#cwe-459

共收录 89 条相关情报。

← 返回所有主题
漏洞预警2026-09-11 发布INFO

compression is a Node.js and Express compression middleware. In versions before 1.8.2, when a client aborts the connection while a compressed response is still being sent, the z...

CVE-2026-87776

compression is a Node.js and Express compression middleware. In versions before 1.8.2, when a client aborts the connecti

历史摘要 · 未重新核验 · NVD

安全公告2026-09-08 发布INFO

multer vulnerable to Denial of Service via file descriptor leak on aborted uploads

CVE-2026-77037

### Impact A vulnerability in multer `2.2.0` allows an attacker to trigger a Denial of Service (DoS) by aborting or tru

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-03 发布INFO

Incomplete cleanup in Network in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to bypass system access restrictions via crafted network traffic. (Chromium secur...

CVE-2026-85043

Incomplete cleanup in Network in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to bypass system access

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-02 发布INFO

Incomplete Cleanup (CWE-459) in Elastic Cloud on Kubernetes (ECK) can lead to unauthorized access via Privilege Abuse (CAPEC-122). Authentication credentials persist after a cro...

CVE-2026-78600

Incomplete Cleanup (CWE-459) in Elastic Cloud on Kubernetes (ECK) can lead to unauthorized access via Privilege Abuse (C

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-28 发布INFO

multer is a middleware for handling multipart/form-data in Node.js. In version 2.2.0, when a disk-backed upload is aborted or truncated before the write stream finishes, multer'...

CVE-2026-77037

multer is a middleware for handling multipart/form-data in Node.js. In version 2.2.0, when a disk-backed upload is abort

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-28 发布INFO

filebrowser through 2.63.23 does not remove share records when a shared file is renamed (only deletion triggers share cleanup). The share record is keyed by path, so it survives...

CVE-2026-82237

filebrowser through 2.63.23 does not remove share records when a shared file is renamed (only deletion triggers share cl

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-28 发布INFO

File Browser versions from 2.63.6 through 2.63.23 fail to clean up public share links when a privileged user deletes another user's shared file. Attackers can access the survivi...

CVE-2026-82236

File Browser versions from 2.63.6 through 2.63.23 fail to clean up public share links when a privileged user deletes ano

历史摘要 · 未重新核验 · NVD

安全公告2026-08-28 发布INFO

filebrowser through 2.63.23 Stale Share Link via File Rename

CVE-2026-82237

filebrowser through 2.63.23 does not remove share records when a shared file is renamed (only deletion triggers share cl

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-08-28 发布INFO

File Browser 2.63.6 through 2.63.23 Share Link Exposure via File Deletion

CVE-2026-82236

File Browser versions from 2.63.6 through 2.63.23 fail to clean up public share links when a privileged user deletes ano

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-08-25 发布INFO

Incomplete cleanup in GetUserMedia in Google Chrome prior to 152.0.7977.65 allowed a remote...

CVE-2026-79265

Incomplete cleanup in GetUserMedia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-25 发布INFO

Incomplete cleanup in GetUserMedia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to...

CVE-2026-79265

Incomplete cleanup in GetUserMedia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-25 发布INFO

Incomplete cleanup in Chromium in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted Chrome e...

CVE-2026-78947

Incomplete cleanup in Chromium in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engin

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-25 发布INFO

Incomplete cleanup in SiteIsolation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a cra...

CVE-2026-78903

Incomplete cleanup in SiteIsolation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromise

历史摘要 · 未重新核验 · NVD

安全公告2026-08-24 发布INFO

Rocq Prover does not restore the universe graph's copy of the universe checking flag when a...

CVE-2026-72714

Rocq Prover does not restore the universe graph's copy of the universe checking flag when a module that locally disabled

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-24 发布INFO

Rocq Prover does not restore the universe graph's copy of the universe checking flag when a module that locally disabled the check is closed. Local Unset Universe Checking insid...

CVE-2026-72714

Rocq Prover does not restore the universe graph's copy of the universe checking flag when a module that locally disabled

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-21 发布INFO

A parser state isolation vulnerability in misp-stix could cause data from a previously processed STIX document to be retained and incorporated into the MISP event generated from...

CVE-2026-77761

A parser state isolation vulnerability in misp-stix could cause data from a previously processed STIX document to be ret

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-18 发布INFO

FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. Prior to 1.3.3, DELETE /api/roles removes role definitions through server/runtime/users/usrstorage.js b...

CVE-2026-67442

FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. Prior to 1.3.3, DELETE /api/roles removes role

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-18 发布INFO

ZEBRA is a Zcash node written entirely in Rust. Prior to 4.5.0, a remote unauthenticated P2P peer can stall a Zebra node by racing an invalid block body against the valid canoni...

CVE-2026-52736

ZEBRA is a Zcash node written entirely in Rust. Prior to 4.5.0, a remote unauthenticated P2P peer can stall a Zebra node

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-18 发布INFO

ZEBRA is a Zcash node written entirely in Rust. Prior to 4.5.0, a natural or attacker-influenced chain fork can leave stale Sapling and Orchard note-commitment subtree roots in ...

CVE-2026-52733

ZEBRA is a Zcash node written entirely in Rust. Prior to 4.5.0, a natural or attacker-influenced chain fork can leave st

历史摘要 · 未重新核验 · NVD

安全公告2026-08-18 发布INFO

Mattermost versions 10.11.x <= 10.11.20, 11.7.x <= 11.7.5 Mattermost fails to remove thread...

CVE-2026-9693

Mattermost versions 10.11.x <= 10.11.20, 11.7.x <= 11.7.5 Mattermost fails to remove thread membership records when a us

历史摘要 · 未重新核验 · GitHub Advisory