#cwe-400

共收录 1360 条相关情报。

← 返回所有主题
安全公告2026-10-14 发布INFO

CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that...

CVE-2026-105902

CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-14 发布INFO

CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that...

CVE-2026-106627

CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-14 发布INFO

CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that...

CVE-2026-100139

CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-14 发布INFO

CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that...

CVE-2026-100137

CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-14 发布INFO

CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that...

CVE-2026-100138

CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-13 发布INFO

The Prometheus rule conversion API endpoints in Grafana do not limit request body size, allowing authenticated users to trigger unbounded memory allocations that can crash the s...

CVE-2026-33374

The Prometheus rule conversion API endpoints in Grafana do not limit request body size, allowing authenticated users to

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 and IBM WebSphere Application Server 8.5, and 9.0 Liberty could allow a remote unauthenticated attacker to ...

CVE-2026-103499

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 and IBM WebSphere Application Server 8.5, and 9.0

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

Denial-of-service in the Printing: Output component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

CVE-2026-109781

Denial-of-service in the Printing: Output component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thu

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

Denial-of-service in the WebRTC component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

CVE-2026-109775

Denial-of-service in the WebRTC component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 1

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

Denial-of-service in the Sync component. This vulnerability was fixed in Firefox 158 and Thunderbird 158.

CVE-2026-109773

Denial-of-service in the Sync component. This vulnerability was fixed in Firefox 158 and Thunderbird 158.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

Denial-of-service in the Site Reports component. This vulnerability was fixed in Firefox 158 and Thunderbird 158.

CVE-2026-109768

Denial-of-service in the Site Reports component. This vulnerability was fixed in Firefox 158 and Thunderbird 158.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

A weakness has been identified in beautifier js-beautify up to 1.15.1/2.0.3. The affected element is an unknown function. Executing a manipulation can lead to uncontrolled memor...

CVE-2026-109149

A weakness has been identified in beautifier js-beautify up to 1.15.1/2.0.3. The affected element is an unknown function

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

A vulnerability was identified in wbond certvalidator up to 0.11.1. This issue affects some unknown processing of the component Certificate Path Builder. Such manipulation leads...

CVE-2026-109144

A vulnerability was identified in wbond certvalidator up to 0.11.1. This issue affects some unknown processing of the co

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-12 发布INFO

IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption.

CVE-2026-75095

IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a remote attacker to cause a denial of service due to unco

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-12 发布INFO

IBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption.

CVE-2026-90911

IBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to cause a denial of service due to uncontrolled re

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-12 发布INFO

IBM Maximo Application Suite - IoT Component 9.2.0, 9.1.0, and 9.0.0 could allow a remote attacker to cause a denial of service due to an infinite parsing loop when processing c...

CVE-2026-75881

IBM Maximo Application Suite - IoT Component 9.2.0, 9.1.0, and 9.0.0 could allow a remote attacker to cause a denial of

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-12 发布INFO

containerd is an open-source container runtime. Prior to 1.7.35, 2.0.12, 2.2.8, and 2.3.5, containerd's layer unpack handler repeatedly traverses directories for certain opaque ...

CVE-2026-95838

containerd is an open-source container runtime. Prior to 1.7.35, 2.0.12, 2.2.8, and 2.3.5, containerd's layer unpack han

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-12 发布INFO

A flaw was found in openstack-network-exporter. The HTTP server within the component is configured without essential timeout settings, such as ReadHeaderTimeout. This vulnerabil...

CVE-2026-83536

A flaw was found in openstack-network-exporter. The HTTP server within the component is configured without essential tim

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-12 发布INFO

Open WebUI from 0.9.0 before 0.11.4 contains a denial of service vulnerability that allows authenticated users with automations permission to stall the instance by submitting un...

CVE-2026-109299

Open WebUI from 0.9.0 before 0.11.4 contains a denial of service vulnerability that allows authenticated users with auto

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-12 发布INFO

Open WebUI 0.11.0 before 0.11.4 compiles user-chosen grep patterns for its knowledge and chat file search tools with a regex engine that expands nested counted repetition unboun...

CVE-2026-109298

Open WebUI 0.11.0 before 0.11.4 compiles user-chosen grep patterns for its knowledge and chat file search tools with a r

历史摘要 · 未重新核验 · NVD