#cwe-400

共收录 1360 条相关情报。

← 返回所有主题
漏洞预警2026-09-23 发布INFO

Forward-reference completion for @JsonIdentityInfo object IDs in FasterXML jackson-databind performs a linear scan of the pending-reference accumulator for every resolved ID. Th...

CVE-2026-91777

Forward-reference completion for @JsonIdentityInfo object IDs in FasterXML jackson-databind performs a linear scan of th

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-23 发布INFO

TypeDeserializerBase._findDeserializer() in FasterXML jackson-databind caches the resolved deserializer under the raw, attacker-supplied type ID. When name-based polymorphism is...

CVE-2026-91776

TypeDeserializerBase._findDeserializer() in FasterXML jackson-databind caches the resolved deserializer under the raw, a

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-23 发布INFO

UTF8DataInputJsonParser._reportInvalidToken() in FasterXML jackson-core builds the offending-token text for its error message by appending Java identifier characters to a String...

CVE-2026-89425

UTF8DataInputJsonParser._reportInvalidToken() in FasterXML jackson-core builds the offending-token text for its error me

历史摘要 · 未重新核验 · NVD

安全公告2026-09-23 发布INFO

jackson-databind: quadratic forward-reference completion in Collection and Map deserializers

CVE-2026-91777

Forward-reference completion for @JsonIdentityInfo object IDs in FasterXML jackson-databind performs a linear scan of th

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-23 发布INFO

jackson-databind: unbounded growth of the type id cache in TypeDeserializerBase retains every unknown raw type ID

CVE-2026-91776

TypeDeserializerBase._findDeserializer() in FasterXML jackson-databind caches the resolved deserializer under the raw, a

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-23 发布INFO

jackson-core: UTF8DataInputJsonParser._reportInvalidToken() does not honor maxErrorTokenLength, allowing unbounded StringBuilder growth

CVE-2026-89425

UTF8DataInputJsonParser._reportInvalidToken() in FasterXML jackson-core builds the offending-token text for its error me

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-23 发布INFO

IBM Concert 1.0.0 through 3.0.0 could allow a remote authenticated attacker to cause a denial of...

CVE-2026-17465

IBM Concert 1.0.0 through 3.0.0 could allow a remote authenticated attacker to cause a denial of service due to improper

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-22 发布INFO

plone.app.dexterity is a content-type system for the Plone content management system, and plone.app.contenttypes provides Plone’s Dexterity-based content types. Plone.app.dexter...

CVE-2026-57576

plone.app.dexterity is a content-type system for the Plone content management system, and plone.app.contenttypes provide

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-22 发布INFO

IBM Concert 1.0.0 through 3.0.0 could allow a remote authenticated attacker to cause a denial of service due to improper enforcement of storage limits.

CVE-2026-17465

IBM Concert 1.0.0 through 3.0.0 could allow a remote authenticated attacker to cause a denial of service due to improper

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-22 发布INFO

icalendar is an RFC 5545 compatible parser and generator of iCalendar files for Python. From 6.1.0 until 7.2.2, vInt.from_ical accepts an attacker-controlled VALARM REPEAT value...

CVE-2026-77399

icalendar is an RFC 5545 compatible parser and generator of iCalendar files for Python. From 6.1.0 until 7.2.2, vInt.fro

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-22 发布INFO

CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulner...

CVE-2026-75632

CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application

历史摘要 · 未重新核验 · NVD

安全公告2026-09-22 发布INFO

icalendar: Denial of service via unbounded VALARM REPEAT expansion

CVE-2026-77399

icalendar is an RFC 5545 compatible parser and generator of iCalendar files for Python. From 6.1.0 until 7.2.2, vInt.fro

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-09-22 发布INFO

Netdata is an open source observability tool. Prior to 2.10.4, an authenticated child agent can send an oversized CHART SLOT value that str2ull_encoded passes to pluginsd_rrdset...

CVE-2026-83600

Netdata is an open source observability tool. Prior to 2.10.4, an authenticated child agent can send an oversized CHART

历史摘要 · 未重新核验 · NVD

安全公告2026-09-22 发布INFO

Netdata: Streaming protocol chart slot guard off-by-one allows ~16 GiB allocation request, crashing parent agent

CVE-2026-83600

Netdata is an open source observability tool. Prior to 2.10.4, an authenticated child agent can send an oversized CHART

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-09-22 发布HIGH

A flaw was found in rpcbind. This vulnerability allows a remote, unauthenticated attacker to cause a Denial of Service (DoS) by sending a large number of unique requests. The rp...

CVE-2026-94640

A flaw was found in rpcbind. This vulnerability allows a remote, unauthenticated attacker to cause a Denial of Service (

来源摘录 · NVD

漏洞预警2026-09-22 发布INFO

radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's Apple Preferred Executable Format loader was vulnerable because the PEF ...

CVE-2026-81880

radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's Apple Preferred

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-22 发布INFO

NumberInput.looksLikeValidNumber() in FasterXML jackson-core pre-validates "stringified numbers" with two regular expressions: PATTERN_FLOAT ([+-]?[0-9]*[\.]?[0-9]+([eE][+-]?[0-...

CVE-2026-89407

NumberInput.looksLikeValidNumber() in FasterXML jackson-core pre-validates "stringified numbers" with two regular expres

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-22 发布INFO

NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker may cause uncontrolled resource consumption. A successful exploit of this vulnerability may...

CVE-2026-65115

NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker may cause uncontrolled resource co

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-22 发布INFO

NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause uncontrolled resource consumption. A successful exploit of this vulnerability m...

CVE-2026-65112

NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause uncontrolled resource

历史摘要 · 未重新核验 · NVD

安全公告2026-09-22 发布INFO

radare2: Uncontrolled resource consumption in radare2 PEF loader

CVE-2026-81880

radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's Apple Preferred

历史摘要 · 未重新核验 · OSV.dev