#cwe-362

共收录 515 条相关情报。

← 返回所有主题
漏洞预警2026-07-17 发布INFO

IBM Cognos Analytics 12.1.3 GA Version with build number through 12.1.3-2606251736 could allow an attacker to obtain incorrect report summary results or cause report-processing ...

CVE-2026-15995

IBM Cognos Analytics 12.1.3 GA Version with build number through 12.1.3-2606251736 could allow an attacker to obtain inc

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-17 发布INFO

A race condition between the vncproxy and vncwebsocket API calls in Proxmox Virtual Environment (PVE) 9.x pve-manager before 9.1.9 and 8.x before 8.4.19; qemu-server 9.x before ...

CVE-2026-51082

A race condition between the vncproxy and vncwebsocket API calls in Proxmox Virtual Environment (PVE) 9.x pve-manager be

历史摘要 · 未重新核验 · NVD

安全公告2026-07-17 发布INFO

Concurrent execution using shared resource with improper synchronization ('race condition') in...

CVE-2026-58598

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Backup Engine all

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-07-16 发布INFO

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Backup Engine allows an authorized attacker to elevate privileges locally.

CVE-2026-58598

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Backup Engine all

历史摘要 · 未重新核验 · NVD

安全公告2026-07-16 发布INFO

Envoy Gateway: Wasm cache ServeHTTP reads mappingPath2Cache without lock

CVE-2026-53715

Vulnerability report without repro case. Repro case may be added later after harness is complete. **Preconditions (4):*

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-15 发布INFO

ViewComponent: Reused Component Instances Retain Stale Render Context

CVE-2026-54497

# Reused Component Instances Retain Stale Render Context ## Summary `ViewComponent::Base` instances retain multiple re

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-07-15 发布INFO

Better Auth is an authentication and authorization library for TypeScript. From 1.6.0 until 1.6.11, the @better-auth/oauth-provider POST /oauth2/token endpoint for the authoriza...

CVE-2026-53518

Better Auth is an authentication and authorization library for TypeScript. From 1.6.0 until 1.6.11, the @better-auth/oau

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-15 发布INFO

Better Auth is an authentication and authorization library for TypeScript. From 1.4.8-beta.7 until 1.6.11, the @better-auth/oauth-provider POST /oauth2/token endpoint on the ref...

CVE-2026-53517

Better Auth is an authentication and authorization library for TypeScript. From 1.4.8-beta.7 until 1.6.11, the @better-a

历史摘要 · 未重新核验 · NVD

安全公告2026-07-15 发布INFO

Better Auth OAuth Provider: Refresh Token Rotation Race Condition Allows Concurrent Replay and Token Family Forking

CVE-2026-53517

Better Auth is an authentication and authorization library for TypeScript. From 1.4.8-beta.7 until 1.6.11, the @better-a

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-07-15 发布INFO

Better Auth OAuth Provider: Race Condition in Authorization Code Exchange Enables Multi-Use Code Redemption

CVE-2026-53518

Better Auth is an authentication and authorization library for TypeScript. From 1.6.0 until 1.6.11, the @better-auth/oau

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-07-15 发布INFO

Flameshot is powerful yet simple to use screenshot software. Prior to 14.0.0, the Open With feature wrote screenshots to a predictable temporary path and followed symlinks, crea...

CVE-2026-62294

Flameshot is powerful yet simple to use screenshot software. Prior to 14.0.0, the Open With feature wrote screenshots to

历史摘要 · 未重新核验 · NVD

安全公告2026-07-15 发布INFO

Flameshot: OCTOU symlink attack via predictable /tmp path in Flameshot "Open With"

CVE-2026-62294

Flameshot is powerful yet simple to use screenshot software. Prior to 14.0.0, the Open With feature wrote screenshots to

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-07-14 发布INFO

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Wireless Networking allows an authorized attacker to elevate privileges lo...

CVE-2026-58628

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Wireless Networki

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-14 发布INFO

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SMB allows an authorized attacker to elevate privileges over a network.

CVE-2026-58531

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SMB allows an aut

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-14 发布INFO

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an authorized attacker to elevate privileges locally.

CVE-2026-58527

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-14 发布INFO

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Network File System allows an unauthorized attacker to execute code over a...

CVE-2026-56649

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Network File Syst

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-14 发布INFO

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an authorized attacker to elevate privileges locally.

CVE-2026-54125

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-14 发布INFO

Use after free in Windows Clipboard Server allows an authorized attacker to elevate privileges locally.

CVE-2026-50689

Use after free in Windows Clipboard Server allows an authorized attacker to elevate privileges locally.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-14 发布INFO

Use after free in Windows Media allows an authorized attacker to elevate privileges locally.

CVE-2026-50677

Use after free in Windows Media allows an authorized attacker to elevate privileges locally.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-14 发布INFO

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Media allows an authorized attacker to elevate privileges locally.

CVE-2026-50676

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Media allows an a

历史摘要 · 未重新核验 · NVD