#cwe-459
共收录 89 条相关情报。
← 返回所有主题 漏洞预警2026-09-11 发布INFO
CVE-2026-87776
compression is a Node.js and Express compression middleware. In versions before 1.8.2, when a client aborts the connecti
历史摘要 · 未重新核验 · NVD
安全公告2026-09-08 发布INFO
CVE-2026-77037
### Impact
A vulnerability in multer `2.2.0` allows an attacker to trigger a Denial of Service (DoS) by aborting or tru
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-09-03 发布INFO
CVE-2026-85043
Incomplete cleanup in Network in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to bypass system access
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-02 发布INFO
CVE-2026-78600
Incomplete Cleanup (CWE-459) in Elastic Cloud on Kubernetes (ECK) can lead to unauthorized access via Privilege Abuse (C
历史摘要 · 未重新核验 · NVD
漏洞预警2026-08-28 发布INFO
CVE-2026-77037
multer is a middleware for handling multipart/form-data in Node.js. In version 2.2.0, when a disk-backed upload is abort
历史摘要 · 未重新核验 · NVD
漏洞预警2026-08-28 发布INFO
CVE-2026-82237
filebrowser through 2.63.23 does not remove share records when a shared file is renamed (only deletion triggers share cl
历史摘要 · 未重新核验 · NVD
漏洞预警2026-08-28 发布INFO
CVE-2026-82236
File Browser versions from 2.63.6 through 2.63.23 fail to clean up public share links when a privileged user deletes ano
历史摘要 · 未重新核验 · NVD
安全公告2026-08-28 发布INFO
CVE-2026-82237
filebrowser through 2.63.23 does not remove share records when a shared file is renamed (only deletion triggers share cl
历史摘要 · 未重新核验 · OSV.dev
安全公告2026-08-28 发布INFO
CVE-2026-82236
File Browser versions from 2.63.6 through 2.63.23 fail to clean up public share links when a privileged user deletes ano
历史摘要 · 未重新核验 · OSV.dev
安全公告2026-08-25 发布INFO
CVE-2026-79265
Incomplete cleanup in GetUserMedia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-08-25 发布INFO
CVE-2026-79265
Incomplete cleanup in GetUserMedia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised
历史摘要 · 未重新核验 · NVD
漏洞预警2026-08-25 发布INFO
CVE-2026-78947
Incomplete cleanup in Chromium in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engin
历史摘要 · 未重新核验 · NVD
漏洞预警2026-08-25 发布INFO
CVE-2026-78903
Incomplete cleanup in SiteIsolation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromise
历史摘要 · 未重新核验 · NVD
安全公告2026-08-24 发布INFO
CVE-2026-72714
Rocq Prover does not restore the universe graph's copy of the universe checking flag when a module that locally disabled
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-08-24 发布INFO
CVE-2026-72714
Rocq Prover does not restore the universe graph's copy of the universe checking flag when a module that locally disabled
历史摘要 · 未重新核验 · NVD
漏洞预警2026-08-21 发布INFO
CVE-2026-77761
A parser state isolation vulnerability in misp-stix could cause data from a previously processed STIX document to be ret
历史摘要 · 未重新核验 · NVD
漏洞预警2026-08-18 发布INFO
CVE-2026-67442
FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. Prior to 1.3.3, DELETE /api/roles removes role
历史摘要 · 未重新核验 · NVD
漏洞预警2026-08-18 发布INFO
CVE-2026-52736
ZEBRA is a Zcash node written entirely in Rust. Prior to 4.5.0, a remote unauthenticated P2P peer can stall a Zebra node
历史摘要 · 未重新核验 · NVD
漏洞预警2026-08-18 发布INFO
CVE-2026-52733
ZEBRA is a Zcash node written entirely in Rust. Prior to 4.5.0, a natural or attacker-influenced chain fork can leave st
历史摘要 · 未重新核验 · NVD
安全公告2026-08-18 发布INFO
CVE-2026-9693
Mattermost versions 10.11.x <= 10.11.20, 11.7.x <= 11.7.5 Mattermost fails to remove thread membership records when a us
历史摘要 · 未重新核验 · GitHub Advisory