#cwe-347
共收录 355 条相关情报。
← 返回所有主题 漏洞预警2026-09-23 发布MEDIUM
CVE-2026-91814
A signature validation vulnerability exists in Foxit PDF Editor/Reader’s handling of incrementally updated PDF documents
来源摘录 · NVD
安全公告2026-09-23 发布INFO
CVE-2026-18152
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to forge validly-signed messa
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-09-22 发布INFO
CVE-2026-18152
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to forge validly-signed messa
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-22 发布INFO
CVE-2026-85995
Notepad++ is a free and open-source source code editor. From 8.9.7 until 8.9.8, the Notepad++ updater and signature veri
历史摘要 · 未重新核验 · NVD
安全公告2026-09-22 发布INFO
CVE-2026-85995
Notepad++ is a free and open-source source code editor. From 8.9.7 until 8.9.8, the Notepad++ updater and signature veri
历史摘要 · 未重新核验 · OSV.dev
漏洞预警2026-09-22 发布INFO
CVE-2026-95503
A flaw was found in the Kerberos federation provider of Keycloak, an open-source identity and access management solution
历史摘要 · 未重新核验 · NVD
安全公告2026-09-19 发布INFO
CVE-2026-9832
The Payment Gateway of Stripe for WooCommerce plugin for WordPress is vulnerable to Improper Verification of Cryptograph
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-09-19 发布INFO
CVE-2026-9832
The Payment Gateway of Stripe for WooCommerce plugin for WordPress is vulnerable to Improper Verification of Cryptograph
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-18 发布INFO
CVE-2026-59163
Mnemosyne is a memory layer for artificial intelligence agents. Prior to v3.10.1, the auth check in mnemosyne/core/sync_
历史摘要 · 未重新核验 · NVD
安全公告2026-09-18 发布INFO
CVE-2026-59163
Mnemosyne is a memory layer for artificial intelligence agents. Prior to v3.10.1, the auth check in mnemosyne/core/sync_
历史摘要 · 未重新核验 · OSV.dev
安全公告2026-09-18 发布INFO
CVE-2026-59163
### Summary
The Mnemosyne sync server's authentication check decoded JWT bearer tokens but never verified their HMAC-SH
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-09-18 发布INFO
CVE-2026-93657
hickory-resolver versions before 0.26.2 fail to propagate bogus DNSSEC proof states through the Resolver::lookup() and R
历史摘要 · 未重新核验 · NVD
安全公告2026-09-18 发布INFO
CVE-2026-93657
hickory-resolver versions before 0.26.2 fail to propagate bogus DNSSEC proof states through the Resolver::lookup() and R
历史摘要 · 未重新核验 · OSV.dev
漏洞预警2026-09-18 发布INFO
CVE-2026-28199
An authenticated user with access to the NetBackup Flex OS management
shell could read arbitrary files from the underly
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-18 发布INFO
CVE-2026-28198
An authenticated, low-privileged user with access to the NetBackup Flex
OS management shell could bypass the cryptograp
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-17 发布INFO
CVE-2026-54581
mport is the MidnightBSD Package Manager. Prior to 2.7.8, the mport_fetch_bootstrap_index() function in libmport/fetch.c
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-17 发布INFO
CVE-2026-86038
libp2p is a JavaScript implementation of the libp2p networking stack. From 15.0.0 until 16.0.5, @libp2p/gossipsub uses t
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-17 发布INFO
CVE-2026-78223
Improper Verification of Cryptographic Signature vulnerability in team-alembic AshAuthentication allows a caller of the
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-16 发布INFO
CVE-2026-86585
The lack of signature verification of firmware update packages in VEO and VEO-XS Wi-Fi monitors, in versions prior to 01
历史摘要 · 未重新核验 · NVD
安全公告2026-09-16 发布INFO
CVE-2026-86109
The VeloCloud Edge software update workflow may accept update bundles without properly validating their signatures becau
历史摘要 · 未重新核验 · GitHub Advisory