#cwe-367
共收录 358 条相关情报。
← 返回所有主题 漏洞预警2026-08-25 发布INFO
CVE-2026-55537
PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.58, JobSubmitRequest.validate_webhook_url() accepts webh
历史摘要 · 未重新核验 · NVD
漏洞预警2026-08-25 发布INFO
CVE-2026-55535
PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.58, the Jobs API validate_webhook_url() path fails open
历史摘要 · 未重新核验 · NVD
漏洞预警2026-08-25 发布INFO
CVE-2026-56708
Grav API plugin before 1.0.16 contains a server-side request forgery vulnerability in webhook delivery that allows attac
历史摘要 · 未重新核验 · NVD
漏洞预警2026-08-24 发布INFO
CVE-2026-9728
The userspace syscall verifier z_vrfy_mbox_send() in drivers/mbox/mbox_handlers.c validated the nested msg->data/msg->si
历史摘要 · 未重新核验 · NVD
漏洞预警2026-08-21 发布INFO
CVE-2026-49114
In ONNX before 1.21.0, the 'save_external_data' function builds the external-data file path from the model's external_da
历史摘要 · 未重新核验 · NVD
漏洞预警2026-08-20 发布INFO
CVE-2026-16935
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileges due to a time-of-
历史摘要 · 未重新核验 · NVD
漏洞预警2026-08-20 发布INFO
CVE-2026-76020
Race condition in V8 in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to execute arbitrary code inside
历史摘要 · 未重新核验 · NVD
漏洞预警2026-08-20 发布INFO
CVE-2026-64846
Nix is a package manager for Linux and other Unix systems. Prior to 2.35.0, a malicious derivation executed with the rec
历史摘要 · 未重新核验 · NVD
漏洞预警2026-08-20 发布INFO
CVE-2026-16927
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain root privileges due to a time-of-chec
历史摘要 · 未重新核验 · NVD
漏洞预警2026-08-20 发布INFO
CVE-2026-16922
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to a time-of-ch
历史摘要 · 未重新核验 · NVD
漏洞预警2026-08-19 发布INFO
CVE-2026-16838
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to overwrite critical files and obtain sensit
历史摘要 · 未重新核验 · NVD
漏洞预警2026-08-19 发布INFO
CVE-2026-73829
Time-of-check Time-of-use (TOCTOU) Race Condition in ZenHive mpp allows an unauthenticated remote client to redeem one c
历史摘要 · 未重新核验 · NVD
漏洞预警2026-08-19 发布INFO
CVE-2024-13942
Secure BootROM of RK3588s SoC is vulnerable to a time-of-check to time-of-use attack in case of booting from external me
历史摘要 · 未重新核验 · NVD
漏洞预警2026-08-19 发布INFO
CVE-2026-16819
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of service and compromise d
历史摘要 · 未重新核验 · NVD
漏洞预警2026-08-19 发布INFO
CVE-2026-56797
Dell Command Update (DCU), versions prior to 5.7.1, a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability. A
历史摘要 · 未重新核验 · NVD
漏洞预警2026-08-19 发布INFO
CVE-2026-53477
Dell Command Update (DCU), versions prior to 5.7.1, contain a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerab
历史摘要 · 未重新核验 · NVD
漏洞预警2026-08-19 发布INFO
CVE-2026-49415
During execve(2) of a SUID binary, the new virtual address space is installed before the process credentials are updated
历史摘要 · 未重新核验 · NVD
安全公告2026-08-18 发布INFO
CVE-2026-76044
Race condition in USB in Google Chrome prior to 151.0.7922.169 allowed a remote attacker who had compromised the rendere
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-08-18 发布INFO
CVE-2026-76044
Race condition in USB in Google Chrome prior to 151.0.7922.169 allowed a remote attacker who had compromised the rendere
历史摘要 · 未重新核验 · NVD
安全公告2026-08-18 发布INFO
CVE-2026-70667
## Summary
The SSRF mitigation added for GHSA-54vg-pfh7-jq95 (`_validate_revocation_url()` in `lemur
/certificates/verif
历史摘要 · 未重新核验 · GitHub Advisory