#cwe-400

共收录 1396 条相关情报。

← 返回所有主题
漏洞预警2026-07-09 发布INFO

Tenda CP3 V3.0 firmware V31.1.9.91 does not validate the Content-Length header field in RTSP requests (including DESCRIBE, SETUP, and PLAY methods). When a request carrying a Co...

CVE-2026-51600

Tenda CP3 V3.0 firmware V31.1.9.91 does not validate the Content-Length header field in RTSP requests (including DESCRIB

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-09 发布INFO

The incremental HTML parser (html.parser.HTMLParser) allows for CPU denial-of-service through repeated unterminated markup declarations when processing uncontrolled data.

CVE-2026-15308

The incremental HTML parser (html.parser.HTMLParser) allows for CPU denial-of-service through repeated unterminated mark

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-08 发布INFO

CoreWCF is a port of the service side of Windows Communication Foundation (WCF) to .NET Core. Prior to 1.8.1 and 1.9.1, an unauthenticated remote attacker that can reach a NetTc...

CVE-2026-54772

CoreWCF is a port of the service side of Windows Communication Foundation (WCF) to .NET Core. Prior to 1.8.1 and 1.9.1,

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-08 发布INFO

In OpENer 2.3.0 (commit 76b95cf), a resource exhaustion (Denial of Service) vulnerability exists in its network processing loop.

CVE-2026-51535

In OpENer 2.3.0 (commit 76b95cf), a resource exhaustion (Denial of Service) vulnerability exists in its network processi

历史摘要 · 未重新核验 · NVD

安全公告2026-07-08 发布INFO

CoreWCF: Pre-authentication infinite-loop CPU exhaustion in CoreWCF net.tcp / net.pipe / net.uds framing handshake

CVE-2026-54772

CoreWCF is a port of the service side of Windows Communication Foundation (WCF) to .NET Core. Prior to 1.8.1 and 1.9.1,

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-07-08 发布HIGH

pypdf is a free and open-source pure-python PDF library. Prior to 6.14.1, an attacker can craft a PDF with a page content stream containing a not terminated inline image, causin...

CVE-2026-59936

pypdf is a free and open-source pure-python PDF library. Prior to 6.14.1, an attacker can craft a PDF with a page conten

来源摘录 · NVD

漏洞预警2026-07-08 发布INFO

NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system. Prior to 2.14.3 and 2.12.12, an unauthenticated MQTT client could cause the ser...

CVE-2026-58210

NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system. Prior to 2.14.3 and 2.

历史摘要 · 未重新核验 · NVD

安全公告2026-07-08 发布INFO

NATS Server: MQTT partial CONNECT packets can exhaust pre-auth memory

CVE-2026-58210

NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system. Prior to 2.14.3 and 2.

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-07-08 发布INFO

pypdf: Possible infinite loop for not terminated inline images

CVE-2026-59936

pypdf is a free and open-source pure-python PDF library. Prior to 6.14.1, an attacker can craft a PDF with a page conten

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-07-08 发布HIGH

pypdf is a free and open-source pure-python PDF library. Prior to 6.14.0, an attacker can craft a PDF with repeated malformed cross-reference streams that cause pypdf to spend l...

CVE-2026-59937

pypdf is a free and open-source pure-python PDF library. Prior to 6.14.0, an attacker can craft a PDF with repeated malf

来源摘录 · NVD

安全公告2026-07-08 发布INFO

pypdf: Possible long runtimes for repeated malformed cross-reference entries

CVE-2026-59937

pypdf is a free and open-source pure-python PDF library. Prior to 6.14.0, an attacker can craft a PDF with repeated malf

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-07-08 发布INFO

Immutable.js provides many Persistent Immutable data structures. Prior to 4.3.9 and 5.1.8, List#set, List#setSize, List#setIn, List#updateIn, and the functional set, setIn, and ...

CVE-2026-59879

Immutable.js provides many Persistent Immutable data structures. Prior to 4.3.9 and 5.1.8, List#set, List#setSize, List#

历史摘要 · 未重新核验 · NVD

安全公告2026-07-08 发布INFO

Immutable.js `List` 32-bit trie overflow → unrecoverable DoS

CVE-2026-59879

Immutable.js provides many Persistent Immutable data structures. Prior to 4.3.9 and 5.1.8, List#set, List#setSize, List#

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-07-07 发布INFO

ratex-parser has unbounded parser recursion that leads to stack overflow (process abort)

CVE-2026-53531

### Summary RaTeX’s recursive-descent parser recurses one (or more) native stack frame per nesting level at `{`, `\lef

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-07 发布INFO

ratex-parser panics on `\verb` with a multibyte delimiter (UTF-8 byte-boundary slice)

CVE-2026-53530

### Summary The public parser entrypoint `ratex_parser::parse(&str)` panics on the **9-byte** input `\verbéxé` (i.e. `\

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-06 发布INFO

mv: symlinks expanded during cross-device move (resource exhaustion / data duplication)

CVE-2026-35365

When moving directories across filesystems, uutils `mv` dereferences symlinks inside the tree, copying their targets as

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-06 发布INFO

cp: -R reads device nodes as streams, destroying device semantics

CVE-2026-35358

The cp utility in uutils coreutils, when performing recursive copies (-R), incorrectly treats character and block device

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-07-06 发布INFO

vLLM is an inference and serving engine for large language models. From 0.22.0 to 0.23.0, the /v1/audio/transcriptions and /v1/audio/translations routes call request.file.read()...

CVE-2026-55646

vLLM is an inference and serving engine for large language models. From 0.22.0 to 0.23.0, the /v1/audio/transcriptions a

历史摘要 · 未重新核验 · NVD

安全公告2026-07-06 发布INFO

BeyondTrust Remote Support and Privileged Remote Access contain a high-severity pre...

CVE-2026-40140

BeyondTrust Remote Support and Privileged Remote Access contain a high-severity pre-authentication vulnerability in the

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-07-06 发布INFO

BeyondTrust Remote Support and Privileged Remote Access contain a high-severity pre-authentication vulnerability in the network communication subsystem. Insufficient validation ...

CVE-2026-40140

BeyondTrust Remote Support and Privileged Remote Access contain a high-severity pre-authentication vulnerability in the

历史摘要 · 未重新核验 · NVD