#cwe-401

共收录 232 条相关情报。

漏洞预警2026-09-04 发布INFO

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to cause a denial of service due to a memory leak.

CVE-2026-18076

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to cause a denial of service due to a memory le

历史摘要 · 未重新核验 · NVD

#cve #cwe-401

漏洞预警2026-09-04 发布INFO

Missing release of memory after effective lifetime vulnerability in Softing smartLink allows resource leak exposure. This issue affects smartLink HW-PN: from 1.04 before 1.10.

CVE-2026-13148

Missing release of memory after effective lifetime vulnerability in Softing smartLink allows resource leak exposure. Th

历史摘要 · 未重新核验 · NVD

#cve #cwe-401

安全公告2026-09-02 发布INFO

A vulnerability in Cisco Desk Phone 9800 Series, Cisco IP Phone 7800 and 8800 Series, and Cisco...

CVE-2026-20281

A vulnerability in Cisco Desk Phone 9800 Series, Cisco IP Phone 7800 and 8800 Series, and Cisco Video Phone 8875 that ar

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-401 #severity:high

漏洞预警2026-09-02 发布INFO

A vulnerability in Cisco Desk Phone 9800 Series, Cisco IP Phone 7800 and 8800 Series, and Cisco Video Phone 8875 that are running Cisco Session Initiation Protocol (SIP) Softwar...

CVE-2026-20281

A vulnerability in Cisco Desk Phone 9800 Series, Cisco IP Phone 7800 and 8800 Series, and Cisco Video Phone 8875 that ar

历史摘要 · 未重新核验 · NVD

#cve #cwe-401

漏洞预警2026-08-31 发布INFO

net_ipv6_send_ns() in subsys/net/ip/ipv6_nbr.c allocates a transmit net_pkt for a Neighbor Solicitation. When it is called with a data packet pending on an unresolved neighbor a...

CVE-2026-14697

net_ipv6_send_ns() in subsys/net/ip/ipv6_nbr.c allocates a transmit net_pkt for a Neighbor Solicitation. When it is call

历史摘要 · 未重新核验 · NVD

#cve #cwe-401

漏洞预警2026-08-31 发布INFO

When Ethernet bridging is enabled (CONFIG_NET_ETHERNET_BRIDGE), eth_bridge_input_process() in subsys/net/l2/ethernet/bridge/bridge_input.c decides how each frame received on a b...

CVE-2026-14696

When Ethernet bridging is enabled (CONFIG_NET_ETHERNET_BRIDGE), eth_bridge_input_process() in subsys/net/l2/ethernet/bri

历史摘要 · 未重新核验 · NVD

#cve #cwe-401

安全公告2026-08-31 发布INFO

Ethernet bridge RX packet leak enables denial of service via RX buffer-pool exhaustion

CVE-2026-14696

When Ethernet bridging is enabled (CONFIG_NET_ETHERNET_BRIDGE), eth_bridge_input_process() in subsys/net/l2/ethernet/bri

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-401

漏洞预警2026-08-28 发布INFO

Multiple memory leaks in openNDS before 11.0.0 allow an unauthenticated attacker on the captive portal network to exhaust all available memory on the device within minutes.

CVE-2026-38819

Multiple memory leaks in openNDS before 11.0.0 allow an unauthenticated attacker on the captive portal network to exhaus

历史摘要 · 未重新核验 · NVD

#cve #cwe-401

安全公告2026-08-28 发布INFO

CVE-2026-38819

Multiple memory leaks in openNDS before 11.0.0 allow an unauthenticated attacker on the captive portal network to exhaus

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-401

漏洞预警2026-08-27 发布INFO

A Spring RSocket application is exposed to a memory leak via a malformed SETUP frame. Spring Framework 7.0.0 - 7.0.8 Spring Framework 6.2.0 - 6.2.19 Spring Framework 6.1.0 - 6.1...

CVE-2026-47888

A Spring RSocket application is exposed to a memory leak via a malformed SETUP frame. Spring Framework 7.0.0 - 7.0.8 Spr

历史摘要 · 未重新核验 · NVD

#cve #cwe-401

漏洞预警2026-08-25 发布INFO

Nokogiri versions before 1.19.3 contain a memory leak in the XSLT Stylesheet transform method when processing Ruby strings containing null bytes. Attackers can exploit this by p...

