#cwe-400

共收录 1383 条相关情报。

← 返回所有主题
漏洞预警2026-08-25 发布INFO

vLLM before 0.27.0 fails to properly classify DeepStream as a GPU backend and omits pixel-limit enforcement in its decode path. Unauthenticated attackers can activate DeepStream...

CVE-2026-78684

vLLM before 0.27.0 fails to properly classify DeepStream as a GPU backend and omits pixel-limit enforcement in its decod

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-25 发布INFO

Denial-of-service (DoS) vulnerability in the internal JPEG2000 (JPX) decoding implementation of the Poppler fork developed by Innodata Labs. When an application processes an unt...

CVE-2026-12600

Denial-of-service (DoS) vulnerability in the internal JPEG2000 (JPX) decoding implementation of the Poppler fork develop

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-25 发布INFO

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. Versions prior to 3.2.10, 3.3.12, and 3.4.13 cont...

CVE-2026-55373

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture in

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-24 发布INFO

libp2p is a JavaScript implementation of the libp2p networking stack. Prior to version 4.2.9, the reservation refresh path in reservation-store.ts reuses the same retimeableSign...

CVE-2026-77384

libp2p is a JavaScript implementation of the libp2p networking stack. Prior to version 4.2.9, the reservation refresh pa

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-24 发布INFO

RansomLook contains multiple weaknesses in its authentication endpoint that allow an unauthenticated remote attacker to enumerate valid usernames, perform unrestricted password-...

CVE-2026-78551

RansomLook contains multiple weaknesses in its authentication endpoint that allow an unauthenticated remote attacker to

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-24 发布INFO

An integer handling flaw in the cobs_decode function of SpaceDot AcubeSAT OBC software commit eaf90ec allows physically-proximate attackers with UART access to cause a Denial of...

CVE-2026-75371

An integer handling flaw in the cobs_decode function of SpaceDot AcubeSAT OBC software commit eaf90ec allows physically-

历史摘要 · 未重新核验 · NVD

安全公告2026-08-23 发布INFO

justhtml before 1.18.0 contains multiple low-severity denial-of-service issues in CSS selector...

CVE-2026-4671

justhtml before 1.18.0 contains multiple low-severity denial-of-service issues in CSS selector handling and linkificatio

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-23 发布INFO

justhtml before 1.18.0 contains multiple low-severity denial-of-service issues in CSS selector handling and linkification. Applications that evaluate attacker-controlled selecto...

CVE-2026-4671

justhtml before 1.18.0 contains multiple low-severity denial-of-service issues in CSS selector handling and linkificatio

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-21 发布MEDIUM

Arc is an open, SQL-native time-series database for telemetry. Versions prior to 26.06.1 register Go's `net/http/pprof` handlers at `/debug/pprof/*` via `app.Use(pprof.New())` i...

CVE-2026-48050

CVE-2026-48050 涉及 Arc 时间序列数据库(一个面向遥测数据的 SQL 原生时序数据库)中的一个安全漏洞。在 26.06.1 之前的版本中,Arc 在 internal/api/server.go 中通过 app.Use(p

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-21 发布HIGH

RaTeX is a KaTeX-compatible math rendering engine written in Rust. Prior to version 0.1.11, RaTeX’s recursive-descent parser recurses one (or more) native stack frame per nestin...

CVE-2026-53531

RaTeX 是一个用 Rust 编写的、与 KaTeX 兼容的数学渲染引擎。在 0.1.11 版本之前,其递归下降解析器在处理嵌套结构(如 `{`、`\left`、`\sqrt{`、`^{` 等)时,每嵌套一层就会消耗一个或多个原生栈帧,且

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-21 发布INFO

RaTeX is a KaTeX-compatible math rendering engine written in Rust. Prior to version 0.1.11, the public parser entrypoint `ratex_parser::parse(&str)` panics on the 9-byte input `...

CVE-2026-53530

RaTeX is a KaTeX-compatible math rendering engine written in Rust. Prior to version 0.1.11, the public parser entrypoint

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-21 发布INFO

kin-openapi is a Go project for handling OpenAPI files. From 0.124.0 until 0.142.0, openapi3filter.sliceMapToSlice in openapi3filter/req_resp_decoder.go converts attacker-contro...

CVE-2026-77354

kin-openapi is a Go project for handling OpenAPI files. From 0.124.0 until 0.142.0, openapi3filter.sliceMapToSlice in op

历史摘要 · 未重新核验 · NVD

安全公告2026-08-21 发布INFO

kin-openapi has uncontrolled resource consumption in openapi3filter deepObject query parameter decoding

CVE-2026-77354

### Summary An uncontrolled resource consumption vulnerability in `openapi3filter` lets any unauthenticated client forc

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-21 发布INFO

Checkmate is an open-source, self-hosted tool designed to track and monitor server hardware, uptime, response times, and incidents in real-time with beautiful visualizations. Pr...

CVE-2026-55241

Checkmate is an open-source, self-hosted tool designed to track and monitor server hardware, uptime, response times, and

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-21 发布INFO

A denial-of-service vulnerability was identified in misp-stix when processing attacker-controlled STIX 1 or STIX 2 documents. The STIX import code used sys.exit() to handle sev...

CVE-2026-77755

A denial-of-service vulnerability was identified in misp-stix when processing attacker-controlled STIX 1 or STIX 2 docum

历史摘要 · 未重新核验 · NVD

安全公告2026-08-21 发布INFO

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 allows a remote unauthenticated attacker can send a...

CVE-2026-19446

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 allows a remote unauthenticated attacker can send a crafted UDP packet to

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-21 发布INFO

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of...

CVE-2026-17121

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to uncontro

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-21 发布INFO

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of...

CVE-2026-18822

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of service due to uncontrol

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-21 发布INFO

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of...

CVE-2026-16952

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of service due to uncontrol

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-20 发布INFO

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 allows a remote unauthenticated attacker can send a crafted UDP packet to a reachable RPC service, resulting in complete system una...

CVE-2026-19446

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 allows a remote unauthenticated attacker can send a crafted UDP packet to

历史摘要 · 未重新核验 · NVD