#cwe-327

共收录 101 条相关情报。

← 返回所有主题
漏洞预警2026-06-05 发布INFO

A weakness has been identified in thedotmack claude-mem up to 11.0.1. The affected element is the function computeObservationContentHash of the file src/services/sqlite/observat...

CVE-2026-11330

A weakness has been identified in thedotmack claude-mem up to 11.0.1. The affected element is the function computeObserv

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-05 发布INFO

A vulnerability has been found in onnx onnx-mlir up to 0.5.0.0. Affected by this issue is the function generate_hash_key of the file src/Runtime/python/torch_onnxmlir/src/torch_...

CVE-2026-11329

A vulnerability has been found in onnx onnx-mlir up to 0.5.0.0. Affected by this issue is the function generate_hash_key

历史摘要 · 未重新核验 · NVD

安全公告2026-06-04 发布INFO

A security flaw has been discovered in gradio-app gradio 6.14.0. This affects the function...

CVE-2026-10783

A security flaw has been discovered in gradio-app gradio 6.14.0. This affects the function save_audio_to_cache of the co

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-06-04 发布LOW

A security flaw has been discovered in gradio-app gradio 6.14.0. This affects the function save_audio_to_cache of the component Audio Cache Key Handler. Performing a manipulatio...

CVE-2026-10783

CVE-2026-10783 是一个影响 gradio-app 的 gradio 6.14.0 版本的安全漏洞。该漏洞位于 Audio Cache Key Handler 组件的 save_audio_to_cache 函数中,由于使用了弱

历史摘要 · 未重新核验 · NVD

安全公告2026-06-03 发布INFO

A vulnerability has been found in mlrun up to 1.12.0-rc3. This impacts the function mlrun.utils...

CVE-2026-10766

A vulnerability has been found in mlrun up to 1.12.0-rc3. This impacts the function mlrun.utils.helpers.calculate_datafr

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-06-03 发布INFO

A vulnerability has been found in mlrun up to 1.12.0-rc3. This impacts the function mlrun.utils.helpers.calculate_dataframe_hash of the file mlrun/utils/helpers.py of the compon...

CVE-2026-10766

A vulnerability has been found in mlrun up to 1.12.0-rc3. This impacts the function mlrun.utils.helpers.calculate_datafr

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-03 发布INFO

Mercusys AC12G (EU) V1 router with firmware AC12G(EU)_V1_200909 uses a static authentication nonce that does not change between requests from the same source IP. Combined with t...

CVE-2026-36609

Mercusys AC12G (EU) V1 router with firmware AC12G(EU)_V1_200909 uses a static authentication nonce that does not change

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-01 发布INFO

Sulu is an open-source PHP content management system based on the Symfony framework. Prior to versions 2.6.23 and 3.0.6, the password reset tokenand API key generation uses a we...

CVE-2026-45701

Sulu is an open-source PHP content management system based on the Symfony framework. Prior to versions 2.6.23 and 3.0.6,

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-29 发布INFO

Weak authentication between the Wireless Control Module (WCM) and the Engine Control Module (ECM) of the Indian Motorcycle Scout Bobber + Tech 2025 model year allows an adjacent...

CVE-2026-49323

Weak authentication between the Wireless Control Module (WCM) and the Engine Control Module (ECM) of the Indian Motorcyc

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-29 发布INFO

Weak authentication in the Wireless Control Module (WCM) of the Indian Motorcycle Scout Bobber + Tech 2025 model year allows an adjacent-network attacker with read access to the...

CVE-2026-49322

Weak authentication in the Wireless Control Module (WCM) of the Indian Motorcycle Scout Bobber + Tech 2025 model year al

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-21 发布INFO

Netatalk 1.5.0 through 4.2.2 uses a broken cryptographic algorithm in the DHCAST128 UAM, which allows a remote attacker to obtain authentication credentials or impersonate a use...

CVE-2026-44053

Netatalk 1.5.0 through 4.2.2 uses a broken cryptographic algorithm in the DHCAST128 UAM, which allows a remote attacker

历史摘要 · 未重新核验 · NVD

安全公告2026-05-18 发布INFO

Sulu: Weak Cryptographical usage for API Key generation and Reset Tokens

CVE-2026-45701

### Impact The password reset tokenand API key generation uses a weak cryptographical hash algorithm. ### Patches Fix

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-18 发布INFO

A flaw has been found in opensourcepos Open Source Point of Sale up to 3.4.2. Impacted is the...

CVE-2026-8803

A flaw has been found in opensourcepos Open Source Point of Sale up to 3.4.2. Impacted is the function Login of the file

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-18 发布INFO

A flaw has been found in opensourcepos Open Source Point of Sale up to 3.4.2. Impacted is the function Login of the file app/Models/Employee.php of the component Employee Login....

CVE-2026-8803

A flaw has been found in opensourcepos Open Source Point of Sale up to 3.4.2. Impacted is the function Login of the file

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-15 发布INFO

LibJWT is a C JSON Web Token Library. From 3.0.0 to 3.3.2, libjwt accepts an RSA JWK that does not contain an alg parameter as the verification key for an HS256/HS384/HS512 toke...

CVE-2026-44699

LibJWT is a C JSON Web Token Library. From 3.0.0 to 3.3.2, libjwt accepts an RSA JWK that does not contain an alg parame

历史摘要 · 未重新核验 · NVD

安全公告2026-05-08 发布INFO

This vulnerability, in the MAXHUB Pivot client application versions prior to v1.36.2, may allow...

CVE-2026-6411

This vulnerability, in the MAXHUB Pivot client application versions prior to v1.36.2, may allow an attacker to obtain e

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-07 发布INFO

This vulnerability, in the MAXHUB Pivot client application versions prior to v1.36.2, may allow an attacker to obtain encrypted tenant email addresses and related metadata fro...

CVE-2026-6411

This vulnerability, in the MAXHUB Pivot client application versions prior to v1.36.2, may allow an attacker to obtain e

历史摘要 · 未重新核验 · NVD

安全公告2026-05-06 发布INFO

In Paramiko through 4.0.0 before a448945, rsakey.py allows the SHA-1 algorithm.

CVE-2026-44405

In Paramiko through 4.0.0 before a448945, rsakey.py allows the SHA-1 algorithm.

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-06 发布LOW

In Paramiko through 4.0.0 before a448945, rsakey.py allows the SHA-1 algorithm.

CVE-2026-44405

Paramiko 是一个用于 SSHv2 协议的 Python 实现库。在版本 4.0.0 之前(修复提交 a448945 之前),其 rsakey.py 模块仍允许使用 SHA-1 签名算法进行 RSA 密钥认证。SHA-1 已被业界广泛

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-05 发布INFO

A flaw has been found in chatchat-space Langchain-Chatchat up to 0.3.1.3. This issue affects the function PIL.Image.tobytes of the file libs/chatchat-server/chatchat/webui_pages...

CVE-2026-7845

A flaw has been found in chatchat-space Langchain-Chatchat up to 0.3.1.3. This issue affects the function PIL.Image.toby

历史摘要 · 未重新核验 · NVD