#cwe-400

共收录 1396 条相关情报。

← 返回所有主题
漏洞预警2026-06-17 发布INFO

Steeltoe is an open source project that provides a collection of libraries that helps users build cloud-native applications. In Steeltoe.Discovery.Eureka prior to versions 4.2.0...

CVE-2026-50196

Steeltoe is an open source project that provides a collection of libraries that helps users build cloud-native applicati

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-17 发布INFO

joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption (JOSE) standards. In versions 1.3.4 through 1.6.5, joserfc accepts over...

CVE-2026-48990

joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption (JOSE) standar

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-17 发布INFO

markdown-it is a Markdown parser. Versions 14.1.1 and below contain a denial-of-service vulnerability when typographer: true is enabled, due to quadratic (O(n^2)) processing in ...

CVE-2026-48988

markdown-it is a Markdown parser. Versions 14.1.1 and below contain a denial-of-service vulnerability when typographer:

历史摘要 · 未重新核验 · NVD

安全公告2026-06-17 发布INFO

Langflow: Unauthenticated file upload leads to DoS (space exhaustion) and information leak

CVE-2026-55450

### Summary Unauthenticated users can upload any amount of data to the server without any limitations. No need for any p

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-17 发布INFO

Multer vulnerable to Denial of Service via deeply nested field names

CVE-2026-5079

### Impact Multer is vulnerable to a Denial of Service (DoS) via deeply nested field names in multipart form data. The

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-06-16 发布INFO

Denial-of-service in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12.

CVE-2026-12325

Denial-of-service in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12,

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-16 发布INFO

Denial-of-service in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 152 and Thunderbird 152.

CVE-2026-12319

Denial-of-service in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 152 and Thunderbird 15

历史摘要 · 未重新核验 · NVD

安全公告2026-06-15 发布INFO

Netty: Unbounded pre-allocation in RedisArrayAggregator from RESP array length

CVE-2026-50011

### Summary RedisArrayAggregator pre-allocates ArrayList with initial capacity equal to the RESP array element count dec

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-15 发布INFO

markdown-it: Quadratic complexity DoS in smartquotes rule via replaceAt string operations

CVE-2026-48988

### Summary A quadratic time complexity vulnerability exists in markdown-it's smartquotes rule (enabled via the `typogr

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-15 发布INFO

python-multipart: Quadratic-time querystring parsing with semicolon separators causes CPU denial of service

CVE-2026-53539

### Summary When parsing `application/x-www-form-urlencoded` bodies, `QuerystringParser` located the field separator wi

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-06-15 发布INFO

An input handling flaw in the HTTP refresh token process of LLDAP v0.6.2 allows attackers to cause a Denial of Service (DoS) via sending a crafted refresh-token header.

CVE-2026-50889

An input handling flaw in the HTTP refresh token process of LLDAP v0.6.2 allows attackers to cause a Denial of Service (

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-15 发布INFO

An issue in the /api/v0/pastes endpoint of anna-is-cute paste v0.1.1 allows attackers to cause a Denial of Service (DoS) via a crafted POST request.

CVE-2026-50882

An issue in the /api/v0/pastes endpoint of anna-is-cute paste v0.1.1 allows attackers to cause a Denial of Service (DoS)

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-15 发布INFO

An issue in the uploadPostHandler component of Andrei Marcu linx-server v2.3.8 allows attackers to cause a Denial of Service (DoS) via a crafted POST request.

CVE-2026-50879

An issue in the uploadPostHandler component of Andrei Marcu linx-server v2.3.8 allows attackers to cause a Denial of Ser

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-15 发布INFO

An issue in the attachment handling component of Feuerhamster MailForm v1.1.0 allows attackers to cause a Denial of Service (DoS) via a crafted request.

CVE-2026-50878

An issue in the attachment handling component of Feuerhamster MailForm v1.1.0 allows attackers to cause a Denial of Serv

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-15 发布INFO

In Spring Cloud Sleuth, it is possible for a user to provide specially crafted calls that may cause a denial-of-service (DoS) condition. The application is vulnerable when it us...

CVE-2026-41708

In Spring Cloud Sleuth, it is possible for a user to provide specially crafted calls that may cause a denial-of-service

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-15 发布INFO

An issue in the /util/http/prelude.rs endpoint of Datadog, Inc Vector v0.54.0 allows attackers to cause a Denial of Service (DoS) via a crafted request or payload.

CVE-2026-39197

An issue in the /util/http/prelude.rs endpoint of Datadog, Inc Vector v0.54.0 allows attackers to cause a Denial of Serv

历史摘要 · 未重新核验 · NVD

安全公告2026-06-15 发布INFO

UAParser.js: Unbounded `Sec-CH-UA-Model` parsing can trigger ReDoS in `withClientHints()`

CVE-2026-48125

### Summary A regular expression denial-of-service (ReDoS) vulnerability has been discovered in `ua-parser-js` when usi

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-15 发布INFO

Microsoft Security Advisory CVE-2026-45591 – ASP.NET Core Denial of Service Vulnerability

CVE-2026-45591

## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in ASP.

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-06-15 发布INFO

Impact: multer versions 1.0.0 through 2.1.1 and 3.0.0-alpha.1 are vulnerable to a Denial of Service via deeply nested field names in multipart form data. The append-field depend...

CVE-2026-5079

Impact: multer versions 1.0.0 through 2.1.1 and 3.0.0-alpha.1 are vulnerable to a Denial of Service via deeply nested fi

历史摘要 · 未重新核验 · NVD

安全公告2026-06-12 发布INFO

File Browser has a DoS Vulnerability via Public Login API

CVE-2026-54092

### Summary Unchecked passwords maximums allow for an arbitrarily large password to be passed into the login API. This s

历史摘要 · 未重新核验 · GitHub Advisory