity:high

漏洞预警2026-05-27 发布INFO

An authenticated command injection vulnerability exists in the Archer BE450 v1 and BE7200 v1 router that allows an administrator to execute arbitrary system commands through the...

CVE-2026-5509

An authenticated command injection vulnerability exists in the Archer BE450 v1 and BE7200 v1 router that allows an admin

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-05-27 发布INFO

Cinny is a Matrix client. Prior to 4.10.3, A remote authenticated attacker who shares a room with a victim and has permissions to create room emotes (for example in a DM) can ca...

CVE-2026-42553

Cinny is a Matrix client. Prior to 4.10.3, A remote authenticated attacker who shares a room with a victim and has permi

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-05-27 发布INFO

free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, free5GC's NRF root SBI endpoint POST /oauth2/token contains a parser-level type-confusion bug fa...

CVE-2026-44325

free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, free5GC's NRF root SBI endpoint POST /o

历史摘要 · 未重新核验 · NVD

#cve #cwe-20 #cwe-755 #cwe-843

漏洞预警2026-05-27 发布INFO

free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, free5GC's NEF terminates the entire process when a stored PFD-subscription notifyUri cannot be r...

CVE-2026-44319

free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, free5GC's NEF terminates the entire pro

历史摘要 · 未重新核验 · NVD

#cve #cwe-20 #cwe-617 #cwe-755

漏洞预警2026-05-27 发布INFO

free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, the free5GC UDM component fails to validate the supi path parameter in six GET handlers of the n...

CVE-2026-42459

free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, the free5GC UDM component fails to vali

历史摘要 · 未重新核验 · NVD

#cve #cwe-20 #cwe-209

安全公告2026-05-27 发布INFO

Jenkins Credentials Binding Plugin 720.v3f6decef43ea_ and earlier does not properly sanitize file...

CVE-2026-48922

Jenkins Credentials Binding Plugin 720.v3f6decef43ea_ and earlier does not properly sanitize file names for file and zip

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-20 #severity:high

漏洞预警2026-05-27 发布INFO

Jenkins Credentials Binding Plugin 720.v3f6decef43ea_ and earlier does not properly sanitize file names for file and zip file credentials, allowing attackers able to provide cre...

CVE-2026-48922

Jenkins Credentials Binding Plugin 720.v3f6decef43ea_ and earlier does not properly sanitize file names for file and zip

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-05-26 发布INFO

NVIDIA Display Driver for Linux contains a vulnerability in UVM, where a user could cause improper input validation. A successful exploit of this vulnerability might lead to den...

CVE-2026-24195

NVIDIA Display Driver for Linux contains a vulnerability in UVM, where a user could cause improper input validation. A s

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-05-26 发布INFO

NVIDIA Display Driver for Windows and Linux contains a vulnerability in the kernel driver, where a user could cause an incorrect permission assignment for a critical resource. A...

CVE-2025-33221

NVIDIA Display Driver for Windows and Linux contains a vulnerability in the kernel driver, where a user could cause an i

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-05-26 发布INFO

Algernon is a small self-contained pure-Go web server. Prior to 1.17.7, when Algernon is asked for any URL path that resolves to a directory without an index file, DirPage walks...

CVE-2026-45721

Algernon is a small self-contained pure-Go web server. Prior to 1.17.7, when Algernon is asked for any URL path that res

历史摘要 · 未重新核验 · NVD

#cve #cwe-20 #cwe-426 #cwe-552

漏洞预警2026-05-26 发布INFO

e107 is a content management system (CMS). Prior to 2.3.4, a Host Header Injection vulnerability in the password reset page allows attackers to manipulate the Host header to gen...

CVE-2026-43935

e107 is a content management system (CMS). Prior to 2.3.4, a Host Header Injection vulnerability in the password reset p

历史摘要 · 未重新核验 · NVD

#cve #cwe-20 #cwe-807

漏洞预警2026-05-26 发布INFO

A security vulnerability has been detected in fraillt bitsery up to 5.2.4. Affected is the function loadFromSharedState in the library include/bitsery/ext/std_smart_ptr.h. Such ...

CVE-2026-9521

A security vulnerability has been detected in fraillt bitsery up to 5.2.4. Affected is the function loadFromSharedState

历史摘要 · 未重新核验 · NVD

#cve #cwe-20 #cwe-1287

漏洞预警2026-05-25 发布INFO

A flaw has been found in changmingxie tcc-transaction up to 2.1.0. This issue affects the function Fastjson.parseObject of the component Fastjson AutoType REST API. This manipul...

CVE-2026-9497

A flaw has been found in changmingxie tcc-transaction up to 2.1.0. This issue affects the function Fastjson.parseObject

历史摘要 · 未重新核验 · NVD

#cve #cwe-20 #cwe-502

安全公告2026-05-22 发布INFO

A malicious actor with access to the network could exploit an Improper Input Validation...

CVE-2026-34910

A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi OS

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-20 #severity:critical

安全公告2026-05-22 发布INFO

A malicious actor with access to the network and high privileges could exploit an Improper Input...

CVE-2026-33000

A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerabilit

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-20 #severity:critical