#cwe-401

共收录 232 条相关情报。

← 返回所有主题

安全公告2026-09-16 发布INFO

RMCP: Unauthenticated permanent session-table leak in rmcp Streamable HTTP server transport leads to remote denial-of-service

CVE-2026-63128

### Summary An unauthenticated remote attacker can leak one entry per HTTP request out of the in-memory session table o

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #rust #cwe-400 #cwe-401 #cwe-772 #severity:high

漏洞预警2026-09-16 发布INFO

A vulnerability in the EIGRP implementation in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could all...

CVE-2026-20222

A vulnerability in the EIGRP implementation in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisc

历史摘要 · 未重新核验 · NVD

#cve #cwe-401

安全公告2026-09-15 发布INFO

Http4s: DigestAuth nonce map grows unbounded

CVE-2026-69208

The `DigestAuth` server middleware's stale-nonce cleanup uses an inverted comparison: it removes *fresh* nonces and stop

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #maven #cwe-400 #cwe-401 #severity:high

漏洞预警2026-09-15 发布INFO

Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, the DigestAuth server middleware removes fresh nonces and stops eviction at the first stale nonce ...

CVE-2026-69208

Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, the DigestAuth server middleware removes

历史摘要 · 未重新核验 · NVD

#cve #cwe-400 #cwe-401

漏洞预警2026-09-15 发布INFO

pyLoad is a free and open-source download manager written in Python. Prior to 0.5.0b3.dev101, EventManager in src/pyload/core/managers/event_manager.py appends a Client object t...

CVE-2026-48987

pyLoad is a free and open-source download manager written in Python. Prior to 0.5.0b3.dev101, EventManager in src/pyload

历史摘要 · 未重新核验 · NVD

#cve #cwe-400 #cwe-401 #cwe-770

漏洞预警2026-09-15 发布INFO

A flaw was found in gss-ntlmssp. A memory leak occurs in the NTLM target-info parser when a crafted NTLM CHALLENGE message contains duplicated string-valued AV_PAIR entries. The...

CVE-2026-91926

A flaw was found in gss-ntlmssp. A memory leak occurs in the NTLM target-info parser when a crafted NTLM CHALLENGE messa

历史摘要 · 未重新核验 · NVD

#cve #cwe-401

漏洞预警2026-09-11 发布INFO

compression is a Node.js and Express compression middleware. In versions before 1.8.2, when a client aborts the connection while a compressed response is still being sent, the z...

CVE-2026-87776

compression is a Node.js and Express compression middleware. In versions before 1.8.2, when a client aborts the connecti

历史摘要 · 未重新核验 · NVD

#cve #cwe-401 #cwe-459

安全公告2026-09-11 发布INFO

libcharon in strongSwan 4.1.2 through 6.0.7 has a missing release of memory after its effective...

CVE-2026-78127

libcharon in strongSwan 4.1.2 through 6.0.7 has a missing release of memory after its effective lifetime in the IKE mess

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-401 #severity:low

安全公告2026-09-11 发布INFO

strongSwan 4.2.0 through 6.0.7 has a missing release of memory after its effective lifetime in...

CVE-2026-78131

strongSwan 4.2.0 through 6.0.7 has a missing release of memory after its effective lifetime in the x509 plugin's attribu

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-401 #severity:low

安全公告2026-09-11 发布INFO

strongSwan 5.0.2 through 6.0.7 allows PKCS#7 certificate enumeration in the openssl plugin that...

CVE-2026-78124

strongSwan 5.0.2 through 6.0.7 allows PKCS#7 certificate enumeration in the openssl plugin that leads to a lack of relea

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-401 #severity:low

漏洞预警2026-09-11 发布INFO

strongSwan 4.2.0 through 6.0.7 has a missing release of memory after its effective lifetime in the x509 plugin's attribute certificate parser.

CVE-2026-78131

strongSwan 4.2.0 through 6.0.7 has a missing release of memory after its effective lifetime in the x509 plugin's attribu

历史摘要 · 未重新核验 · NVD

#cve #cwe-401

漏洞预警2026-09-11 发布INFO

libcharon in strongSwan 4.1.2 through 6.0.7 has a missing release of memory after its effective lifetime in the IKE message parser.

CVE-2026-78127

libcharon in strongSwan 4.1.2 through 6.0.7 has a missing release of memory after its effective lifetime in the IKE mess

历史摘要 · 未重新核验 · NVD

#cve #cwe-401

漏洞预警2026-09-11 发布INFO

strongSwan 5.0.2 through 6.0.7 allows PKCS#7 certificate enumeration in the openssl plugin that leads to a lack of release of memory after its effective lifetime.

CVE-2026-78124

strongSwan 5.0.2 through 6.0.7 allows PKCS#7 certificate enumeration in the openssl plugin that leads to a lack of relea

历史摘要 · 未重新核验 · NVD

#cve #cwe-401

漏洞预警2026-09-08 发布INFO

Missing release of memory after effective lifetime in Windows DHCP Server allows an authorized attacker to deny service over an adjacent network.

CVE-2026-69405

Missing release of memory after effective lifetime in Windows DHCP Server allows an authorized attacker to deny service

历史摘要 · 未重新核验 · NVD

#cve #cwe-401

安全公告2026-09-07 发布INFO

Protocol::HTTP2 versions before 1.14 for Perl allow memory exhaustion via closed streams that...

CVE-2026-16028

Protocol::HTTP2 versions before 1.14 for Perl allow memory exhaustion via closed streams that stream_state never removes

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-401

漏洞预警2026-09-07 发布INFO

Protocol::HTTP2 versions before 1.14 for Perl allow memory exhaustion via closed streams that stream_state never removes from the connection stream table. When a stream reaches...

CVE-2026-16028

Protocol::HTTP2 versions before 1.14 for Perl allow memory exhaustion via closed streams that stream_state never removes

历史摘要 · 未重新核验 · NVD

#cve #cwe-401

安全公告2026-09-07 发布INFO

Protocol::HTTP2 versions before 1.14 for Perl allow memory exhaustion via closed streams that stream_state never removes from the connection stream table

CVE-2026-16028

Protocol::HTTP2 versions before 1.14 for Perl allow memory exhaustion via closed streams that stream_state never removes

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-401

安全公告2026-09-05 发布INFO

rpcapd can allocate up to 65536 bytes per each RPCAP_MSG_UPDATEFILTER_REQ or...

CVE-2026-18313

rpcapd can allocate up to 65536 bytes per each RPCAP_MSG_UPDATEFILTER_REQ or RPCAP_MSG_STARTCAP_REQ message received fro

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-401 #severity:medium

漏洞预警2026-09-05 发布INFO

rpcapd can allocate up to 65536 bytes per each RPCAP_MSG_UPDATEFILTER_REQ or RPCAP_MSG_STARTCAP_REQ message received from the client, but it never frees the memory, so it leaks ...

CVE-2026-18313

rpcapd can allocate up to 65536 bytes per each RPCAP_MSG_UPDATEFILTER_REQ or RPCAP_MSG_STARTCAP_REQ message received fro

历史摘要 · 未重新核验 · NVD

#cve #cwe-401

安全公告2026-09-05 发布INFO

rpcapd memory leak in libpcap before 1.10.7

CVE-2026-18313

rpcapd can allocate up to 65536 bytes per each RPCAP_MSG_UPDATEFILTER_REQ or RPCAP_MSG_STARTCAP_REQ message received fro

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-401