#cwe-400

共收录 1396 条相关情报。

← 返回所有主题
漏洞预警2026-05-05 发布INFO

CoreDNS is a DNS server that chains plugins. In versions prior to 1.14.3, the DNS-over-HTTPS (DoH) GET path accepts oversized dns= query parameter values and performs URL query ...

CVE-2026-32936

CoreDNS is a DNS server that chains plugins. In versions prior to 1.14.3, the DNS-over-HTTPS (DoH) GET path accepts over

历史摘要 · 未重新核验 · NVD

安全公告2026-05-05 发布INFO

Prometheus: Remote read endpoint allows denial of service via crafted snappy payload

CVE-2026-42154

### Impact The remote read endpoint (`/api/v1/read`) does not validate the declared decoded length in a snappy-compress

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-05 发布INFO

Origin Validation Error, Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request...

CVE-2026-43870

Origin Validation Error, Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), Improper Neutra

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-04 发布INFO

Prometheus is an open-source monitoring system and time series database. Prior to versions 3.5.3 and 3.11.3, the remote read endpoint (/api/v1/read) does not validate the declar...

CVE-2026-42154

Prometheus is an open-source monitoring system and time series database. Prior to versions 3.5.3 and 3.11.3, the remote

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-04 发布INFO

An integer underflow in FRRouting (FRR) stable/10.0 to stable/10.6 allows attackers to cause a Denial of Service (DoS) via supplying a crafted BGP UPDATE message.

CVE-2026-37459

An integer underflow in FRRouting (FRR) stable/10.0 to stable/10.6 allows attackers to cause a Denial of Service (DoS) v

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-04 发布INFO

An issue in Assimp v.6.0.2 allows a remote attacker to cause a denial of service via the FBXParser.cpp, ParseVectorDataArray()

CVE-2025-70071

An issue in Assimp v.6.0.2 allows a remote attacker to cause a denial of service via the FBXParser.cpp, ParseVectorDataA

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-04 发布INFO

An issue in Assimp v.6.0.2 allows a remote attacker to cause a denial of service via the FBXConverter.cpp and ConvertMeshMultiMaterial() method

CVE-2025-70069

An issue in Assimp v.6.0.2 allows a remote attacker to cause a denial of service via the FBXConverter.cpp and ConvertMes

历史摘要 · 未重新核验 · NVD

安全公告2026-05-01 发布INFO

An issue was discovered in Open-SAE-J1939 thru commit b6caf884df46435e539b1ecbf92b6c29b345bdfe ...

CVE-2026-42467

An issue was discovered in Open-SAE-J1939 thru commit b6caf884df46435e539b1ecbf92b6c29b345bdfe (2025-11-30) in SAE_J1939

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-01 发布INFO

An issue was discovered in Open-SAE-J1939 thru commit b6caf884df46435e539b1ecbf92b6c29b345bdfe (2025-11-30) in SAE_J1939_Read_Binary_Data_Transfer_DM16 causing a denial of servi...

CVE-2026-42467

An issue was discovered in Open-SAE-J1939 thru commit b6caf884df46435e539b1ecbf92b6c29b345bdfe (2025-11-30) in SAE_J1939

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-01 发布INFO

Apache Neethi does not properly detect circular references in policy definitions. When a WS-Policy document contains circular policy references (where Policy A references Policy...

CVE-2026-42403

Apache Neethi does not properly detect circular references in policy definitions. When a WS-Policy document contains cir

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-01 发布INFO

Apache Neethi is vulnerable to a Denial of Service attack through algorithmic complexity in policy normalization. Specially crafted WS-Policy documents can trigger an exponentia...

CVE-2026-42402

Apache Neethi is vulnerable to a Denial of Service attack through algorithmic complexity in policy normalization. Specia

历史摘要 · 未重新核验 · NVD

漏洞预警2026-04-30 发布INFO

CVE-2026-40951 is a memory corruption vulnerability on Secure Access Windows clients prior to 14.50. Attackers with local control of the Windows client can send malformed data...

CVE-2026-40951

CVE-2026-40951 is a memory corruption vulnerability on Secure Access Windows clients prior to 14.50. Attackers with loc

历史摘要 · 未重新核验 · NVD

漏洞预警2026-04-30 发布INFO

A denial-of-service vulnerability exists in the U-SPEED N300 V1.0.0 wireless router. By sending a large number of concurrent HTTP requests to random or non-existent endpoints on...

CVE-2026-36958

A denial-of-service vulnerability exists in the U-SPEED N300 V1.0.0 wireless router. By sending a large number of concur

历史摘要 · 未重新核验 · NVD

漏洞预警2026-04-30 发布INFO

Dbit N300 T1 Pro Easy Setup Wireless Wi-Fi Router V1.0.0 is vulnerable to Denial of Service via the boa web server URI handler. By initiating a high-volume flood of HTTP GET req...

CVE-2026-36957

Dbit N300 T1 Pro Easy Setup Wireless Wi-Fi Router V1.0.0 is vulnerable to Denial of Service via the boa web server URI h

历史摘要 · 未重新核验 · NVD

安全公告2026-04-29 发布INFO

Marked Vulnerable to OOM Denial of Service via Infinite Recursion in marked Tokenizer

CVE-2026-41680

### Summary A critical Denial of Service (DoS) vulnerability exists in `marked@18.0.0`. By providing a specific 3-byte i

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-04-29 发布INFO

Wazuh is a free and open source platform used for threat prevention, detection, and response. From version 4.8.0 to before version 4.14.4, a stack-based buffer overflow exists i...

CVE-2026-28221

Wazuh is a free and open source platform used for threat prevention, detection, and response. From version 4.8.0 to befo

历史摘要 · 未重新核验 · NVD

安全公告2026-04-29 发布INFO

Spring MVC and WebFlux applications are vulnerable to Denial of Service attacks when resolving...

CVE-2026-22745

Spring MVC and WebFlux applications are vulnerable to Denial of Service attacks when resolving static resources. More

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-04-29 发布INFO

A WebFlux server application that processes multipart requests creates temp files for parts...

CVE-2026-22740

A WebFlux server application that processes multipart requests creates temp files for parts larger than 10 K. Under some

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-04-29 发布INFO

Spring MVC and WebFlux applications are vulnerable to Denial of Service attacks when resolving static resources. More precisely, an application can be vulnerable when all the ...

CVE-2026-22745

Spring MVC and WebFlux applications are vulnerable to Denial of Service attacks when resolving static resources. More

历史摘要 · 未重新核验 · NVD

漏洞预警2026-04-29 发布INFO

A WebFlux server application that processes multipart requests creates temp files for parts larger than 10 K. Under some circumstances, temp files may remain not deleted after t...

CVE-2026-22740

A WebFlux server application that processes multipart requests creates temp files for parts larger than 10 K. Under some

历史摘要 · 未重新核验 · NVD