#cwe-20

共收录 1721 条相关情报。

← 返回所有主题
安全公告2026-10-14 发布INFO

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could...

CVE-2026-102501

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security featur

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-14 发布INFO

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could...

CVE-2026-100125

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security featur

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-14 发布INFO

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could...

CVE-2026-100124

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security featur

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-14 发布INFO

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could...

CVE-2026-100120

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security featur

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-13 发布MEDIUM

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally.

CVE-2026-88089

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally.

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Out-of-bounds read in Windows Bluetooth Port Driver allows an unauthorized attacker to execute code over an adjacent network.

CVE-2026-70126

Out-of-bounds read in Windows Bluetooth Port Driver allows an unauthorized attacker to execute code over an adjacent net

来源摘录 · NVD

漏洞预警2026-10-13 发布INFO

Improper input validation in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.

CVE-2026-105719

Improper input validation in Microsoft Office SharePoint allows an authorized attacker to disclose information over a ne

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

CVE-2026-105718

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

CVE-2026-105717

Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

CVE-2026-102867

Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

ConnectBot SSH Client Library is written in Kotlin with Kaitai Struct and KStateMachine. Prior to 0.3.1, the SSH protocol parser trusts attacker-controlled inner byte lengths an...

CVE-2026-54700

ConnectBot SSH Client Library is written in Kotlin with Kaitai Struct and KStateMachine. Prior to 0.3.1, the SSH protoco

历史摘要 · 未重新核验 · NVD

安全公告2026-10-13 发布INFO

ConnectBot SSH: Unbounded SSH field lengths can cause excessive memory allocation

CVE-2026-54700

ConnectBot SSH Client Library is written in Kotlin with Kaitai Struct and KStateMachine. Prior to 0.3.1, the SSH protoco

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-10-13 发布INFO

Insufficient input validation vulnerability in time server (NTP) setting of the listed NETGEAR models allows an attacker who is connected to the router’s local network and has t...

CVE-2026-9218

Insufficient input validation vulnerability in time server (NTP) setting of the listed NETGEAR models allows an attacker

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

An insufficient input validation vulnerability in the website blocking feature (Block Sites) of the listed NETGEAR router models allows a network-adjacent attacker having networ...

CVE-2026-11732

An insufficient input validation vulnerability in the website blocking feature (Block Sites) of the listed NETGEAR route

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

Insufficient input validation vulnerability in the LAN Setup feature of NETGEAR R7300 router allows authenticated administrators connected to the local network to perform unauth...

CVE-2026-107918

Insufficient input validation vulnerability in the LAN Setup feature of NETGEAR R7300 router allows authenticated admini

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

Insufficient input validation vulnerability in the PPPoE Setup feature of NETGEAR R7300 router allows authenticated administrators connected to the local network to perform unau...

CVE-2026-107917

Insufficient input validation vulnerability in the PPPoE Setup feature of NETGEAR R7300 router allows authenticated admi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布MEDIUM

Mitigation bypass in the File Handling component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

CVE-2026-109763

Mitigation bypass in the File Handling component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunde

来源摘录 · NVD

漏洞预警2026-10-13 发布INFO

Zohocorp ManageEngine Malware Protection Plus versions before 1.0.64.12 are affected by insufficient driver signature validation in MEARWService.

CVE-2026-14308

Zohocorp ManageEngine Malware Protection Plus versions before 1.0.64.12 are affected by insufficient driver signature va

历史摘要 · 未重新核验 · NVD

安全公告2026-10-13 发布INFO

A weakness has been identified in TensorLayer up to 2.2.4. This affects the function...

CVE-2026-108958

A weakness has been identified in TensorLayer up to 2.2.4. This affects the function load_hdf5_graph of the file tensorl

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-13 发布INFO

A flaw has been found in yoshitomo-matsubara torchdistill up to 1.1.5. This affects the function...

CVE-2026-108947

A flaw has been found in yoshitomo-matsubara torchdistill up to 1.1.5. This affects the function load_ckpt of the file t

历史摘要 · 未重新核验 · GitHub Advisory