#cwe-400
共收录 1383 条相关情报。
← 返回所有主题 漏洞预警2026-08-25 发布INFO
CVE-2026-78684
vLLM before 0.27.0 fails to properly classify DeepStream as a GPU backend and omits pixel-limit enforcement in its decod
历史摘要 · 未重新核验 · NVD
漏洞预警2026-08-25 发布INFO
CVE-2026-12600
Denial-of-service (DoS) vulnerability in the internal JPEG2000 (JPX) decoding implementation of the Poppler fork develop
历史摘要 · 未重新核验 · NVD
漏洞预警2026-08-25 发布INFO
CVE-2026-55373
OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture in
历史摘要 · 未重新核验 · NVD
漏洞预警2026-08-24 发布INFO
CVE-2026-77384
libp2p is a JavaScript implementation of the libp2p networking stack. Prior to version 4.2.9, the reservation refresh pa
历史摘要 · 未重新核验 · NVD
漏洞预警2026-08-24 发布INFO
CVE-2026-78551
RansomLook contains multiple weaknesses in its authentication endpoint that allow an unauthenticated remote attacker to
历史摘要 · 未重新核验 · NVD
漏洞预警2026-08-24 发布INFO
CVE-2026-75371
An integer handling flaw in the cobs_decode function of SpaceDot AcubeSAT OBC software commit eaf90ec allows physically-
历史摘要 · 未重新核验 · NVD
安全公告2026-08-23 发布INFO
CVE-2026-4671
justhtml before 1.18.0 contains multiple low-severity denial-of-service issues in CSS selector handling and linkificatio
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-08-23 发布INFO
CVE-2026-4671
justhtml before 1.18.0 contains multiple low-severity denial-of-service issues in CSS selector handling and linkificatio
历史摘要 · 未重新核验 · NVD
漏洞预警2026-08-21 发布MEDIUM
CVE-2026-48050
CVE-2026-48050 涉及 Arc 时间序列数据库(一个面向遥测数据的 SQL 原生时序数据库)中的一个安全漏洞。在 26.06.1 之前的版本中,Arc 在 internal/api/server.go 中通过 app.Use(p
历史摘要 · 未重新核验 · NVD
漏洞预警2026-08-21 发布HIGH
CVE-2026-53531
RaTeX 是一个用 Rust 编写的、与 KaTeX 兼容的数学渲染引擎。在 0.1.11 版本之前,其递归下降解析器在处理嵌套结构(如 `{`、`\left`、`\sqrt{`、`^{` 等)时,每嵌套一层就会消耗一个或多个原生栈帧,且
历史摘要 · 未重新核验 · NVD
漏洞预警2026-08-21 发布INFO
CVE-2026-53530
RaTeX is a KaTeX-compatible math rendering engine written in Rust. Prior to version 0.1.11, the public parser entrypoint
历史摘要 · 未重新核验 · NVD
漏洞预警2026-08-21 发布INFO
CVE-2026-77354
kin-openapi is a Go project for handling OpenAPI files. From 0.124.0 until 0.142.0, openapi3filter.sliceMapToSlice in op
历史摘要 · 未重新核验 · NVD
安全公告2026-08-21 发布INFO
CVE-2026-77354
### Summary
An uncontrolled resource consumption vulnerability in `openapi3filter` lets any unauthenticated client forc
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-08-21 发布INFO
CVE-2026-55241
Checkmate is an open-source, self-hosted tool designed to track and monitor server hardware, uptime, response times, and
历史摘要 · 未重新核验 · NVD
漏洞预警2026-08-21 发布INFO
CVE-2026-77755
A denial-of-service vulnerability was identified in misp-stix when processing attacker-controlled STIX 1 or STIX 2 docum
历史摘要 · 未重新核验 · NVD
安全公告2026-08-21 发布INFO
CVE-2026-19446
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 allows a remote unauthenticated attacker can send a crafted UDP packet to
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-08-21 发布INFO
CVE-2026-17121
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to uncontro
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-08-21 发布INFO
CVE-2026-18822
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of service due to uncontrol
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-08-21 发布INFO
CVE-2026-16952
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of service due to uncontrol
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-08-20 发布INFO
CVE-2026-19446
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 allows a remote unauthenticated attacker can send a crafted UDP packet to
历史摘要 · 未重新核验 · NVD