#cwe-354

共收录 82 条相关情报。

← 返回所有主题
漏洞预警2026-09-17 发布INFO

mport is the MidnightBSD Package Manager. Prior to 2.7.8, libmport/util.c did not make every truncated, corrupt, or failed zstd stream fatal in mport_decompress_zstd(), and libm...

CVE-2026-54580

mport is the MidnightBSD Package Manager. Prior to 2.7.8, libmport/util.c did not make every truncated, corrupt, or fail

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-17 发布INFO

mport is the MidnightBSD Package Manager. Prior to 2.7.8, mport_verify_package() in libmport/verify.c could continue after MD5File() or SHA256_File() failed and compare an expec...

CVE-2026-54578

mport is the MidnightBSD Package Manager. Prior to 2.7.8, mport_verify_package() in libmport/verify.c could continue aft

历史摘要 · 未重新核验 · NVD

安全公告2026-09-16 发布INFO

On affected platforms running Arista EOS with IS-IS configured, an unauthenticated attacker who...

CVE-2026-73459

On affected platforms running Arista EOS with IS-IS configured, an unauthenticated attacker who can inject a specially c

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-16 发布INFO

Netcore NR268 firmware version 1.7.121109 has an improper integrity verification flaw in...

CVE-2026-76852

Netcore NR268 firmware version 1.7.121109 has an improper integrity verification flaw in mtd_write allowing forged firmw

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-16 发布INFO

On affected platforms running Arista EOS with IS-IS configured, an unauthenticated attacker who can inject a specially crafted IS-IS LSP PDU can cause the legitimate LSP to be u...

CVE-2026-73459

On affected platforms running Arista EOS with IS-IS configured, an unauthenticated attacker who can inject a specially c

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

Netcore NR268 firmware version 1.7.121109 has an improper integrity verification flaw in mtd_write allowing forged firmware authenticity checks. Attackers can exploit put_file.c...

CVE-2026-76852

Netcore NR268 firmware version 1.7.121109 has an improper integrity verification flaw in mtd_write allowing forged firmw

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-11 发布INFO

melange allows users to build apk packages using declarative pipelines. Apko prior to version 1.2.9, corresponding to melange prior to version 0.50.4, verified the control secti...

CVE-2026-54174

melange allows users to build apk packages using declarative pipelines. Apko prior to version 1.2.9, corresponding to me

历史摘要 · 未重新核验 · NVD

安全公告2026-09-02 发布INFO

Multiple vulnerabilities in the Secure/Multipurpose Internet Mail Extensions (S/MIME) decryption...

CVE-2026-20354

Multiple vulnerabilities in the Secure/Multipurpose Internet Mail Extensions (S/MIME) decryption functionality of Cisco

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-02 发布INFO

Multiple vulnerabilities in the Secure/Multipurpose Internet Mail Extensions (S/MIME) decryption functionality of Cisco Secure Email could allow an unauthenticated, remote attac...

CVE-2026-20354

Multiple vulnerabilities in the Secure/Multipurpose Internet Mail Extensions (S/MIME) decryption functionality of Cisco

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-30 发布INFO

A vulnerability was identified in Linux Foundation Magma 1.9.0. This affects an unknown function of the component SecurityModeComplete Handler. Such manipulation leads to improp...

CVE-2026-82549

A vulnerability was identified in Linux Foundation Magma 1.9.0. This affects an unknown function of the component Securi

历史摘要 · 未重新核验 · NVD

安全公告2026-08-30 发布INFO

Linux Foundation Magma SecurityModeComplete integrity check

CVE-2026-82549

A vulnerability was identified in Linux Foundation Magma 1.9.0. This affects an unknown function of the component Securi

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-08-25 发布INFO

Issue summary: ChaCha20-Poly1305 and AES-OCB decryption with an empty ciphertext can report success without verifying the supplied authentication tag when the operation is final...

CVE-2026-75803

Issue summary: ChaCha20-Poly1305 and AES-OCB decryption with an empty ciphertext can report success without verifying th

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-18 发布INFO

Kraken agents fail to verify peer-to-peer downloaded blobs against their requested SHA-256 digest before committing to the content-addressable cache, relying only on CRC32 check...

CVE-2026-75625

Kraken agents fail to verify peer-to-peer downloaded blobs against their requested SHA-256 digest before committing to t

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-03 发布INFO

In Bouncy Castle for Java before 1.85, OpenPGP AEAD decryption skips final tag on chunk-aligned data. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Boun...

CVE-2026-12817

In Bouncy Castle for Java before 1.85, OpenPGP AEAD decryption skips final tag on chunk-aligned data. This issue also af

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-03 发布INFO

In Bouncy Castle for Java before 1.85, IESEngine stream-mode MAC forgery via length-dependent KDF split. This issue also affects Bouncy Castle for Java LTS before 2.73.12.

CVE-2026-12816

In Bouncy Castle for Java before 1.85, IESEngine stream-mode MAC forgery via length-dependent KDF split. This issue also

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-03 发布INFO

In Bouncy Castle for Java before 1.85, KCCMBlockCipher MAC does not bind nonce when AAD is absent (cross-nonce AEAD forgery). This issue also affects Bouncy Castle for Java LTS ...

CVE-2026-12803

In Bouncy Castle for Java before 1.85, KCCMBlockCipher MAC does not bind nonce when AAD is absent (cross-nonce AEAD forg

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-03 发布INFO

In Bouncy Castle for Java before 1.85, CMS AuthEnvelopedData fails to enforce tag-length on decryption. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bo...

CVE-2026-12802

In Bouncy Castle for Java before 1.85, CMS AuthEnvelopedData fails to enforce tag-length on decryption. This issue also

历史摘要 · 未重新核验 · NVD

安全公告2026-08-03 发布INFO

In Bouncy Castle for Java before 1.85, CCM-family modes write plaintext to caller buffer before...

CVE-2026-58061

In Bouncy Castle for Java before 1.85, CCM-family modes write plaintext to caller buffer before tag check. This issue al

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-03 发布INFO

In Bouncy Castle for Java before 1.85, CMS AuthenticatedData content not bound to MAC when...

CVE-2026-59642

In Bouncy Castle for Java before 1.85, CMS AuthenticatedData content not bound to MAC when authAttrs present. This issue

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-03 发布INFO

In Bouncy Castle for Java before 1.85, CCM-family modes write plaintext to caller buffer before tag check. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and...

CVE-2026-58061

In Bouncy Castle for Java before 1.85, CCM-family modes write plaintext to caller buffer before tag check. This issue al

历史摘要 · 未重新核验 · NVD