#cwe-400

共收录 1365 条相关情报。

漏洞预警2026-09-17 发布INFO

Soup Sieve is a CSS selector library designed to be used with Beautiful Soup 4. Prior to 2.9, selector_iter in src/soupsieve/css_parser.py trims the raw selector with RE_WS_END,...

CVE-2026-85999

Soup Sieve is a CSS selector library designed to be used with Beautiful Soup 4. Prior to 2.9, selector_iter in src/soups

历史摘要 · 未重新核验 · NVD

#cve #cwe-400 #cwe-1333

漏洞预警2026-09-17 发布INFO

The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. From 2.0.0 until 2.16.1 and 3.0.12, automat...

CVE-2026-85721

The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously process HT

历史摘要 · 未重新核验 · NVD

#cve #cwe-400 #cwe-409

漏洞预警2026-09-17 发布INFO

The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. From 3.0.8 until 3.0.12, a client with maxC...

CVE-2026-85718

The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously process HT

历史摘要 · 未重新核验 · NVD

#cve #cwe-400 #cwe-772

漏洞预警2026-09-17 发布INFO

vm2 before 3.11.7 (affected versions <= 3.11.6) does not enforce the VM({ timeout }) option on code executed outside the synchronous VM#run() call. The timeout only wraps the si...

CVE-2026-92942

vm2 before 3.11.7 (affected versions <= 3.11.6) does not enforce the VM({ timeout }) option on code executed outside the

历史摘要 · 未重新核验 · NVD

#cve #cwe-400

漏洞预警2026-09-17 发布INFO

A security flaw has been discovered in vgmstream up to r2117. This issue affects the function parse_mus of the file src/meta/mus_acm.c. The manipulation results in resource cons...

CVE-2026-92879

A security flaw has been discovered in vgmstream up to r2117. This issue affects the function parse_mus of the file src/

历史摘要 · 未重新核验 · NVD

#cve #cwe-400 #cwe-404

安全公告2026-09-17 发布INFO

Nodemailer before 9.1.0 contains a quadratic time complexity vulnerability in the addressparser...

CVE-2026-92596

Nodemailer before 9.1.0 contains a quadratic time complexity vulnerability in the addressparser component that allows re

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-400 #severity:high

漏洞预警2026-09-16 发布INFO

Nodemailer before 9.1.0 contains a quadratic time complexity vulnerability in the addressparser component that allows remote attackers to cause denial of service by supplying a ...

CVE-2026-92596

Nodemailer before 9.1.0 contains a quadratic time complexity vulnerability in the addressparser component that allows re

历史摘要 · 未重新核验 · NVD

#cve #cwe-400

安全公告2026-09-16 发布INFO

RMCP: Unauthenticated permanent session-table leak in rmcp Streamable HTTP server transport leads to remote denial-of-service

CVE-2026-63128

### Summary An unauthenticated remote attacker can leak one entry per HTTP request out of the in-memory session table o

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #rust #cwe-400 #cwe-401 #cwe-772 #severity:high

漏洞预警2026-09-16 发布INFO

OpenTelemetry-Go is the Go implementation of OpenTelemetry. Prior to version 0.21.0, the go.opentelemetry.io/otel/sdk/log BatchingProcessor can enter a tight CPU loop when attac...

CVE-2026-81872

OpenTelemetry-Go is the Go implementation of OpenTelemetry. Prior to version 0.21.0, the go.opentelemetry.io/otel/sdk/lo

历史摘要 · 未重新核验 · NVD

#cve #cwe-400 #cwe-834

漏洞预警2026-09-16 发布INFO

OpenTelemetry-Go is the Go implementation of OpenTelemetry. From version 1.10.0 until 1.33.0, the sdk/trace/span.go attribute truncation path can fail to enforce AttributeValueL...

