#cwe-400
共收录 1365 条相关情报。
← 返回所有主题 漏洞预警2026-09-15 发布INFO
CVE-2026-83222
Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported v
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-15 发布INFO
CVE-2026-83183
Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported v
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-15 发布INFO
CVE-2026-76821
OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to 7.260706.0
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-15 发布INFO
CVE-2026-76696
A vulnerability in HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated adjacent attacker to conduc
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-15 发布INFO
CVE-2026-76693
A vulnerability in HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated remote attacker to cause a
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-15 发布INFO
CVE-2026-73960
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Ren Server). Supported
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-15 发布INFO
CVE-2026-69203
Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, An Ember server with HTTP/2 enabled throu
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-15 发布INFO
CVE-2026-69202
Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, Ember’s HTTP/2 flow-control window is rep
历史摘要 · 未重新核验 · NVD
安全公告2026-09-15 发布INFO
CVE-2026-88975
### Summary
An unauthenticated peer can make Ember's HTTP/2 read loop hold 16 MiB of a single frame in memory on a conne
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-09-15 发布INFO
CVE-2026-69213
Ember's HTTP/2 connection serializes all outgoing frames through a single unbounded queue drained by one writer fiber (`
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-09-15 发布INFO
CVE-2026-69208
The `DigestAuth` server middleware's stale-nonce cleanup uses an inverted comparison: it removes *fresh* nonces and stop
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-09-15 发布INFO
CVE-2026-69203
An ember server with HTTP/2 enabled (`.withHttp2`) does not enforce `SETTINGS_MAX_CONCURRENT_STREAMS` on streams opened
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-09-15 发布INFO
CVE-2026-69202
Ember's HTTP/2 stack replenishes the inbound flow-control window based on bytes
received off the wire, not bytes consume
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-09-15 发布INFO
CVE-2026-69213
Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, Ember HTTP/2 serializes outbound frames t
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-15 发布INFO
CVE-2026-69209
Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, The shared WebSocket decoder permits unbo
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-15 发布INFO
CVE-2026-69208
Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, the DigestAuth server middleware removes
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-15 发布INFO
CVE-2026-58483
mcp-searxng is a Model Context Protocol server that gives AI assistants web search and URL-reading capabilities through
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-15 发布INFO
CVE-2026-53954
Bugsink is a self-hosted error tracking tool. Prior to version 2.2.2, Bugsink stores every set of custom tags supplied w
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-15 发布INFO
CVE-2026-11926
IBM Verify Identity Access could allow a remote attacker to cause a denial of service due to insufficient validation of
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-15 发布INFO
CVE-2026-21588
This High severity DoS (Denial of Service) vulnerability was introduced in versions 8.9.0, 9.0.1, 9.1.0, 9.2.0, 9.3.1, 9
历史摘要 · 未重新核验 · NVD