#cwe-400
共收录 1396 条相关情报。
← 返回所有主题 漏洞预警2026-06-17 发布INFO
CVE-2026-50196
Steeltoe is an open source project that provides a collection of libraries that helps users build cloud-native applicati
历史摘要 · 未重新核验 · NVD
漏洞预警2026-06-17 发布INFO
CVE-2026-48990
joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption (JOSE) standar
历史摘要 · 未重新核验 · NVD
漏洞预警2026-06-17 发布INFO
CVE-2026-48988
markdown-it is a Markdown parser. Versions 14.1.1 and below contain a denial-of-service vulnerability when typographer:
历史摘要 · 未重新核验 · NVD
安全公告2026-06-17 发布INFO
CVE-2026-55450
### Summary
Unauthenticated users can upload any amount of data to the server without any limitations. No need for any p
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-06-17 发布INFO
CVE-2026-5079
### Impact
Multer is vulnerable to a Denial of Service (DoS) via deeply nested field names in multipart form data. The
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-06-16 发布INFO
CVE-2026-12325
Denial-of-service in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12,
历史摘要 · 未重新核验 · NVD
漏洞预警2026-06-16 发布INFO
CVE-2026-12319
Denial-of-service in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 152 and Thunderbird 15
历史摘要 · 未重新核验 · NVD
安全公告2026-06-15 发布INFO
CVE-2026-50011
### Summary
RedisArrayAggregator pre-allocates ArrayList with initial capacity equal to the RESP array element count dec
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-06-15 发布INFO
CVE-2026-48988
### Summary
A quadratic time complexity vulnerability exists in markdown-it's smartquotes rule (enabled via the `typogr
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-06-15 发布INFO
CVE-2026-53539
### Summary
When parsing `application/x-www-form-urlencoded` bodies, `QuerystringParser` located the field separator wi
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-06-15 发布INFO
CVE-2026-50889
An input handling flaw in the HTTP refresh token process of LLDAP v0.6.2 allows attackers to cause a Denial of Service (
历史摘要 · 未重新核验 · NVD
漏洞预警2026-06-15 发布INFO
CVE-2026-50882
An issue in the /api/v0/pastes endpoint of anna-is-cute paste v0.1.1 allows attackers to cause a Denial of Service (DoS)
历史摘要 · 未重新核验 · NVD
漏洞预警2026-06-15 发布INFO
CVE-2026-50879
An issue in the uploadPostHandler component of Andrei Marcu linx-server v2.3.8 allows attackers to cause a Denial of Ser
历史摘要 · 未重新核验 · NVD
漏洞预警2026-06-15 发布INFO
CVE-2026-50878
An issue in the attachment handling component of Feuerhamster MailForm v1.1.0 allows attackers to cause a Denial of Serv
历史摘要 · 未重新核验 · NVD
漏洞预警2026-06-15 发布INFO
CVE-2026-41708
In Spring Cloud Sleuth, it is possible for a user to provide specially crafted calls that may cause a denial-of-service
历史摘要 · 未重新核验 · NVD
漏洞预警2026-06-15 发布INFO
CVE-2026-39197
An issue in the /util/http/prelude.rs endpoint of Datadog, Inc Vector v0.54.0 allows attackers to cause a Denial of Serv
历史摘要 · 未重新核验 · NVD
安全公告2026-06-15 发布INFO
CVE-2026-48125
### Summary
A regular expression denial-of-service (ReDoS) vulnerability has been discovered in `ua-parser-js` when usi
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-06-15 发布INFO
CVE-2026-45591
## Executive summary
Microsoft is releasing this security advisory to provide information about a vulnerability in ASP.
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-06-15 发布INFO
CVE-2026-5079
Impact: multer versions 1.0.0 through 2.1.1 and 3.0.0-alpha.1 are vulnerable to a Denial of Service via deeply nested fi
历史摘要 · 未重新核验 · NVD
安全公告2026-06-12 发布INFO
CVE-2026-54092
### Summary
Unchecked passwords maximums allow for an arbitrarily large password to be passed into the login API. This s
历史摘要 · 未重新核验 · GitHub Advisory