#cwe-400

共收录 1396 条相关情报。

← 返回所有主题
漏洞预警2026-06-10 发布INFO

libp2p is a JavaScript Implementation of libp2p networking stack. Prior to version 16.2.6, an unauthenticated remote peer can exhaust the disk storage of any @libp2p/kad-dht nod...

CVE-2026-45783

libp2p is a JavaScript Implementation of libp2p networking stack. Prior to version 16.2.6, an unauthenticated remote pee

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-10 发布INFO

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-47 and 7.1.2-22, because of a missing check in the MNG co...

CVE-2026-45664

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-10 发布INFO

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-47 and 7.1.2-22, due to a missing check in the PSD decode...

CVE-2026-45031

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-10 发布INFO

kafka-python prior to 2.3.2 contains a denial-of-service vulnerability in SCRAM authentication handling that allows a malicious or machine-in-the-middle broker to freeze the cli...

CVE-2026-10143

kafka-python prior to 2.3.2 contains a denial-of-service vulnerability in SCRAM authentication handling that allows a ma

历史摘要 · 未重新核验 · NVD

安全公告2026-06-10 发布INFO

Spring Data Commons contains a vulnerability that can lead to a Denial of Service (DoS) condition...

CVE-2026-41721

Spring Data Commons contains a vulnerability that can lead to a Denial of Service (DoS) condition if Spring Data Web Sup

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-10 发布INFO

An application using spring-security-saml2-service-provider and the REDIRECT binding for SAML 2.0...

CVE-2026-40988

An application using spring-security-saml2-service-provider and the REDIRECT binding for SAML 2.0 Login or Logout may be

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-10 发布INFO

Applications using Spring Data Commons may be vulnerable to a Denial of Service (DoS) attack...

CVE-2026-41711

Applications using Spring Data Commons may be vulnerable to a Denial of Service (DoS) attack leading to a StackOverflowE

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-10 发布INFO

CAI Content Credentials versions c2pa-web@0.7.1, c2pa-v0.80.1 and earlier are affected by an...

CVE-2026-47905

CAI Content Credentials versions c2pa-web@0.7.1, c2pa-v0.80.1 and earlier are affected by an Uncontrolled Resource Consu

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-10 发布INFO

CAI Content Credentials versions c2pa-web@0.7.1, c2pa-v0.80.1 and earlier are affected by an...

CVE-2026-34713

CAI Content Credentials versions c2pa-web@0.7.1, c2pa-v0.80.1 and earlier are affected by an Uncontrolled Resource Consu

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-10 发布INFO

CAI Content Credentials versions c2pa-web@0.7.1, c2pa-v0.80.1 and earlier are affected by an...

CVE-2026-47904

CAI Content Credentials versions c2pa-web@0.7.1, c2pa-v0.80.1 and earlier are affected by an Uncontrolled Resource Consu

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-10 发布INFO

CAI Content Credentials versions c2pa-web@0.7.1, c2pa-v0.80.1 and earlier are affected by an...

CVE-2026-47902

CAI Content Credentials versions c2pa-web@0.7.1, c2pa-v0.80.1 and earlier are affected by an Uncontrolled Resource Consu

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-06-10 发布INFO

Spring Data Commons contains a vulnerability that can lead to a Denial of Service (DoS) condition if Spring Data Web Support is enabled in conjunction with a Controller method u...

CVE-2026-41721

Spring Data Commons contains a vulnerability that can lead to a Denial of Service (DoS) condition if Spring Data Web Sup

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-10 发布INFO

Applications using Spring Data Commons may be vulnerable to a Denial of Service (DoS) attack leading to a StackOverflowException when parsing Sort parameters. Affected versions...

CVE-2026-41711

Applications using Spring Data Commons may be vulnerable to a Denial of Service (DoS) attack leading to a StackOverflowE

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-10 发布INFO

Spring Data Commons applications may be vulnerable to denial of service through resource exhaustion when attacker-controlled property path strings are passed to MappingContext p...

CVE-2026-41695

Spring Data Commons applications may be vulnerable to denial of service through resource exhaustion when attacker-contro

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-10 发布INFO

An application using spring-security-saml2-service-provider and the REDIRECT binding for SAML 2.0 Login or Logout may be vulnerable to a denial of service by way of an unbounded...

CVE-2026-40988

An application using spring-security-saml2-service-provider and the REDIRECT binding for SAML 2.0 Login or Logout may be

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-09 发布INFO

SQLFluff is a modular SQL linter and auto-formatter with support for multiple dialects and templated code. Prior to version 4.2.0, in deployments where untrusted users can provi...

CVE-2026-46374

SQLFluff is a modular SQL linter and auto-formatter with support for multiple dialects and templated code. Prior to vers

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-09 发布INFO

CAI Content Credentials versions c2pa-web@0.7.1, c2pa-v0.80.1 and earlier are affected by an Uncontrolled Resource Consumption vulnerability. An attacker could exploit this vuln...

CVE-2026-47905

CAI Content Credentials versions c2pa-web@0.7.1, c2pa-v0.80.1 and earlier are affected by an Uncontrolled Resource Consu

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-09 发布INFO

CAI Content Credentials versions c2pa-web@0.7.1, c2pa-v0.80.1 and earlier are affected by an Uncontrolled Resource Consumption vulnerability. An attacker could exploit this vuln...

CVE-2026-47904

CAI Content Credentials versions c2pa-web@0.7.1, c2pa-v0.80.1 and earlier are affected by an Uncontrolled Resource Consu

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-09 发布INFO

CAI Content Credentials versions c2pa-web@0.7.1, c2pa-v0.80.1 and earlier are affected by an Uncontrolled Resource Consumption vulnerability. An attacker could exploit this vuln...

CVE-2026-47902

CAI Content Credentials versions c2pa-web@0.7.1, c2pa-v0.80.1 and earlier are affected by an Uncontrolled Resource Consu

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-09 发布INFO

CAI Content Credentials versions c2pa-web@0.7.1, c2pa-v0.80.1 and earlier are affected by an Uncontrolled Resource Consumption vulnerability. An attacker could exploit this vuln...

CVE-2026-34713

CAI Content Credentials versions c2pa-web@0.7.1, c2pa-v0.80.1 and earlier are affected by an Uncontrolled Resource Consu

历史摘要 · 未重新核验 · NVD