#cwe-20

共收录 1721 条相关情报。

← 返回所有主题
漏洞预警2026-10-20 发布MEDIUM

An input validation issue was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoi...

CVE-2026-86959

An input validation issue was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7,

来源摘录 · NVD

漏洞预警2026-10-20 发布MEDIUM

An input validation issue was addressed with improved input validation. This issue is fixed in Xcode 27. Parsing a maliciously crafted binary may lead to unexpected app terminat...

CVE-2026-86875

An input validation issue was addressed with improved input validation. This issue is fixed in Xcode 27. Parsing a malic

来源摘录 · NVD

漏洞预警2026-10-20 发布INFO

An integer underflow was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An attacker with control of...

CVE-2026-86871

An integer underflow was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27, macOS Se

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An attacker in physica...

CVE-2026-84547

A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27, mac

历史摘要 · 未重新核验 · NVD

安全公告2026-10-20 发布INFO

The html_to_markdown expansion module in MISP Modules contains a server-side request forgery ...

CVE-2026-112991

The html_to_markdown expansion module in MISP Modules contains a server-side request forgery (SSRF) vulnerability in its

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-19 发布INFO

The html_to_markdown expansion module in MISP Modules contains a server-side request forgery (SSRF) vulnerability in its is_safe_url() URL validation function. The BLOCKED_RANGE...

CVE-2026-112991

The html_to_markdown expansion module in MISP Modules contains a server-side request forgery (SSRF) vulnerability in its

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-19 发布MEDIUM

Potential JDBC source configuration validation vulnerability in Apache Kylin. The impact is minor, unless the kylin backend services are open to public network. This issue af...

CVE-2026-108780

Potential JDBC source configuration validation vulnerability in Apache Kylin. The impact is minor, unless the kylin back

来源摘录 · NVD

安全公告2026-10-18 发布INFO

A vulnerability was identified in makeplane plane up to 1.4.2. Impacted is an unknown function of...

CVE-2026-111869

A vulnerability was identified in makeplane plane up to 1.4.2. Impacted is an unknown function of the component API Endp

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-18 发布INFO

A vulnerability was determined in datastax pulsar-jms up to 9.0.3. This issue affects the...

CVE-2026-111868

A vulnerability was determined in datastax pulsar-jms up to 9.0.3. This issue affects the function decode of the file pu

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-16 发布INFO

Claude Agent SDK: Argument Injection via resume Option Allows Arbitrary Command Execution

CVE-2026-96620

The Claude Agent SDK for Python passed the `resume` option to the Claude CLI without validation, allowing a value beginn

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-16 发布INFO

FreeRDP from 3.30.0 before 3.32.0 contains a resource exhaustion vulnerability in the rdpecam...

CVE-2026-111374

FreeRDP from 3.30.0 before 3.32.0 contains a resource exhaustion vulnerability in the rdpecam client that lets malicious

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-16 发布INFO

Improper input validation in Desktop in Google Chrome prior to 155.0.8059.84 allowed a remote...

CVE-2026-110916

Improper input validation in Desktop in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to potentially ex

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-15 发布INFO

kin-openapi: Unauthenticated panic (DoS) in openapi3filter legacy router via non-canonical/unsupported HTTP method on a static path

CVE-2026-100347

## Summary The `openapi3filter.ValidationHandler` (the exported, documented request-validation middleware) hard-wires th

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-15 发布INFO

A vulnerability in HPE NonStop CIPSAM allows an out-of-bounds write that can corrupt buffer data.

CVE-2026-76660

A vulnerability in HPE NonStop CIPSAM allows an out-of-bounds write that can corrupt buffer data.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-15 发布INFO

A vulnerability in HPE NonStop QIOMON allows an out-of-bounds write that can corrupt buffer data.

CVE-2026-76661

A vulnerability in HPE NonStop QIOMON allows an out-of-bounds write that can corrupt buffer data.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-15 发布INFO

Nodemailer from 3.0.0 before 10.0.13 contains an improper input validation vulnerability in its...

CVE-2026-110870

Nodemailer from 3.0.0 before 10.0.13 contains an improper input validation vulnerability in its address parser that fail

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-14 发布HIGH

Mongoose is an embedded web server and network library. Prior to 7.23, the built-in TCP/IP stack enabled by MG_ENABLE_TCPIP in src/net_builtin.c does not reject a TCP option who...

CVE-2026-73261

Mongoose is an embedded web server and network library. Prior to 7.23, the built-in TCP/IP stack enabled by MG_ENABLE_TC

来源摘录 · NVD

安全公告2026-10-14 发布INFO

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could...

CVE-2026-48378

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security featur

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-14 发布INFO

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could...

CVE-2026-48377

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security featur

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-14 发布INFO

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could...

CVE-2026-104345

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security featur

历史摘要 · 未重新核验 · GitHub Advisory