#cwe-20

共收录 1738 条相关情报。

← 返回所有主题
漏洞预警2026-05-22 发布INFO

A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi OS devices to execute a Command Injection.

CVE-2026-34910

A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi OS

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-22 发布INFO

A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi OS devices to execute a Command Injection.

CVE-2026-33000

A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerabilit

历史摘要 · 未重新核验 · NVD

安全公告2026-05-21 发布INFO

js-libp2p: Memory DoS via subscription flood of unique topics

CVE-2026-46679

### Summary Three cooperating omissions in `@libp2p/gossipsub` allow an unauthenticated single peer to exhaust the Node.

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-21 发布INFO

Improper input validation, Unrestricted upload of file with dangerous type vulnerability in Gmission Web Fax allows Remote Code Inclusion. This issue affects Web Fax: from 3.0 ...

CVE-2026-9157

Improper input validation, Unrestricted upload of file with dangerous type vulnerability in Gmission Web Fax allows Remo

历史摘要 · 未重新核验 · NVD

安全公告2026-05-20 发布INFO

Insufficient validation of untrusted input in Input in Google Chrome on prior to 148.0.7778.179...

CVE-2026-9124

Insufficient validation of untrusted input in Input in Google Chrome on prior to 148.0.7778.179 allowed a remote attacke

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-20 发布INFO

Insufficient validation of untrusted input in Input in Google Chrome on prior to 148.0.7778.179 allowed a remote attacker who had compromised the renderer process to leak cross-...

CVE-2026-9124

Insufficient validation of untrusted input in Input in Google Chrome on prior to 148.0.7778.179 allowed a remote attacke

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-20 发布INFO

Yii 2 is a PHP application framework. Versions 2.0.54 and prior contain flawed logic in the core view rendering method View::renderPhpFile() that leads to Local File Inclusion. ...

CVE-2026-39850

Yii 2 is a PHP application framework. Versions 2.0.54 and prior contain flawed logic in the core view rendering method V

历史摘要 · 未重新核验 · NVD

安全公告2026-05-20 发布INFO

In Splunk Enterprise versions below 10.2.2, 10.0.5, 9.4.11, and 9.3.12, and Splunk Cloud Platform...

CVE-2026-20240

In Splunk Enterprise versions below 10.2.2, 10.0.5, 9.4.11, and 9.3.12, and Splunk Cloud Platform versions below 10.4.26

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-20 发布INFO

In Splunk Enterprise versions below 10.2.2, 10.0.5, 9.4.11, and 9.3.12, and Splunk Cloud Platform versions below 10.4.2603.1, 10.3.2512.9, 10.2.2510.11, 10.1.2507.21, 10.0.2503....

CVE-2026-20240

In Splunk Enterprise versions below 10.2.2, 10.0.5, 9.4.11, and 9.3.12, and Splunk Cloud Platform versions below 10.4.26

历史摘要 · 未重新核验 · NVD

安全公告2026-05-20 发布INFO

Multiple flaws have been identified in `named` related to the handling of DNS messages whose...

CVE-2026-5946

Multiple flaws have been identified in `named` related to the handling of DNS messages whose CLASS is not Internet (`IN`

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-20 发布INFO

Multiple flaws have been identified in `named` related to the handling of DNS messages whose CLASS is not Internet (`IN`) — for example, `CHAOS` or `HESIOD`, or DNS messages tha...

CVE-2026-5946

Multiple flaws have been identified in `named` related to the handling of DNS messages whose CLASS is not Internet (`IN`

历史摘要 · 未重新核验 · NVD

安全公告2026-05-19 发布INFO

@libp2p/kad-dht: Unvalidated PUT_VALUE records allow unbounded disk exhaustion on DHT server nodes

CVE-2026-45783

### Summary An unauthenticated remote peer can exhaust the disk storage of any `@libp2p/kad-dht` node running in server

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-19 发布INFO

Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunder...

CVE-2026-8959

Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component. This vulnerability was fixed in Fire

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-19 发布INFO

Improper Input Validation vulnerability in Apache OFBiz. This issue affects Apache OFBiz: before 24.09.06. Users are recommended to upgrade to version 24.09.06, which fixes th...

CVE-2026-31378

Improper Input Validation vulnerability in Apache OFBiz. This issue affects Apache OFBiz: before 24.09.06. Users are r

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-19 发布INFO

in OpenHarmony v6.0 and prior versions allow a local attacker cause DOS.

CVE-2026-28751

in OpenHarmony v6.0 and prior versions allow a local attacker cause DOS.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-18 发布INFO

FacturaScripts is an open source accounting and invoicing software. Versions 2026 and below contain a critical vulnerability in the Plugins::add() function. The system fails to ...

CVE-2026-27891

FacturaScripts is an open source accounting and invoicing software. Versions 2026 and below contain a critical vulnerabi

历史摘要 · 未重新核验 · NVD

安全公告2026-05-18 发布INFO

OpenTelemetry eBPF Instrumentation: MongoDB parser panics on malformed wire messages

CVE-2026-45685

### Summary Malformed MongoDB wire messages can trigger uncaught panics in the MongoDB TCP parser, allowing a remote un

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-18 发布INFO

Microsoft Security Advisory CVE-2026-35433 – .NET Elevation of Privilege Vulnerability

CVE-2026-35433

## Executive Summary: Microsoft is releasing this security advisory to provide information about a vulnerability in .N

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-18 发布INFO

Improper input validation in Microsoft Edge (Chromium-based) allows an unauthorized attacker to...

CVE-2026-45492

Improper input validation in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security featur

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-18 发布INFO

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

CVE-2026-45495

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

历史摘要 · 未重新核验 · GitHub Advisory