CVE-2026-79771

Nokogiri versions before 1.19.3 contain a memory leak in the XSLT Stylesheet transform method when processing Ruby strin

历史摘要 · 未重新核验 · NVD

#cve #cwe-401

漏洞预警2026-08-24 发布INFO

Micrometer-instrumented Apache HttpAsyncClient (4.x or 5.x) usage via MicrometerHttpClientInterceptor can leak memory unboundedly when asynchronous requests fail before receivin...

CVE-2026-59295

Micrometer-instrumented Apache HttpAsyncClient (4.x or 5.x) usage via MicrometerHttpClientInterceptor can leak memory un

历史摘要 · 未重新核验 · NVD

#cve #cwe-401

漏洞预警2026-08-22 发布MEDIUM

The Infineon Airoc Wi-Fi driver's transmit callback airoc_mgmt_send() in drivers/wifi/infineon/airoc_wifi.c allocates a net_buf from the fixed airoc_pool for every outbound pack...

CVE-2026-12999

CVE-2026-12999 是 Infineon Airoc Wi-Fi 驱动中的一个内存泄漏漏洞，位于 drivers/wifi/infineon/airoc_wifi.c 的 airoc_mgmt_send() 发送回调函数中。该函数

历史摘要 · 未重新核验 · NVD

#cve #cwe-401

漏洞预警2026-08-19 发布INFO

A memory leak flaw was found in cockpit-ws. The login page handler leaks a heap allocation on every unauthenticated request that carries a CockpitLang cookie, allowing a remote ...

CVE-2026-76235

A memory leak flaw was found in cockpit-ws. The login page handler leaks a heap allocation on every unauthenticated requ

历史摘要 · 未重新核验 · NVD

#cve #cwe-401

漏洞预警2026-08-18 发布INFO

An issue in Open5GS v.2.7.0 allows a remote attacker to cause a denial of service via the ngap_send_to_nas() function in src/amf/ngap-path.c

CVE-2026-71675

An issue in Open5GS v.2.7.0 allows a remote attacker to cause a denial of service via the ngap_send_to_nas() function in

历史摘要 · 未重新核验 · NVD

#cve #cwe-401

漏洞预警2026-08-18 发布INFO

ZEBRA is a Zcash node written entirely in Rust. Prior to 4.5.0, an unauthenticated P2P peer can cause the mempool download pipeline to retain transactions after verification rea...

CVE-2026-52734

ZEBRA is a Zcash node written entirely in Rust. Prior to 4.5.0, an unauthenticated P2P peer can cause the mempool downlo

历史摘要 · 未重新核验 · NVD

#cve #cwe-401

漏洞预警2026-08-13 发布INFO

@hono/node-server allows running the Hono application on Node.js. From 2.0.0 until 2.0.10, a WebSocket upgrade request to an upgradeWebSocket route with a missing or malformed S...

CVE-2026-73565

@hono/node-server allows running the Hono application on Node.js. From 2.0.0 until 2.0.10, a WebSocket upgrade request t

历史摘要 · 未重新核验 · NVD

#cve #cwe-401 #cwe-770

安全公告2026-08-13 发布INFO

@hono/node-server: Unauthenticated memory-leak DoS via aborted WebSocket handshake

CVE-2026-73565

@hono/node-server allows running the Hono application on Node.js. From 2.0.0 until 2.0.10, a WebSocket upgrade request t

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-401 #cwe-770

漏洞预警2026-08-10 发布LOW

A weakness has been identified in Almico Speedfan 4.52. This affects the function KiSystemCall64 in the library speedfan.sys of the component MSR Index Handler. Executing a mani...

CVE-2026-19382

Almico Speedfan 4.52 中被发现一个弱点，涉及 speedfan.sys 库中的 KiSystemCall64 函数，属于 MSR 索引处理器组件。攻击者可通过对该组件的本地操作触发内存泄漏，导致敏感信息泄露。该攻击仅能本

历史摘要 · 未重新核验 · NVD

#cve #cwe-401 #cwe-404

漏洞预警2026-08-07 发布INFO

Netty is an asynchronous, event-driven network application framework. Prior to 4.1.136.Final and 4.2.16.Final, the RedisArrayAggregator Redis codec clears retained partial aggre...

CVE-2026-56818

Netty is an asynchronous, event-driven network application framework. Prior to 4.1.136.Final and 4.2.16.Final, the Redis

历史摘要 · 未重新核验 · NVD

#cve #cwe-401 #cwe-703