#cwe-400
共收录 1383 条相关情报。
← 返回所有主题 漏洞预警2026-07-29 发布INFO
CVE-2026-63119
MCP Ruby SDK is the official Ruby SDK for Model Context Protocol servers and clients. Prior to 0.23.0, MCP::Server::Tran
历史摘要 · 未重新核验 · NVD
安全公告2026-07-29 发布INFO
CVE-2026-54712
The RMI context propagation payload reader limits the number of context entries but does not limit the aggregate size of
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-07-29 发布INFO
CVE-2026-16543
Kong Operator's embedded Kong Kubernetes Ingress Controller (KIC) allows a user with namespace-scoped Secret creation pr
历史摘要 · 未重新核验 · NVD
漏洞预警2026-07-29 发布INFO
CVE-2026-15228
Kong Kubernetes Ingress Controller (KIC) allows a user with namespace-scoped Secret creation privileges to cause a clust
历史摘要 · 未重新核验 · NVD
漏洞预警2026-07-29 发布INFO
CVE-2026-58182
The Apache Traffic Server ts_lua plugin mishandles initialization, transform context, and per-instance state.
This issu
历史摘要 · 未重新核验 · NVD
漏洞预警2026-07-29 发布INFO
CVE-2026-65324
Apache Traffic Server drops the per-stream buffer cap when dechunking HTTP/2 or HTTP/3 responses, letting a slow client
历史摘要 · 未重新核验 · NVD
漏洞预警2026-07-29 发布INFO
CVE-2026-58151
Apache Traffic Server can be crashed or driven to resource exhaustion by abusive HTTP/2 framing and flow-control.
This
历史摘要 · 未重新核验 · NVD
安全公告2026-07-28 发布INFO
CVE-2026-14981
IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7 a
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-07-28 发布INFO
CVE-2026-59942
Dompdf is an HTML to PDF converter for PHP. Versions 3.15 and prior are vulnerable to a Denial of Service (DoS) attack v
历史摘要 · 未重新核验 · NVD
漏洞预警2026-07-28 发布INFO
CVE-2026-59941
Dompdf is an HTML to PDF converter for PHP. Versions 3.15 and prior accept a BMP image and generates a PDF-compatible PN
历史摘要 · 未重新核验 · NVD
漏洞预警2026-07-28 发布INFO
CVE-2026-14981
IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7 a
历史摘要 · 未重新核验 · NVD
漏洞预警2026-07-28 发布INFO
CVE-2026-59932
PhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files. In versions 4.0.0 through 5.8.0, 3.3.0 t
历史摘要 · 未重新核验 · NVD
漏洞预警2026-07-28 发布INFO
CVE-2026-59933
PhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files. In versions 4.0.0 through 5.8.0, 3.3.0 t
历史摘要 · 未重新核验 · NVD
安全公告2026-07-28 发布INFO
CVE-2026-59932
PhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files. In versions 4.0.0 through 5.8.0, 3.3.0 t
历史摘要 · 未重新核验 · OSV.dev
安全公告2026-07-28 发布INFO
CVE-2026-59933
PhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files. In versions 4.0.0 through 5.8.0, 3.3.0 t
历史摘要 · 未重新核验 · OSV.dev
漏洞预警2026-07-28 发布INFO
CVE-2026-54609
QTI Neon is a minimal, game-agnostic, relay-based UDP multiplayer protocol library. In version 1.0.0, the relay's handle
历史摘要 · 未重新核验 · NVD
安全公告2026-07-28 发布INFO
CVE-2026-54609
QTI Neon is a minimal, game-agnostic, relay-based UDP multiplayer protocol library. In version 1.0.0, the relay's handle
历史摘要 · 未重新核验 · OSV.dev
漏洞预警2026-07-28 发布INFO
CVE-2026-66299
Uncontrolled Resource Consumption vulnerability in Apache Tomcat's WebSocket chat example.
This issue affects Apache To
历史摘要 · 未重新核验 · NVD
漏洞预警2026-07-28 发布INFO
CVE-2026-66920
Pivotick contains an uncontrolled-recursion vulnerability when processing caller-supplied graph and node data. The affec
历史摘要 · 未重新核验 · NVD
漏洞预警2026-07-28 发布INFO
CVE-2026-66913
Lookyloo did not enforce limits on the decompressed size of uploaded capture archives and compressed HAR files.
An atta
历史摘要 · 未重新核验 · NVD