#cwe-252

共收录 41 条相关情报。

← 返回所有主题
漏洞预警2026-08-25 发布INFO

Nokogiri versions before 1.19.1 fail to check the return value from xmlC14NExecute in the canonicalize method, returning an empty string on failure instead of raising an excepti...

CVE-2026-79772

Nokogiri versions before 1.19.1 fail to check the return value from xmlC14NExecute in the canonicalize method, returning

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-20 发布INFO

tor before 0.4.9.9 was prone to a NULL write after free when sending a CONFLUX_SWITCH cell fails. The return value of relay_send_command_from_edge() was ignored, so a send fai...

CVE-2026-77641

tor before 0.4.9.9 was prone to a NULL write after free when sending a CONFLUX_SWITCH cell fails. The return value of re

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-18 发布INFO

MyBB is free and open source forum software. Prior to 1.8.40, the User CP Buddy/Ignore List component does not validate reciprocal buddy-list updates correctly. The usercp.php?a...

CVE-2026-47245

MyBB is free and open source forum software. Prior to 1.8.40, the User CP Buddy/Ignore List component does not validate

历史摘要 · 未重新核验 · NVD

安全公告2026-08-11 发布INFO

Microsoft Security Advisory CVE-2026-62909 – .NET Elevation of Privilege Vulnerability

CVE-2026-62909

## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-11 发布HIGH

Uncaught exception in .NET allows an authorized attacker to elevate privileges locally.

CVE-2026-62909

Uncaught exception in .NET allows an authorized attacker to elevate privileges locally.

来源摘录 · NVD

漏洞预警2026-07-20 发布INFO

HAProxy Community Edition 3.2.x through 3.3.x before 3.3.3 can enter a loop or crash because varint is mishandled. HAProxy Enterprise and ALOHA are also affected.

CVE-2026-26080

HAProxy Community Edition 3.2.x through 3.3.x before 3.3.3 can enter a loop or crash because varint is mishandled. HAPro

历史摘要 · 未重新核验 · NVD

安全公告2026-07-11 发布INFO

ImageMagick before 7.1.2-26 contains a heap use-after-free vulnerability caused by missing null...

CVE-2026-61857

ImageMagick before 7.1.2-26 contains a heap use-after-free vulnerability caused by missing null check when parsing XMP p

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-07-11 发布HIGH

ImageMagick before 7.1.2-26 contains a heap use-after-free vulnerability caused by missing null check when parsing XMP profiles. Attackers can craft malicious image files with s...

CVE-2026-61857

ImageMagick before 7.1.2-26 contains a heap use-after-free vulnerability caused by missing null check when parsing XMP p

来源摘录 · NVD

安全公告2026-07-11 发布INFO

ImageMagick before 7.1.2-26 Heap Use-After-Free via XMP

CVE-2026-61857

ImageMagick before 7.1.2-26 contains a heap use-after-free vulnerability caused by missing null check when parsing XMP p

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-07-06 发布INFO

chmod: recursive mode returns exit code 0 even when some files fail (last-file-wins)

CVE-2026-35339

In `Chmoder::chmod()` the recursive branch overwrites the running result instead of accumulating it, so the exit code re

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-06-23 发布INFO

When using the "tarfile" module with a file opened in "streaming mode" (mode="r|") the tarfile module did not properly handle EOF, making archive parsing take exponentially longer.

CVE-2026-11972

When using the "tarfile" module with a file opened in "streaming mode" (mode="r|") the tarfile module did not properly h

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-10 发布INFO

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-48 and 7.1.2-23, when using LZMA compression in the MIFF ...

CVE-2026-46521

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-20 发布INFO

nimiq-blockchain provides persistent block storage for Nimiq's Rust implementation. In versions 1.3.0 and below, a malicious network peer can crash any Nimiq full node by publis...

CVE-2026-40092

nimiq-blockchain provides persistent block storage for Nimiq's Rust implementation. In versions 1.3.0 and below, a malic

历史摘要 · 未重新核验 · NVD

安全公告2026-05-18 发布INFO

ImageMagick: Heap Buffer Over-Write in MIFF encoder when using LZMA compression

CVE-2026-46521

When using LZMA compression in the MIFF encoder an out of bounds write can occur due to a missing check.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-15 发布INFO

nimiq-keys: Unchecked Ed25519 signature length in TaggedPublicKey::verify causes remote node panic via DHT

CVE-2026-40092

### Impact A malicious network peer can crash any Nimiq full node by publishing a crafted Kademlia DHT record containing

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-15 发布INFO

An unchecked return value within the AMD Platform Management Framework (PMF) could allow an...

CVE-2025-29938

An unchecked return value within the AMD Platform Management Framework (PMF) could allow an attacker to write to an arbi

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-15 发布INFO

An unchecked return value within the AMD Platform Management Framework (PMF) could allow an...

CVE-2025-0028

An unchecked return value within the AMD Platform Management Framework (PMF) could allow an attacker to read or modify

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-15 发布INFO

An unchecked return value within the AMD Platform Management Framework (PMF) could allow an attacker to write to an arbitrary memory address resulting in denial of service or ar...

CVE-2025-29938

An unchecked return value within the AMD Platform Management Framework (PMF) could allow an attacker to write to an arbi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-15 发布INFO

An unchecked return value within the AMD Platform Management Framework (PMF) could allow an attacker to read or modify an arbitrary address potentially resulting in loss of con...

CVE-2025-0028

An unchecked return value within the AMD Platform Management Framework (PMF) could allow an attacker to read or modify

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-13 发布INFO

When a BIG-IP Advanced WAF or ASM security policy is configured on a virtual server, undisclosed requests can cause the bd process to terminate.  Note: Software versions wh...

CVE-2026-40060

When a BIG-IP Advanced WAF or ASM security policy is configured on a virtual server, undisclosed requests can cause the

历史摘要 · 未重新核验 · NVD