#cwe-400

共收录 1396 条相关情报。

← 返回所有主题
漏洞预警2026-07-01 发布INFO

The following Poly Voice IP devices, CCX, Trio, and Edge E, might be inoperable if they connect to a malicious SIP server and receive malformed data. HP is releasing updates to ...

CVE-2026-2891

The following Poly Voice IP devices, CCX, Trio, and Edge E, might be inoperable if they connect to a malicious SIP serve

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-01 发布INFO

A malicious LDAP server, which a Thunderbird user is configured to query for address-book autocomplete, can stash arbitrarily large amounts of attacker-supplied data into the Th...

CVE-2026-57962

A malicious LDAP server, which a Thunderbird user is configured to query for address-book autocomplete, can stash arbitr

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-30 发布INFO

An issue in UTT nv518G nv518GV3v3.2.7-210919-161313 allows a remote attacker to cause a denial of service via the gohead/sub_44af70 component

CVE-2026-52197

An issue in UTT nv518G nv518GV3v3.2.7-210919-161313 allows a remote attacker to cause a denial of service via the gohead

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-30 发布MEDIUM

pypdf is a free and open-source pure-python PDF library. Prior to 6.13.3, a maliciously crafted PDF can cause DoS. An attacker who uses this vulnerability can craft a PDF which ...

CVE-2026-57204

pypdf is a free and open-source pure-python PDF library. Prior to 6.13.3, a maliciously crafted PDF can cause DoS. An at

来源摘录 · NVD

漏洞预警2026-06-30 发布INFO

IBM WebSphere Extreme Scale 8.6.1.0 through 8.6.1.6 could allow an adjacent attacker to cause a denial of service due to improper validation in the XDF decoder. The application ...

CVE-2026-9002

IBM WebSphere Extreme Scale 8.6.1.0 through 8.6.1.6 could allow an adjacent attacker to cause a denial of service due to

历史摘要 · 未重新核验 · NVD

安全公告2026-06-30 发布INFO

oban_web: Unbounded range expansion in cron describe causes memory exhaustion

CVE-2026-48593

### Summary `oban_web` 2.12.0 introduced a cron expression parser that expands `-`-separated ranges without validating

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-06-30 发布INFO

Net::BitTorrent versions through 2.0.1 for Perl allow remote memory exhaustion via deeply nested bencoded input. bdecode recurses once per nested list or dictionary level with ...

CVE-2026-57081

Net::BitTorrent versions through 2.0.1 for Perl allow remote memory exhaustion via deeply nested bencoded input. bdecod

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-30 发布INFO

Net::BitTorrent versions through 2.0.1 for Perl allow remote memory exhaustion via an uncapped peer-wire message-length prefix. The peer-wire framing in _process_messages trust...

CVE-2026-57080

Net::BitTorrent versions through 2.0.1 for Perl allow remote memory exhaustion via an uncapped peer-wire message-length

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-30 发布INFO

Denial of Service via Out of Memory vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ, Apache ActiveMQ All. Following the fix for CVE-2026-49270 an unauthenticated atta...

CVE-2026-50750

Denial of Service via Out of Memory vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ, Apache ActiveMQ All. Foll

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-30 发布INFO

brace-expansion through 5.0.6 is vulnerable to denial of service. The expand() function exhibits exponential-time complexity in the number of consecutive non-expanding '{}' brac...

CVE-2026-13149

brace-expansion through 5.0.6 is vulnerable to denial of service. The expand() function exhibits exponential-time comple

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-30 发布INFO

decode-uri-component through 0.4.1 is vulnerable to denial of service. The decode() function splits input on '%' producing N tokens and calls decodeComponents(), exhibiting supe...

CVE-2026-45822

decode-uri-component through 0.4.1 is vulnerable to denial of service. The decode() function splits input on '%' produci

历史摘要 · 未重新核验 · NVD

安全公告2026-06-29 发布INFO

JavaScript::Minifier::XS versions before 0.16 for Perl leak memory on every call to minify(),...

CVE-2026-56018

JavaScript::Minifier::XS versions before 0.16 for Perl leak memory on every call to minify(), allowing unbounded memory

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-06-29 发布INFO

JavaScript::Minifier::XS versions before 0.16 for Perl leak memory on every call to minify(), allowing unbounded memory growth. In JsMinify (XS.xs) the cleanup frees only the N...

CVE-2026-56018

JavaScript::Minifier::XS versions before 0.16 for Perl leak memory on every call to minify(), allowing unbounded memory

历史摘要 · 未重新核验 · NVD

安全公告2026-06-26 发布INFO

js-toml vulnerable to CPU exhaustion via O(n^2) BigInt construction on radix-prefixed integer literals

CVE-2026-49293

## Summary `js-toml` versions up to and including **1.1.0** parse hexadecimal / octal / binary integer literals via a h

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-26 发布INFO

Hackney has unbounded buffer accumulation in WebSocket

CVE-2026-47073

### Summary The WebSocket client in `src/hackney_ws.erl` imposes no upper bound on memory consumption across three dist

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-26 发布INFO

Hackney: Per-chunk timeout with unbounded body accumulation enables slow-drip OOM

CVE-2026-47074

### Summary `hackney_h3:await_response_loop/6` in `src/hackney_h3.erl` accumulates the HTTP/3 response body in memory w

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-26 发布INFO

Hackney: `ssl:connect/2` post-handshake upgrade has no timeout

CVE-2026-47071

### Summary The SOCKS5 transport in `src/hackney_socks5.erl` correctly applies the caller-supplied timeout to the SOCKS

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-06-26 发布INFO

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. Prior to 2.94.0, the HTML backend has unsafe URI a...

CVE-2026-47214

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecos

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-26 发布INFO

An integer overflow in the PSD parser compnent of FastStone Image Viewer v8.3 allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via supplying a craft...

CVE-2026-30041

An integer overflow in the PSD parser compnent of FastStone Image Viewer v8.3 allows attackers to execute arbitrary code

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-26 发布INFO

By sending a deeply nested ASN1 structure to a Apache Kerby client or service, it's possible to trigger a StackOverFlow Exception which can lead to denial of service issues. Use...

CVE-2026-57914

By sending a deeply nested ASN1 structure to a Apache Kerby client or service, it's possible to trigger a StackOverFlow

历史摘要 · 未重新核验 · NVD