#cwe-347
共收录 355 条相关情报。
← 返回所有主题 漏洞预警2026-05-11 发布INFO
CVE-2026-41431
Zen is a firefox-based browser. Prior to 1.19.9b, Zen Browser ships a Mozilla Application Resource (MAR) updater (org.mo
历史摘要 · 未重新核验 · NVD
安全公告2026-05-08 发布INFO
CVE-2026-44309
## Summary
`gitsign verify` and `gitsign verify-tag` re-encode commit/tag objects through go-git's `EncodeWithoutSignat
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-05-08 发布INFO
CVE-2026-42193
Plunk is an open-source email platform built on top of AWS SES. Prior to version 0.9.0, the /webhooks/sns endpoint accep
历史摘要 · 未重新核验 · NVD
漏洞预警2026-05-08 发布INFO
CVE-2026-44497
ZEBRA is a Zcash node written entirely in Rust. Prior to zebrad version 4.4.0 and prior to zebra-script version 6.0.0, t
历史摘要 · 未重新核验 · NVD
安全公告2026-05-07 发布INFO
CVE-2026-44497
# CVE-2026-44497: Consensus Divergence in Transparent Sighash Hash-Type Handling due to Stale Buffer
## Summary
The fi
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-05-07 发布INFO
CVE-2026-42501
A malicious module proxy can exploit a flaw in the go command's validation of module checksums to bypass checksum databa
历史摘要 · 未重新核验 · NVD
漏洞预警2026-05-07 发布INFO
CVE-2026-41669
Admidio is an open-source user management solution. Prior to version 5.0.9, the Admidio SAML Identity Provider implement
历史摘要 · 未重新核验 · NVD
安全公告2026-05-06 发布INFO
## Summary
The AxonFlow SDK's `WebhookSubscription` (or equivalent) type did not expose the HMAC-SHA256 signing key ret
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-05-06 发布INFO
## Summary
The AxonFlow SDK's `WebhookSubscription` (or equivalent) type did not expose the HMAC-SHA256 signing key ret
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-05-06 发布INFO
## Summary
The AxonFlow SDK's `WebhookSubscription` (or equivalent) type did not expose the HMAC-SHA256 signing key ret
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-05-06 发布INFO
## Summary
The AxonFlow SDK's `WebhookSubscription` (or equivalent) type did not expose the HMAC-SHA256 signing key ret
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-05-03 发布INFO
CVE-2026-7689
A security flaw has been discovered in Dolibarr ERP CRM up to 23.0.2. This vulnerability affects the function dol_verify
历史摘要 · 未重新核验 · NVD
安全公告2026-04-29 发布INFO
CVE-2026-41669
## Summary
The Admidio SAML Identity Provider implementation discards the return value of its `validateSignature()` met
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-04-29 发布INFO
CVE-2026-33467
Improper Verification of Cryptographic Signature (CWE-347) in Elastic Package Registry could allow an attacker positione
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2006-09-05 发布CRITICAL
CVE-2006-4339
A flaw was found in OpenSSL. When configured to use an RSA key with exponent 3, OpenSSL improperly removes PKCS-1 paddin
来源摘录 · NVD