#cwe-400

共收录 1367 条相关情报。

漏洞预警2026-09-01 发布INFO

An issue in kamailio v.6.1.1 and before allows a remote attacker to cause a denial of service via the IMS P-CSCF registration handling components

CVE-2026-52022

An issue in kamailio v.6.1.1 and before allows a remote attacker to cause a denial of service via the IMS P-CSCF registr

历史摘要 · 未重新核验 · NVD

#cve #cwe-400

漏洞预警2026-09-01 发布INFO

xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module. From 0.7.0 until 0.8.15, the release-0.8.x parser in lib/sax.js trims c...

CVE-2026-83619

xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module. From 0.7.0 unt

历史摘要 · 未重新核验 · NVD

#cve #cwe-400 #cwe-1333

漏洞预警2026-09-01 发布INFO

xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module. Prior to @xmldom/xmldom versions 0.8.15 and 0.9.12, and in xmldom versi...

CVE-2026-83614

xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module. Prior to @xmld

历史摘要 · 未重新核验 · NVD

#cve #cwe-400 #cwe-407

漏洞预警2026-09-01 发布INFO

xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module. From 0.9.0-beta.1 until 0.9.12, HTML-mode parsing through DOMParser.par...

CVE-2026-83612

xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module. From 0.9.0-bet

历史摘要 · 未重新核验 · NVD

#cve #cwe-178 #cwe-400

漏洞预警2026-09-01 发布INFO

xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module. From 0.9.0-beta.9 until 0.9.11, the processing-instruction production i...

CVE-2026-83606

xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module. From 0.9.0-bet

历史摘要 · 未重新核验 · NVD

#cve #cwe-400 #cwe-1333

安全公告2026-09-01 发布INFO

xmldom: End-tag Whitespace-Trim Regex ReDoS — quadratic backtracking in the 0.8.x end-tag parser

CVE-2026-83619

xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module. From 0.7.0 unt

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-1333 #cwe-400

安全公告2026-09-01 发布INFO

xmldom: Quadratic-time parsing via the malformed-input recovery path — `parseElementStartPart` re-scan and `normalize()` adjacent-text merge

CVE-2026-83614

xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module. Prior to @xmld

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-400 #cwe-407

安全公告2026-09-01 发布INFO

xmldom: HTML raw-text closing-tag case mismatch causes output amplification

CVE-2026-83612

xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module. From 0.9.0-bet

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-178 #cwe-400

安全公告2026-09-01 发布INFO

xmldom PI grammar regex ReDoS: quadratic backtracking on unterminated processing instructions

CVE-2026-83606

xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module. From 0.9.0-bet

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-1333 #cwe-400

漏洞预警2026-09-01 发布INFO

A denial-of-service security issue exists in the affected product. The security issue stems from a crafted CIP packet being sent crashing the module. The device requires a resta...

CVE-2026-84235

A denial-of-service security issue exists in the affected product. The security issue stems from a crafted CIP packet be

历史摘要 · 未重新核验 · NVD

#cve #cwe-400

漏洞预警2026-09-01 发布INFO

Uncontrolled Resource Consumption vulnerability in ash-project ash lets a slow asynchronous read spin a scheduler thread at full CPU while the framework waits for it. Ash.Actio...

CVE-2026-82743

Uncontrolled Resource Consumption vulnerability in ash-project ash lets a slow asynchronous read spin a scheduler thread

历史摘要 · 未重新核验 · NVD

#cve #cwe-400

漏洞预警2026-09-01 发布INFO

Uncontrolled Resource Consumption vulnerability in ash-project ash lets an attacker exhaust node memory by matching a filter that spans multiple to-many relationships in memory....

CVE-2026-82742

Uncontrolled Resource Consumption vulnerability in ash-project ash lets an attacker exhaust node memory by matching a fi

历史摘要 · 未重新核验 · NVD

#cve #cwe-400

漏洞预警2026-09-01 发布INFO

Uncontrolled Resource Consumption vulnerability in ash-project ash allows an attacker to force an expensive regular expression to run on input that a length constraint should ha...

CVE-2026-82735

Uncontrolled Resource Consumption vulnerability in ash-project ash allows an attacker to force an expensive regular expr

历史摘要 · 未重新核验 · NVD

#cve #cwe-400

安全公告2026-09-01 发布INFO

Ash.Actions.Read.AsyncLimiter busy-spins a scheduler while awaiting slow async reads

CVE-2026-82743

Uncontrolled Resource Consumption vulnerability in ash-project ash lets a slow asynchronous read spin a scheduler thread

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-400

安全公告2026-09-01 发布INFO

Ash.Filter.Runtime materializes a combinatorial cross-product over to-many relationships, exhausting memory

CVE-2026-82742

Uncontrolled Resource Consumption vulnerability in ash-project ash lets an attacker exhaust node memory by matching a fi

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-400

安全公告2026-09-01 发布INFO

Match regex runs on over-length input in Ash.Type.String, enabling regex denial of service

CVE-2026-82735

Uncontrolled Resource Consumption vulnerability in ash-project ash allows an attacker to force an expensive regular expr

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-400

漏洞预警2026-08-31 发布INFO

Tornado is a Python web framework and asynchronous networking library. Prior to 6.5.8, Tornado parses application/x-www-form-urlencoded request bodies with urllib.parse.parse_qs...

CVE-2026-82397

Tornado is a Python web framework and asynchronous networking library. Prior to 6.5.8, Tornado parses application/x-www-

历史摘要 · 未重新核验 · NVD

#cve #cwe-400 #cwe-1284

安全公告2026-08-31 发布INFO

decode-uri-component: Denial of service via exponential decoding of malformed percent-encoded input

CVE-2026-45822

### Impact An attacker who can supply input to `decodeUriComponent()` (directly or via a dependency that uses this packa

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #npm #cwe-400 #cwe-405 #cwe-407 #cwe-1176

漏洞预警2026-08-28 发布INFO

multer is a middleware for handling multipart/form-data in Node.js. A small multipart request with two specially crafted text field names can make multer's field parser synchron...

CVE-2026-82333

multer is a middleware for handling multipart/form-data in Node.js. A small multipart request with two specially crafted

历史摘要 · 未重新核验 · NVD

#cve #cwe-400

漏洞预警2026-08-28 发布INFO

multer is a middleware for handling multipart/form-data in Node.js. In version 2.2.0, when a disk-backed upload is aborted or truncated before the write stream finishes, multer'...

CVE-2026-77037

multer is a middleware for handling multipart/form-data in Node.js. In version 2.2.0, when a disk-backed upload is abort

历史摘要 · 未重新核验 · NVD

#cve #cwe-400 #cwe-459