#cwe-420

共收录 6 条相关情报。

← 返回所有主题
漏洞预警2026-09-30 发布INFO

Kiteworks Core did not apply its gateway-level API security controls to every request authenticated through the platform's central authentication service. An authenticated user ...

CVE-2026-102134

Kiteworks Core did not apply its gateway-level API security controls to every request authenticated through the platform

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-20 发布INFO

Tor before 0.4.9.9 was prone to a compression bomb bypass where an attacker could concatenate many gzip or zlib sub-streams, each just under the per-stream detection threshold, ...

CVE-2026-77639

Tor before 0.4.9.9 was prone to a compression bomb bypass where an attacker could concatenate many gzip or zlib sub-stre

历史摘要 · 未重新核验 · NVD

安全公告2026-06-22 发布INFO

ComfyUI-Manager has an Unprotected Alternate Channel (CWE-420)

CVE-2025-67303

### Impact An **Unprotected Alternate Channel (CWE-420)** vulnerability was discovered in ComfyUI-Manager versions prio

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-13 发布INFO

When configured, IP-based access restrictions for httpd do not cover all endpoints, which may allow connections from blocked addresses.  Note: Software versions which have reach...

CVE-2026-40435

When configured, IP-based access restrictions for httpd do not cover all endpoints, which may allow connections from blo

历史摘要 · 未重新核验 · NVD

安全公告2026-05-01 发布INFO

An issue was discovered in Prosody before 0.12.6 and 1.0.0 through 13.0.0 before 13.0.5, when...

CVE-2026-43505

An issue was discovered in Prosody before 0.12.6 and 1.0.0 through 13.0.0 before 13.0.5, when mod_proxy65 is enabled. Be

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-01 发布INFO

An issue was discovered in Prosody before 0.12.6 and 1.0.0 through 13.0.0 before 13.0.5, when mod_proxy65 is enabled. Because mod_proxy65 mishandles access control in the activa...

CVE-2026-43505

An issue was discovered in Prosody before 0.12.6 and 1.0.0 through 13.0.0 before 13.0.5, when mod_proxy65 is enabled. Be

历史摘要 · 未重新核验 · NVD