CVE-2026-81869

OpenTelemetry-Go is the Go implementation of OpenTelemetry. From version 1.10.0 until 1.33.0, the sdk/trace/span.go attr

历史摘要 · 未重新核验 · NVD

#cve #cwe-176 #cwe-400

漏洞预警2026-09-16 发布INFO

A remote attacker could cause excessive resource consumption by supplying specially crafted request parameters, potentially resulting in a denial of service condition. Older u...

CVE-2026-76646

A remote attacker could cause excessive resource consumption by supplying specially crafted request parameters, potentia

历史摘要 · 未重新核验 · NVD

#cve #cwe-400

漏洞预警2026-09-16 发布INFO

HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare interoperability in Java. Prior to version 6.9.12, SHCParser in org.hl7.fhir.r5/src/main/java/org/...

CVE-2026-81876

HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare interoperability in Java. Prior to versio

历史摘要 · 未重新核验 · NVD

#cve #cwe-20 #cwe-400 #cwe-835

漏洞预警2026-09-16 发布INFO

HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare interoperability in Java. Prior to version 6.9.12, SHCParser in org.hl7.fhir.r5/src/main/java/org/...

CVE-2026-81875

HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare interoperability in Java. Prior to versio

历史摘要 · 未重新核验 · NVD

#cve #cwe-20 #cwe-400 #cwe-409

安全公告2026-09-16 发布INFO

node-opcua: TCP Socket Leak (FIN-WAIT-2) via keepalive reconnection cycle - Resource Exhaustion

CVE-2026-68904

SUMMARY ------- A combination of bugs in node-opcua causes unlimited TCP socket accumulation (FIN-WAIT-2 state) during a

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #npm #cwe-400 #severity:high

安全公告2026-09-16 发布INFO

A vulnerability was found in vllm-project vLLM 0.26.0/0.27.0. Affected is the function...

CVE-2026-92220

A vulnerability was found in vllm-project vLLM 0.26.0/0.27.0. Affected is the function MoRIIOConnectorScheduler.request_

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-400 #severity:medium

漏洞预警2026-09-16 发布INFO

A vulnerability was found in vllm-project vLLM 0.26.0/0.27.0. Affected is the function MoRIIOConnectorScheduler.request_finished/MoRIIOConnectorWorker.get_finished/MoRIIOWrapper...

CVE-2026-92220

A vulnerability was found in vllm-project vLLM 0.26.0/0.27.0. Affected is the function MoRIIOConnectorScheduler.request_

历史摘要 · 未重新核验 · NVD

#cve #cwe-400 #cwe-404

安全公告2026-09-16 发布INFO

vllm-project vLLM MoRIIO Acknowledgement moriio_connector.py MoRIIOWrapper._handle_release_message resource consumption

CVE-2026-92220

A vulnerability was found in vllm-project vLLM 0.26.0/0.27.0. Affected is the function MoRIIOConnectorScheduler.request_

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-400 #cwe-404

安全公告2026-09-16 发布INFO

A vulnerability was identified in a2ui-project a2ui up to 0.10.6. Affected is an unknown function...

CVE-2026-92114

A vulnerability was identified in a2ui-project a2ui up to 0.10.6. Affected is an unknown function of the file renderers/

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-400 #severity:medium

漏洞预警2026-09-15 发布INFO

A vulnerability was identified in a2ui-project a2ui up to 0.10.6. Affected is an unknown function of the file renderers/web_core/src/v0_9/basic_catalog/functions/safe_regex.ts o...

CVE-2026-92114

A vulnerability was identified in a2ui-project a2ui up to 0.10.6. Affected is an unknown function of the file renderers/

历史摘要 · 未重新核验 · NVD

#cve #cwe-400 #cwe-1333

漏洞预警2026-09-15 发布INFO

emp3r0r is a C2 designed by Linux users for Linux environments. Prior to version 4.2.5, the `http_poll` C2 transport accepts attacker-controlled HTTP polling sessions before CBO...

CVE-2026-61554

emp3r0r is a C2 designed by Linux users for Linux environments. Prior to version 4.2.5, the `http_poll` C2 transport acc

历史摘要 · 未重新核验 · NVD

#cve #cwe-400