#cwe-354
共收录 82 条相关情报。
← 返回所有主题 漏洞预警2026-09-17 发布INFO
CVE-2026-54580
mport is the MidnightBSD Package Manager. Prior to 2.7.8, libmport/util.c did not make every truncated, corrupt, or fail
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-17 发布INFO
CVE-2026-54578
mport is the MidnightBSD Package Manager. Prior to 2.7.8, mport_verify_package() in libmport/verify.c could continue aft
历史摘要 · 未重新核验 · NVD
安全公告2026-09-16 发布INFO
CVE-2026-73459
On affected platforms running Arista EOS with IS-IS configured, an unauthenticated attacker who can inject a specially c
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-09-16 发布INFO
CVE-2026-76852
Netcore NR268 firmware version 1.7.121109 has an improper integrity verification flaw in mtd_write allowing forged firmw
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-09-16 发布INFO
CVE-2026-73459
On affected platforms running Arista EOS with IS-IS configured, an unauthenticated attacker who can inject a specially c
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-15 发布INFO
CVE-2026-76852
Netcore NR268 firmware version 1.7.121109 has an improper integrity verification flaw in mtd_write allowing forged firmw
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-11 发布INFO
CVE-2026-54174
melange allows users to build apk packages using declarative pipelines. Apko prior to version 1.2.9, corresponding to me
历史摘要 · 未重新核验 · NVD
安全公告2026-09-02 发布INFO
CVE-2026-20354
Multiple vulnerabilities in the Secure/Multipurpose Internet Mail Extensions (S/MIME) decryption functionality of Cisco
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-09-02 发布INFO
CVE-2026-20354
Multiple vulnerabilities in the Secure/Multipurpose Internet Mail Extensions (S/MIME) decryption functionality of Cisco
历史摘要 · 未重新核验 · NVD
漏洞预警2026-08-30 发布INFO
CVE-2026-82549
A vulnerability was identified in Linux Foundation Magma 1.9.0. This affects an unknown function of the component Securi
历史摘要 · 未重新核验 · NVD
安全公告2026-08-30 发布INFO
CVE-2026-82549
A vulnerability was identified in Linux Foundation Magma 1.9.0. This affects an unknown function of the component Securi
历史摘要 · 未重新核验 · OSV.dev
漏洞预警2026-08-25 发布INFO
CVE-2026-75803
Issue summary: ChaCha20-Poly1305 and AES-OCB decryption with an empty
ciphertext can report success without verifying th
历史摘要 · 未重新核验 · NVD
漏洞预警2026-08-18 发布INFO
CVE-2026-75625
Kraken agents fail to verify peer-to-peer downloaded blobs against their requested SHA-256 digest before committing to t
历史摘要 · 未重新核验 · NVD
漏洞预警2026-08-03 发布INFO
CVE-2026-12817
In Bouncy Castle for Java before 1.85, OpenPGP AEAD decryption skips final tag on chunk-aligned data. This issue also af
历史摘要 · 未重新核验 · NVD
漏洞预警2026-08-03 发布INFO
CVE-2026-12816
In Bouncy Castle for Java before 1.85, IESEngine stream-mode MAC forgery via length-dependent KDF split. This issue also
历史摘要 · 未重新核验 · NVD
漏洞预警2026-08-03 发布INFO
CVE-2026-12803
In Bouncy Castle for Java before 1.85, KCCMBlockCipher MAC does not bind nonce when AAD is absent (cross-nonce AEAD forg
历史摘要 · 未重新核验 · NVD
漏洞预警2026-08-03 发布INFO
CVE-2026-12802
In Bouncy Castle for Java before 1.85, CMS AuthEnvelopedData fails to enforce tag-length on decryption. This issue also
历史摘要 · 未重新核验 · NVD
安全公告2026-08-03 发布INFO
CVE-2026-58061
In Bouncy Castle for Java before 1.85, CCM-family modes write plaintext to caller buffer before tag check. This issue al
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-08-03 发布INFO
CVE-2026-59642
In Bouncy Castle for Java before 1.85, CMS AuthenticatedData content not bound to MAC when authAttrs present. This issue
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-08-03 发布INFO
CVE-2026-58061
In Bouncy Castle for Java before 1.85, CCM-family modes write plaintext to caller buffer before tag check. This issue al
历史摘要 · 未重新核验 · NVD