#cwe-400

共收录 1383 条相关情报。

← 返回所有主题
漏洞预警2026-07-28 发布INFO

Addressing certain issues, in particular related to operations which may take excessively long and therefore would need preemption, has turned out overly costly. Since alternat...

CVE-2026-42493

Addressing certain issues, in particular related to operations which may take excessively long and therefore would need

历史摘要 · 未重新核验 · NVD

安全公告2026-07-28 发布INFO

Pivotick - Stack Exhaustion Denial of Service via Deep or Cyclic Graph Data

CVE-2026-66920

Pivotick contains an uncontrolled-recursion vulnerability when processing caller-supplied graph and node data. The affec

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-07-28 发布INFO

Zip Bomb in Lookyloo Capture Upload Allows Denial of Service

CVE-2026-66913

Lookyloo did not enforce limits on the decompressed size of uploaded capture archives and compressed HAR files. An atta

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-07-27 发布INFO

An issue was discovered in OpenSBI 1.3 allowing attackers to cause a denial of service via crafted request to the SBI function #2 or the 'Find and configure a matching counter' ...

CVE-2025-63913

An issue was discovered in OpenSBI 1.3 allowing attackers to cause a denial of service via crafted request to the SBI fu

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-27 发布INFO

React Router is a router for React. In versions 7.0.0 through 7.17.0, the manifest endpoint could be accessed via unauthenticated targeted requests that would put heavy load on ...

CVE-2026-55685

React Router is a router for React. In versions 7.0.0 through 7.17.0, the manifest endpoint could be accessed via unauth

历史摘要 · 未重新核验 · NVD

安全公告2026-07-27 发布INFO

React Router: Unauthenticated Denial of Service via Inefficient Route Matching

CVE-2026-55685

React Router is a router for React. In versions 7.0.0 through 7.17.0, the manifest endpoint could be accessed via unauth

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-07-27 发布INFO

The issue was addressed with improved memory handling. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, v...

CVE-2026-64724

The issue was addressed with improved memory handling. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-27 发布INFO

A denial of service issue was addressed by removing the vulnerable code. This issue is fixed in macOS Tahoe 26.6. A local attacker may be able to cause a denial of service.

CVE-2026-43806

A denial of service issue was addressed by removing the vulnerable code. This issue is fixed in macOS Tahoe 26.6. A loca

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-27 发布INFO

This issue was addressed through improved state management. This issue is fixed in Safari 26.6, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, visionOS 26.6. Visiting a website may...

CVE-2026-43804

This issue was addressed through improved state management. This issue is fixed in Safari 26.6, iOS 26.6 and iPadOS 26.6

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-27 发布INFO

The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to cause unexpected...

CVE-2026-43768

The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8,

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-27 发布INFO

A logic issue existed resulting in memory corruption. This was addressed with improved state management. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS ...

CVE-2026-28932

A logic issue existed resulting in memory corruption. This was addressed with improved state management. This issue is f

历史摘要 · 未重新核验 · NVD

安全公告2026-07-27 发布INFO

A flaw has been found in ggml-org llama.cpp e15efe0. This vulnerability affects the function...

CVE-2026-17501

A flaw has been found in ggml-org llama.cpp e15efe0. This vulnerability affects the function transform of the file commo

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-07-27 发布INFO

A flaw has been found in ggml-org llama.cpp e15efe0. This vulnerability affects the function transform of the file common/json-schema-to-grammar.cpp of the component JSON-Schema...

CVE-2026-17501

A flaw has been found in ggml-org llama.cpp e15efe0. This vulnerability affects the function transform of the file commo

历史摘要 · 未重新核验 · NVD

安全公告2026-07-24 发布INFO

libp2p: yamux connection DoS via oversized data frame

### Summary The yamux stream multiplexer in py-libp2p does not validate incoming DATA frame lengths against the receive

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-24 发布INFO

Shescape: Quadratic-time denial of service in the flag-protection

### Impact This impacts users of Shescape that have flag protection enabled, which is on by default, regardless of the

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-24 发布INFO

brace-expansion: DoS via unbounded expansion length causing an out-of-memory process crash

CVE-2026-14257

### Summary `expand()` bounds the *number* of results it produces (the `max` option, `100_000` by default) but not thei

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-24 发布INFO

@anephenix/hub: Unauthenticated WebSocket RPC Waiter Resource Exhaustion

### Summary `@anephenix/hub` starts a `setInterval` polling loop for every incoming WebSocket connection to request a c

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-24 发布INFO

OpenDJ unauthenticated SSRF, local file read and unbounded-read DoS in the DSMLv2 gateway

The DSMLv2 SOAP gateway (opendj-dsml-servlet) in OpenIdentityPlatform OpenDJ through 5.1.1 dereferences attacker-supplie

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-24 发布INFO

react-server-dom: Denial of Service in Server Functions

CVE-2026-44907

### Impact A denial of service vulnerability could be triggered by sending specially crafted HTTP requests to server fu

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-24 发布INFO

Cloudreve: Denial of Service - Image decompression / pixel bomb in thumbnail & avatar decoding crashes the server

CVE-2026-55497

## Summary Cloudreve's built-in image processor decodes user-supplied images with Go's standard-library decoders (`imag

历史摘要 · 未重新核验 · GitHub Advisory