#cwe-400

共收录 1383 条相关情报。

漏洞预警2026-08-20 发布INFO

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of service due to uncontrolled resource consumption when parsing directory records.

CVE-2026-18822

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of service due to uncontrol

历史摘要 · 未重新核验 · NVD

#cve #cwe-400

漏洞预警2026-08-20 发布INFO

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to uncontrolled recursion.

CVE-2026-17121

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to uncontro

历史摘要 · 未重新核验 · NVD

#cve #cwe-400

漏洞预警2026-08-20 发布INFO

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of service due to uncontrolled resource consumption.

CVE-2026-16952

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of service due to uncontrol

历史摘要 · 未重新核验 · NVD

#cve #cwe-400

漏洞预警2026-08-20 发布INFO

Mailpit is an email testing tool and API for developers. Prior to 1.30.4, Mailpit decodes attacker-supplied image attachments into a full raster before checking decoded dimensio...

CVE-2026-67446

Mailpit is an email testing tool and API for developers. Prior to 1.30.4, Mailpit decodes attacker-supplied image attach

历史摘要 · 未重新核验 · NVD

#cve #cwe-400 #cwe-770

漏洞预警2026-08-20 发布INFO

Mailpit is an email testing tool and API for developers. Prior to 1.30.4, Mailpit reads SMTP commands through internal/smtpd/smtpd.go session.readLine() using bufio.Reader.ReadS...

CVE-2026-67445

Mailpit is an email testing tool and API for developers. Prior to 1.30.4, Mailpit reads SMTP commands through internal/s

历史摘要 · 未重新核验 · NVD

#cve #cwe-400

安全公告2026-08-20 发布INFO

Mailpit: SMTP command parser buffers unbounded command lines before syntax rejection

CVE-2026-67445

Mailpit is an email testing tool and API for developers. Prior to 1.30.4, Mailpit reads SMTP commands through internal/s

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-400

安全公告2026-08-20 发布INFO

Mailpit: Thumbnail generation decodes unbounded image dimensions before scaling

CVE-2026-67446

Mailpit is an email testing tool and API for developers. Prior to 1.30.4, Mailpit decodes attacker-supplied image attach

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-400 #cwe-770

安全公告2026-08-20 发布INFO

netty-incubator-codec-ohttp BinaryHttpParser: Unauthenticated CPU-exhaustion DoS via infinite loop in field-section decoding

CVE-2026-63202

# BinaryHttpParser: Unauthenticated CPU-exhaustion DoS via infinite loop in field-section decoding - **ID:** BHTTP-LOOP

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #maven #cwe-400 #cwe-835 #severity:high

安全公告2026-08-20 发布INFO

netty-incubator-codec-ohttp: BinaryHttpParser should enforce limits for variable lengths fields

CVE-2026-61827

We don't enforce any limits for the encoded variable lengths that are used for fields. As the remote peer controls these

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #maven #cwe-400 #cwe-770 #severity:high

安全公告2026-08-20 发布INFO

netty-incubator-codec-ohttp: Binary HTTP parser infinite loop on known-length field section boundary

CVE-2026-63124

## Summary `io.netty.incubator:netty-incubator-codec-bhttp` can enter a non-terminating parse loop when a known-length

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #maven #cwe-400 #cwe-835 #severity:high

漏洞预警2026-08-20 发布INFO

Libevent is an event notification library. From 2.2.0-alpha-dev until 2.2.2-alpha, the libevent WebSocket server in ws.c accumulates fragmented frames in evws->incomplete_frames...

CVE-2026-63495

Libevent is an event notification library. From 2.2.0-alpha-dev until 2.2.2-alpha, the libevent WebSocket server in ws.c

历史摘要 · 未重新核验 · NVD

#cve #cwe-400 #cwe-770

漏洞预警2026-08-20 发布INFO

Uncontrolled Resource Consumption vulnerability in Apache InLong. Users could affect operational configuration or allow upload of non-official packages. This issue affects Apac...

CVE-2026-63016

Uncontrolled Resource Consumption vulnerability in Apache InLong. Users could affect operational configuration or allow

历史摘要 · 未重新核验 · NVD

#cve #cwe-400

漏洞预警2026-08-20 发布INFO

Uncontrolled Resource Consumption vulnerability in Apache InLong. Non-template responsible persons can view template information. This issue affects Apache InLong: from 2.0.0 b...

CVE-2026-63015

Uncontrolled Resource Consumption vulnerability in Apache InLong. Non-template responsible persons can view template inf

历史摘要 · 未重新核验 · NVD

#cve #cwe-400

安全公告2026-08-20 发布INFO

In Splunk Connect for Kafka versions below 2.2.7, an unauthenticated user who can reach the Kafka...

CVE-2026-76400

In Splunk Connect for Kafka versions below 2.2.7, an unauthenticated user who can reach the Kafka Connect Representation

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-400 #severity:medium

漏洞预警2026-08-19 发布INFO

In Splunk Connect for Kafka versions below 2.2.7, an unauthenticated user who can reach the Kafka Connect Representational State Transfer (REST) API and influence responses from...

CVE-2026-76400

In Splunk Connect for Kafka versions below 2.2.7, an unauthenticated user who can reach the Kafka Connect Representation

历史摘要 · 未重新核验 · NVD

#cve #cwe-400

漏洞预警2026-08-19 发布INFO

LiquidJS is a Shopify / GitHub Pages compatible template engine in pure JavaScript. Prior to 10.27.2, the join filter in src/filters/array.ts computes complexity from array.leng...

CVE-2026-69222

LiquidJS is a Shopify / GitHub Pages compatible template engine in pure JavaScript. Prior to 10.27.2, the join filter in

历史摘要 · 未重新核验 · NVD

#cve #cwe-400

漏洞预警2026-08-19 发布INFO

Coturn is a free open source implementation of TURN and STUN Server. In 4.15.0, an authenticated TURN user can repeatedly resume one allocation from fresh UDP 5-tuples without c...

CVE-2026-68555

Coturn is a free open source implementation of TURN and STUN Server. In 4.15.0, an authenticated TURN user can repeatedl

历史摘要 · 未重新核验 · NVD

#cve #cwe-400

漏洞预警2026-08-19 发布INFO

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to improper handling of a missing SSL client certificate.

CVE-2026-16837

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to improper

历史摘要 · 未重新核验 · NVD

#cve #cwe-400

漏洞预警2026-08-19 发布INFO

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption.

CVE-2026-16836

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to uncontro

历史摘要 · 未重新核验 · NVD

#cve #cwe-400

漏洞预警2026-08-19 发布INFO

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption.

CVE-2026-16831

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to uncontro

历史摘要 · 未重新核验 · NVD

#cve #cwe-400