#cwe-362

共收录 515 条相关情报。

← 返回所有主题
漏洞预警2026-06-09 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: use list_del_rcu for netlink hooks nft_netdev_unregister_hooks and __nft_unregister_f...

CVE-2026-46324

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: use list_del_rcu for netlink

来源摘录 · NVD

漏洞预警2026-06-09 发布INFO

Arm C1-Ultra, C1-Premium, Neoverse V3 & V3AE, Neoverse V2, Neoverse V1, Neoverse-N2, Neoverse-N1, Cortex-X925, Cortex-X4, Cortex-X3, Cortex-X2, Cortex-X1 & X1C, Cortex-A710, Cor...

CVE-2025-10263

Arm C1-Ultra, C1-Premium, Neoverse V3 & V3AE, Neoverse V2, Neoverse V1, Neoverse-N2, Neoverse-N1, Cortex-X925, Cortex-X4

历史摘要 · 未重新核验 · NVD

安全公告2026-06-09 发布INFO

Race in Network in Google Chrome on Mac prior to 149.0.7827.103 allowed a remote attacker who had...

CVE-2026-11677

Race in Network in Google Chrome on Mac prior to 149.0.7827.103 allowed a remote attacker who had compromised the networ

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-06-09 发布INFO

Race in Network in Google Chrome on Mac prior to 149.0.7827.103 allowed a remote attacker who had compromised the network process to potentially perform a sandbox escape via a c...

CVE-2026-11677

Race in Network in Google Chrome on Mac prior to 149.0.7827.103 allowed a remote attacker who had compromised the networ

历史摘要 · 未重新核验 · NVD

安全公告2026-06-05 发布INFO

NocoDB: OAuth Authorization Code Race Condition

CVE-2026-47386

### Summary Two concurrent token-exchange requests using the same OAuth authorization code could each mint a distinct va

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-06-05 发布INFO

Inappropriate implementation in Permissions in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium securi...

CVE-2026-11253

Inappropriate implementation in Permissions in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cr

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-04 发布INFO

Race in Geolocation in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: ...

CVE-2026-11145

Race in Geolocation in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin da

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-04 发布INFO

Race in Codecs in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via ...

CVE-2026-10940

Race in Codecs in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker who had compromised the rend

历史摘要 · 未重新核验 · NVD

安全公告2026-06-02 发布INFO

A security flaw has been discovered in Open5GS up to 2.7.6. The impacted element is the function...

CVE-2026-10565

A security flaw has been discovered in Open5GS up to 2.7.6. The impacted element is the function gmm_state_security_mode

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-06-02 发布INFO

A security flaw has been discovered in Open5GS up to 2.7.6. The impacted element is the function gmm_state_security_mode of the file src/amf/gmm-sm.c of the component NGAP Hando...

CVE-2026-10565

A security flaw has been discovered in Open5GS up to 2.7.6. The impacted element is the function gmm_state_security_mode

历史摘要 · 未重新核验 · NVD

安全公告2026-05-30 发布INFO

A race condition in the shared Extreme Platform ONE IAM Gateway API-key authentication path could...

CVE-2026-9831

A race condition in the shared Extreme Platform ONE IAM Gateway API-key authentication path could, under specific high-c

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-29 发布MEDIUM

A race condition in the shared Extreme Platform ONE IAM Gateway API-key authentication path could, under specific high-concurrency traffic conditions, intermittently allow reque...

CVE-2026-9831

CVE-2026-9831 是 Extreme Networks 旗下共享平台 Extreme Platform ONE 中 IAM 网关 API 密钥认证路径存在的一个竞态条件漏洞。在高并发流量条件下,该竞态条件可能间歇性地导致使用 /I

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-29 发布INFO

Shopper is a Headless e-commerce Admin Panel. Prior to 2.8.0, CreateOrderFromCartAction::execute previously created the Order row before checking and incrementing the discount's...

CVE-2026-47741

Shopper is a Headless e-commerce Admin Panel. Prior to 2.8.0, CreateOrderFromCartAction::execute previously created the

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-28 发布INFO

Race in WebRTC in Google Chrome on Windows prior to 148.0.7778.216 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)

CVE-2026-9959

Race in WebRTC in Google Chrome on Windows prior to 148.0.7778.216 allowed a remote attacker to leak cross-origin data v

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-28 发布INFO

Race in WebAudio in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severi...

CVE-2026-10006

Race in WebAudio in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a s

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-28 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: oss: Fix data race at accessing runtime.oss.trigger Currently the runtime.oss.trigger field may ...

CVE-2026-46157

In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: oss: Fix data race at accessing runtime.

来源摘录 · NVD

漏洞预警2026-05-27 发布INFO

pam_usb provides hardware authentication for Linux using ordinary removable media. Prior to 0.9.0, pam_usb is a PAM module loaded into the host process (sudo, login, GDM, GNOME ...

CVE-2026-47270

pam_usb provides hardware authentication for Linux using ordinary removable media. Prior to 0.9.0, pam_usb is a PAM modu

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-27 发布INFO

pam_usb provides hardware authentication for Linux using ordinary removable media. Prior to 0.9.1, src/log.c contains a process-wide static pointer that is written on every PAM ...

CVE-2026-48066

pam_usb provides hardware authentication for Linux using ordinary removable media. Prior to 0.9.1, src/log.c contains a

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-27 发布INFO

Dalfox is a powerful open-source XSS scanner and utility focused on automation. Prior to 2.13.0, ParameterAnalysis in pkg/scanning/parameterAnalysis.go runs two sequential worke...

CVE-2026-45090

Dalfox is a powerful open-source XSS scanner and utility focused on automation. Prior to 2.13.0, ParameterAnalysis in pk

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-27 发布INFO

free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, free5GC's BSF PUT /nbsf-management/v1/subscriptions/{subId} handler has an unsynchronized write ...

CVE-2026-44318

free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, free5GC's BSF PUT /nbsf-management/v1/s

历史摘要 · 未重新核验 · NVD