#cwe-400

共收录 1383 条相关情报。

← 返回所有主题
漏洞预警2026-07-21 发布INFO

Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.9-12.2.15. Easily explo...

CVE-2026-62465

Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: Internal Operations). Supported ve

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-21 发布INFO

Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer). Supported versions that are affected are 12.2.3-12.2.15. Diff...

CVE-2026-61247

Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer). Supp

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-21 发布INFO

Netty is a network application framework for development of protocol servers and clients. Prior to 4.2.16.Final, Netty's `Http3FrameCodec` buffers incoming data for HTTP/3 reser...

CVE-2026-56816

Netty is a network application framework for development of protocol servers and clients. Prior to 4.2.16.Final, Netty's

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-21 发布INFO

Netty is a network application framework for development of protocol servers and clients. In versions 4.2.0.Final through 4.2.15.Final and 4.1.0.Final through 4.1.135.Final, the...

CVE-2026-56745

Netty is a network application framework for development of protocol servers and clients. In versions 4.2.0.Final throug

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-21 发布INFO

Netty is a network application framework for development of protocol servers and clients. In versions 4.2.0.Final up to (but not including) 4.2.16.Final, and 4.1.0.Final up to (...

CVE-2026-55851

Netty is a network application framework for development of protocol servers and clients. In versions 4.2.0.Final up to

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-21 发布INFO

In Zephyr's Bluetooth Mesh PB-ADV provisioning bearer (subsys/bluetooth/mesh/pb_adv.c), prov_msg_recv() rescheduled the provisioning protocol watchdog timer unconditionally at t...

CVE-2026-10675

In Zephyr's Bluetooth Mesh PB-ADV provisioning bearer (subsys/bluetooth/mesh/pb_adv.c), prov_msg_recv() rescheduled the

历史摘要 · 未重新核验 · NVD

安全公告2026-07-21 发布INFO

Netty: HTTP/2 decompression leaks ByteBuf reference count when the decompressor channel is already closed (Direct memory leak / OOM DoS)

CVE-2026-56819

Netty is a network application framework for development of protocol servers and clients. In versions 4.2.0.Final throug

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-07-21 发布INFO

Netty: Memory Exhaustion via HTTP/3 Reserved Frame Types

CVE-2026-56816

Netty is a network application framework for development of protocol servers and clients. Prior to 4.2.16.Final, Netty's

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-07-21 发布INFO

Netty SpdyHttpDecoder: ByteBuf Reference Leak on RST_STREAM Leads to Native Memory Exhaustion

CVE-2026-56745

Netty is a network application framework for development of protocol servers and clients. In versions 4.2.0.Final throug

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-07-21 发布INFO

Bluetooth Mesh PB-ADV: invalidated provisioning link kept alive indefinitely, blocking (re)provisioning (DoS)

CVE-2026-10675

In Zephyr's Bluetooth Mesh PB-ADV provisioning bearer (subsys/bluetooth/mesh/pb_adv.c), prov_msg_recv() rescheduled the

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-07-21 发布INFO

Netty codec-haproxy: Signed-Byte Sentinel Collision in HAProxyMessageDecoder Leads to Unbounded Memory Exhaustion

CVE-2026-55851

Netty is a network application framework for development of protocol servers and clients. In versions 4.2.0.Final up to

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-07-21 发布INFO

Uncontrolled Resource Consumption (CWE-400) in Kibana can lead to denial of service via Excessive Allocation (CAPEC-130). An authenticated low-privileged user can exploit an unc...

CVE-2026-63139

Uncontrolled Resource Consumption (CWE-400) in Kibana can lead to denial of service via Excessive Allocation (CAPEC-130)

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-21 发布INFO

Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Excessive Allocation (CAPEC-130). A user with search privileges can submit a speci...

CVE-2026-63136

Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Excessive Allocation (CAP

历史摘要 · 未重新核验 · NVD

安全公告2026-07-21 发布INFO

Gitea SSH Key Parser Denial of Service

CVE-2026-56657

Gitea's SSH key ingestion endpoint accepts keys in RFC 4716 (SSH2) format and normalises them before storage. The normal

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-07-21 发布INFO

Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Excessive Allocation (CAPEC-130). A low-privileged authenticated user with permiss...

CVE-2026-56145

Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Excessive Allocation (CAP

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-21 发布INFO

This High severity DoS (Denial of Service) vulnerability was introduced in versions 9.0.1, 9.1.0, 9.2.0, 9.3.1, 9.4.0, 9.5.1, 10.0.2, 10.1.0 and 10.2.0 of Confluence Data Center...

CVE-2026-21577

This High severity DoS (Denial of Service) vulnerability was introduced in versions 9.0.1, 9.1.0, 9.2.0, 9.3.1, 9.4.0, 9

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-21 发布INFO

A flaw was found in libssh. A remote authenticated peer can advertise a zero maximum packet size in SSH_MSG_CHANNEL_OPEN, causing later channel writes to loop indefinitely and c...

CVE-2026-59843

A flaw was found in libssh. A remote authenticated peer can advertise a zero maximum packet size in SSH_MSG_CHANNEL_OPEN

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-21 发布INFO

Netty is a network application framework for development of protocol servers and clients. Prior to 4.1.136.Final and 4.2.16.Final, Netty SPDY header decoding continues inflating...

CVE-2026-55833

Netty is a network application framework for development of protocol servers and clients. Prior to 4.1.136.Final and 4.2

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-21 发布INFO

Netty is a network application framework for development of protocol servers and clients. Prior to 4.1.136.Final and 4.2.16.Final, Netty's SPDY SETTINGS decoder accepts a peer-d...

CVE-2026-55831

Netty is a network application framework for development of protocol servers and clients. Prior to 4.1.136.Final and 4.2

历史摘要 · 未重新核验 · NVD

安全公告2026-07-20 发布INFO

Pillow: Decompression Bomb DoS via PdfParser.PdfStream.decode()

CVE-2026-59200

### Summary `PdfParser.PdfStream.decode()` in Pillow's `PdfParser.py` calls `zlib.decompress()` with the `bufsize` param

历史摘要 · 未重新核验 · GitHub Advisory