#cwe-20
共收录 1738 条相关情报。
← 返回所有主题 漏洞预警2026-05-22 发布INFO
CVE-2026-34910
A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi OS
历史摘要 · 未重新核验 · NVD
漏洞预警2026-05-22 发布INFO
CVE-2026-33000
A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerabilit
历史摘要 · 未重新核验 · NVD
安全公告2026-05-21 发布INFO
CVE-2026-46679
### Summary
Three cooperating omissions in `@libp2p/gossipsub` allow an unauthenticated single peer to exhaust the Node.
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-05-21 发布INFO
CVE-2026-9157
Improper input validation, Unrestricted upload of file with dangerous type vulnerability in Gmission Web Fax allows Remo
历史摘要 · 未重新核验 · NVD
安全公告2026-05-20 发布INFO
CVE-2026-9124
Insufficient validation of untrusted input in Input in Google Chrome on prior to 148.0.7778.179 allowed a remote attacke
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-05-20 发布INFO
CVE-2026-9124
Insufficient validation of untrusted input in Input in Google Chrome on prior to 148.0.7778.179 allowed a remote attacke
历史摘要 · 未重新核验 · NVD
漏洞预警2026-05-20 发布INFO
CVE-2026-39850
Yii 2 is a PHP application framework. Versions 2.0.54 and prior contain flawed logic in the core view rendering method V
历史摘要 · 未重新核验 · NVD
安全公告2026-05-20 发布INFO
CVE-2026-20240
In Splunk Enterprise versions below 10.2.2, 10.0.5, 9.4.11, and 9.3.12, and Splunk Cloud Platform versions below 10.4.26
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-05-20 发布INFO
CVE-2026-20240
In Splunk Enterprise versions below 10.2.2, 10.0.5, 9.4.11, and 9.3.12, and Splunk Cloud Platform versions below 10.4.26
历史摘要 · 未重新核验 · NVD
安全公告2026-05-20 发布INFO
CVE-2026-5946
Multiple flaws have been identified in `named` related to the handling of DNS messages whose CLASS is not Internet (`IN`
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-05-20 发布INFO
CVE-2026-5946
Multiple flaws have been identified in `named` related to the handling of DNS messages whose CLASS is not Internet (`IN`
历史摘要 · 未重新核验 · NVD
安全公告2026-05-19 发布INFO
CVE-2026-45783
### Summary
An unauthenticated remote peer can exhaust the disk storage of any `@libp2p/kad-dht` node running in server
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-05-19 发布INFO
CVE-2026-8959
Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component. This vulnerability was fixed in Fire
历史摘要 · 未重新核验 · NVD
漏洞预警2026-05-19 发布INFO
CVE-2026-31378
Improper Input Validation vulnerability in Apache OFBiz.
This issue affects Apache OFBiz: before 24.09.06.
Users are r
历史摘要 · 未重新核验 · NVD
漏洞预警2026-05-19 发布INFO
CVE-2026-28751
in OpenHarmony v6.0 and prior versions allow a local attacker cause DOS.
历史摘要 · 未重新核验 · NVD
漏洞预警2026-05-18 发布INFO
CVE-2026-27891
FacturaScripts is an open source accounting and invoicing software. Versions 2026 and below contain a critical vulnerabi
历史摘要 · 未重新核验 · NVD
安全公告2026-05-18 发布INFO
CVE-2026-45685
### Summary
Malformed MongoDB wire messages can trigger uncaught panics in the MongoDB TCP parser, allowing a remote un
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-05-18 发布INFO
CVE-2026-35433
## Executive Summary:
Microsoft is releasing this security advisory to provide information about a vulnerability in .N
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-05-18 发布INFO
CVE-2026-45492
Improper input validation in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security featur
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-05-18 发布INFO
CVE-2026-45495
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
历史摘要 · 未重新核验 · GitHub Advisory