#cwe-453

共收录 7 条相关情报。

← 返回所有主题
漏洞预警2026-10-13 发布INFO

Insecure default variable initialization in Microsoft QUIC allows an unauthorized attacker to bypass a security feature over a network.

CVE-2026-103577

Insecure default variable initialization in Microsoft QUIC allows an unauthorized attacker to bypass a security feature

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

A vulnerability was found in libsndfile up to 1.2.2. This issue affects the function wavlike_subchunk_parse of the file src/wavlike.c of the component WAV Parsing. Performing a ...

CVE-2026-109828

A vulnerability was found in libsndfile up to 1.2.2. This issue affects the function wavlike_subchunk_parse of the file

历史摘要 · 未重新核验 · NVD

安全公告2026-10-13 发布INFO

libsndfile WAV Parsing wavlike.c wavlike_subchunk_parse uninitialized variable

CVE-2026-109828

A vulnerability was found in libsndfile up to 1.2.2. This issue affects the function wavlike_subchunk_parse of the file

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-10-01 发布INFO

vm2 CLI provides no sandbox isolation - host-realm require() is reachable from sandboxed scripts

CVE-2026-92950

### Summary The `vm2` command-line tool installed by `npm install -g vm2` and documented in the README's "CLI" section r

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-17 发布INFO

vm2 before 3.11.7 contains a sandbox escape vulnerability in the CLI tool that allows attackers to execute arbitrary code in the host Node.js process. Attackers can supply a mal...

CVE-2026-92950

vm2 before 3.11.7 contains a sandbox escape vulnerability in the CLI tool that allows attackers to execute arbitrary cod

历史摘要 · 未重新核验 · NVD

安全公告2026-08-07 发布INFO

A vulnerability was determined in WonderTrader up to 0.9.9. This impacts an unknown function of...

CVE-2026-19212

A vulnerability was determined in WonderTrader up to 0.9.9. This impacts an unknown function of the file src/Includes/WT

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-07 发布INFO

A vulnerability was determined in WonderTrader up to 0.9.9. This impacts an unknown function of the file src/Includes/WTSTradeDef.hpp of the component TraderATP Cash Trade Conve...

CVE-2026-19212

A vulnerability was determined in WonderTrader up to 0.9.9. This impacts an unknown function of the file src/Includes/WT

历史摘要 · 未重新核验 · NVD