#cwe-400

共收录 1360 条相关情报。

← 返回所有主题
安全公告2026-09-18 发布INFO

A vulnerability was determined in O-RAN-SC SMO OAM 2025-06-10. Affected by this issue is some...

CVE-2026-93309

A vulnerability was determined in O-RAN-SC SMO OAM 2025-06-10. Affected by this issue is some unknown functionality of t

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-18 发布INFO

A vulnerability was found in O-RAN-SC SMO OAM 2025-06-10. Affected by this vulnerability is an...

CVE-2026-93308

A vulnerability was found in O-RAN-SC SMO OAM 2025-06-10. Affected by this vulnerability is an unknown functionality of

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-18 发布INFO

A vulnerability has been found in O-RAN-SC SMO OAM 2025-06-10. Affected is an unknown function of...

CVE-2026-93307

A vulnerability has been found in O-RAN-SC SMO OAM 2025-06-10. Affected is an unknown function of the component VES Coll

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-18 发布INFO

A vulnerability was determined in O-RAN-SC SMO OAM 2025-06-10. Affected by this issue is some unknown functionality of the component VES Collector. Executing a manipulation can ...

CVE-2026-93309

A vulnerability was determined in O-RAN-SC SMO OAM 2025-06-10. Affected by this issue is some unknown functionality of t

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-18 发布INFO

A vulnerability was found in O-RAN-SC SMO OAM 2025-06-10. Affected by this vulnerability is an unknown functionality of the component VES Collector. Performing a manipulation re...

CVE-2026-93308

A vulnerability was found in O-RAN-SC SMO OAM 2025-06-10. Affected by this vulnerability is an unknown functionality of

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-17 发布INFO

A vulnerability has been found in O-RAN-SC SMO OAM 2025-06-10. Affected is an unknown function of the component VES Collector. Such manipulation of the argument additionalFields...

CVE-2026-93307

A vulnerability has been found in O-RAN-SC SMO OAM 2025-06-10. Affected is an unknown function of the component VES Coll

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-17 发布INFO

`fulgur` converts untrusted HTML/CSS into PDF, commonly on a server that processes input supplied by many tenants. In versions prior to 0.19.0, a body-direct child whose CSS-res...

CVE-2026-68537

`fulgur` converts untrusted HTML/CSS into PDF, commonly on a server that processes input supplied by many tenants. In ve

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-17 发布INFO

`fulgur` converts untrusted HTML/CSS into PDF, commonly on a server that processes input supplied by many tenants. In versions prior to 0.19.0, a body-direct child whose CSS-res...

CVE-2026-68523

`fulgur` converts untrusted HTML/CSS into PDF, commonly on a server that processes input supplied by many tenants. In ve

历史摘要 · 未重新核验 · NVD

安全公告2026-09-17 发布INFO

Soup Sieve: Polynomial-time ReDoS (O(n²)) in the `IDENTIFIER` / `VALUE` selector sub-patterns

CVE-2026-86000

## Summary soupsieve compiles CSS selector strings with a set of hand-written regular expressions. The shared `IDENTIFI

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-17 发布INFO

Soup Sieve: Polynomial-time ReDoS (O(n²)) in the whitespace/comment trimming regex `RE_WS_END` (triggers on VALID selectors)

CVE-2026-85999

## Summary Before tokenizing, `selector_iter` trims leading/trailing whitespace and comments by running two regexes ove

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-17 发布INFO

HAPI FHIR: SHCParser DEFLATE infinite loop causes denial of service

CVE-2026-81876

### Summary A malformed Smart Health Card (SHC) JWT with `zip: "DEF"` and an empty or truncated DEFLATE payload causes `

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-17 发布INFO

HAPI FHIR: SHCParser unbounded DEFLATE decompression causes denial of service

CVE-2026-81875

### Summary `SHCParser` inflates compressed Smart Health Card JWT payloads into memory without a decompressed-size limit

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-17 发布INFO

MKP is a Model Context Protocol server for Kubernetes. Prior to 0.4.1, cmd/server/main.go exposes the default HTTP endpoint and pkg/mcp/server.go registers the unauthenticated g...

CVE-2026-50125

MKP is a Model Context Protocol server for Kubernetes. Prior to 0.4.1, cmd/server/main.go exposes the default HTTP endpo

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-17 发布INFO

libp2p is a JavaScript implementation of the libp2p networking stack. Prior to 11.0.26, @libp2p/floodsub accepts unauthenticated RPC frames on /floodsub/1.0.0 through PeerStream...

CVE-2026-86040

libp2p is a JavaScript implementation of the libp2p networking stack. Prior to 11.0.26, @libp2p/floodsub accepts unauthe

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-17 发布INFO

Soup Sieve is a CSS selector library designed to be used with Beautiful Soup 4. Prior to 2.9, the selector parser in src/soupsieve/css_parser.py defines IDENTIFIER with adjacent...

CVE-2026-86000

Soup Sieve is a CSS selector library designed to be used with Beautiful Soup 4. Prior to 2.9, the selector parser in src

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-17 发布INFO

Soup Sieve is a CSS selector library designed to be used with Beautiful Soup 4. Prior to 2.9, selector_iter in src/soupsieve/css_parser.py trims the raw selector with RE_WS_END,...

CVE-2026-85999

Soup Sieve is a CSS selector library designed to be used with Beautiful Soup 4. Prior to 2.9, selector_iter in src/soups

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-17 发布INFO

The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. From 2.0.0 until 2.16.1 and 3.0.12, automat...

CVE-2026-85721

The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously process HT

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-17 发布INFO

The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. From 3.0.8 until 3.0.12, a client with maxC...

CVE-2026-85718

The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously process HT

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-17 发布INFO

vm2 before 3.11.7 (affected versions <= 3.11.6) does not enforce the VM({ timeout }) option on code executed outside the synchronous VM#run() call. The timeout only wraps the si...

CVE-2026-92942

vm2 before 3.11.7 (affected versions <= 3.11.6) does not enforce the VM({ timeout }) option on code executed outside the

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-17 发布INFO

A security flaw has been discovered in vgmstream up to r2117. This issue affects the function parse_mus of the file src/meta/mus_acm.c. The manipulation results in resource cons...

CVE-2026-92879

A security flaw has been discovered in vgmstream up to r2117. This issue affects the function parse_mus of the file src/

历史摘要 · 未重新核验 · NVD