#cwe-390

共收录 13 条相关情报。

← 返回所有主题
漏洞预警2026-10-21 发布INFO

Django REST framework is a toolkit for building Web APIs. From 3.12.0 until 3.18.2, TokenProxy.delete() in rest_framework/authtoken/models.py uses the proxy's user-id pk while t...

CVE-2026-114137

Django REST framework is a toolkit for building Web APIs. From 3.12.0 until 3.18.2, TokenProxy.delete() in rest_framewor

历史摘要 · 未重新核验 · NVD

安全公告2026-10-21 发布INFO

Django REST framework: TokenProxy.delete() reports success and revokes nothing

CVE-2026-114137

Django REST framework is a toolkit for building Web APIs. From 3.12.0 until 3.18.2, TokenProxy.delete() in rest_framewor

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-10-02 发布INFO

Discord libdave before 1.2.0 did not reject an MLS Welcome message when the resulting group...

CVE-2026-104480

Discord libdave before 1.2.0 did not reject an MLS Welcome message when the resulting group roster contained an unrecogn

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-02 发布INFO

Discord libdave before 1.2.0 did not reject an MLS Welcome message when the resulting group roster contained an unrecognized participant. An attacker in control of the DAVE sign...

CVE-2026-104480

Discord libdave before 1.2.0 did not reject an MLS Welcome message when the resulting group roster contained an unrecogn

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-01 发布INFO

A fail-open error handling issue within the data masking utility of Powertools for AWS Lambda (Python) might allow actors to read sensitive field values that the application int...

CVE-2026-104002

A fail-open error handling issue within the data masking utility of Powertools for AWS Lambda (Python) might allow actor

历史摘要 · 未重新核验 · NVD

安全公告2026-10-01 发布INFO

Fail-open error handling in the data masking utility in Powertools for AWS Lambda (Python)

CVE-2026-104002

A fail-open error handling issue within the data masking utility of Powertools for AWS Lambda (Python) might allow actor

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-09-17 发布INFO

The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. From 3.0.8 until 3.0.12, processScramAuthen...

CVE-2026-85716

The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously process HT

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-03 发布INFO

util-linux versions through 2.41.5 and 2.42.2 fail to check mount helper exit status before running post-mount hooks, allowing unprivileged users to execute privileged operation...

CVE-2026-76642

util-linux versions through 2.41.5 and 2.42.2 fail to check mount helper exit status before running post-mount hooks, al

历史摘要 · 未重新核验 · NVD

安全公告2026-09-03 发布INFO

util-linux libmount Privilege Escalation via Failed Mount Helper

CVE-2026-76642

util-linux versions through 2.41.5 and 2.42.2 fail to check mount helper exit status before running post-mount hooks, al

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-06-29 发布INFO

Detection of Error Condition Without Action vulnerability in Apache Tomcat when configuring CRLs...

CVE-2026-53434

Detection of Error Condition Without Action vulnerability in Apache Tomcat when configuring CRLs for a FFM based connect

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-06-29 发布INFO

Detection of Error Condition Without Action vulnerability in Apache Tomcat when configuring CRLs for a FFM based connector. This issue affects Apache Tomcat: from 11.0.0-M1 thr...

CVE-2026-53434

Detection of Error Condition Without Action vulnerability in Apache Tomcat when configuring CRLs for a FFM based connect

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-27 发布INFO

pam_usb provides hardware authentication for Linux using ordinary removable media. Prior to 0.9.1, src/evdev.c silently ignores EACCES errors when opening /dev/input/event* node...

CVE-2026-48792

pam_usb provides hardware authentication for Linux using ordinary removable media. Prior to 0.9.1, src/evdev.c silently

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-15 发布INFO

Gitsign is a keyless Sigstore to signing tool for Git commits with your a GitHub / OIDC identity. From 0.4.0 to before 0.15.0, CertVerifier.Verify() in pkg/git/verifier.go uncon...

CVE-2026-44310

Gitsign is a keyless Sigstore to signing tool for Git commits with your a GitHub / OIDC identity. From 0.4.0 to before 0

历史摘要 · 未重新核验 · NVD