#cwe-476

共收录 587 条相关情报。

漏洞预警2026-07-21 发布INFO

Capstone is a disassembly framework. Versions prior to 6.0.0-Alpha8 and 5.0.8 have a NULL pointer dereference in `modRMRequired()` and `decode()` when disassembling 3DNow! opcod...

CVE-2026-47143

Capstone is a disassembly framework. Versions prior to 6.0.0-Alpha8 and 5.0.8 have a NULL pointer dereference in `modRMR

历史摘要 · 未重新核验 · NVD

#cve #cwe-476

安全公告2026-07-21 发布INFO

Capstone has a NULL Pointer Dereference with 3DNow! opcodes

CVE-2026-47143

Capstone is a disassembly framework. Versions prior to 6.0.0-Alpha8 and 5.0.8 have a NULL pointer dereference in `modRMR

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-476

漏洞预警2026-07-20 发布MEDIUM

In the Linux kernel, the following vulnerability has been resolved: net: team: fix NULL pointer dereference in team_xmit during mode change __team_change_mode() clears team->o...

CVE-2026-64190

In the Linux kernel, the following vulnerability has been resolved: net: team: fix NULL pointer dereference in team_xmi

来源摘录 · NVD

#cve #cwe-476

漏洞预警2026-07-20 发布INFO

In nanomq versions 0.24.11 and earlier, a NULL pointer dereference in `properties_parse()` allows an authenticated attacker to crash the NanoMQ broker by sending a POST request ...

CVE-2026-47276

In nanomq versions 0.24.11 and earlier, a NULL pointer dereference in `properties_parse()` allows an authenticated attac

历史摘要 · 未重新核验 · NVD

#cve #cwe-476

漏洞预警2026-07-20 发布INFO

In nanomq versions 0.24.11 and earlier, a NULL pointer dereference in `nni_mqttv5_msg_decode_connect()` allows a malicious MQTT broker to crash any connecting NanoMQ MQTTv5 clie...

CVE-2026-47275

In nanomq versions 0.24.11 and earlier, a NULL pointer dereference in `nni_mqttv5_msg_decode_connect()` allows a malicio

历史摘要 · 未重新核验 · NVD

#cve #cwe-476

安全公告2026-07-20 发布INFO

NULL Pointer Dereference in REST API properties_parse via Malformed user_properties

CVE-2026-47276

In nanomq versions 0.24.11 and earlier, a NULL pointer dereference in `properties_parse()` allows an authenticated attac

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-476

安全公告2026-07-20 发布INFO

nanomq NULL Pointer Dereference in MQTTv5 Client CONNECT Decoder Leading to Remote DoS

CVE-2026-47275

In nanomq versions 0.24.11 and earlier, a NULL pointer dereference in `nni_mqttv5_msg_decode_connect()` allows a malicio

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-476

漏洞预警2026-07-20 发布INFO

SurrealDB before v2.6.1 (and before v3.0.0-beta.3) contains a denial of service vulnerability in its embedded JavaScript scripting engine, which is enabled via the --allow-scrip...

CVE-2026-63762

SurrealDB before v2.6.1 (and before v3.0.0-beta.3) contains a denial of service vulnerability in its embedded JavaScript

历史摘要 · 未重新核验 · NVD

#cve #cwe-476

安全公告2026-07-20 发布INFO

SurrealDB before v2.6.1 Denial of Service via scripting

CVE-2026-63762

SurrealDB before v2.6.1 (and before v3.0.0-beta.3) contains a denial of service vulnerability in its embedded JavaScript

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-476

漏洞预警2026-07-19 发布MEDIUM

In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: ccg: reject firmware images without a ':' record header do_flash() locates the first .cya...

CVE-2026-63964

In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: ccg: reject firmware images witho

来源摘录 · NVD

#cve #cwe-476

漏洞预警2026-07-19 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: mm/rmap: initialize nr_pages to 1 at loop start in try_to_unmap_one Initialize nr_pages to 1 at the start o...

CVE-2026-63950

In the Linux kernel, the following vulnerability has been resolved: mm/rmap: initialize nr_pages to 1 at loop start in

来源摘录 · NVD

#cve #cwe-476

漏洞预警2026-07-19 发布MEDIUM

In the Linux kernel, the following vulnerability has been resolved: serial: dz: Convert to use a platform device Prevent a crash from happening as the first serial port is ini...

CVE-2026-63877

In the Linux kernel, the following vulnerability has been resolved: serial: dz: Convert to use a platform device Preve

来源摘录 · NVD

#cve #cwe-476

漏洞预警2026-07-19 发布MEDIUM

In the Linux kernel, the following vulnerability has been resolved: serial: zs: Convert to use a platform device Prevent a crash from happening as the first serial port is ini...

CVE-2026-63876

In the Linux kernel, the following vulnerability has been resolved: serial: zs: Convert to use a platform device Preve

来源摘录 · NVD

#cve #cwe-476

安全公告2026-07-16 发布INFO

A vulnerability exists in the Health & Safety (HS) application of NASA's Core Flight System (cFS)...

CVE-2026-15352

A vulnerability exists in the Health & Safety (HS) application of NASA's Core Flight System (cFS). The flaw allows the a

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-476 #severity:high

漏洞预警2026-07-16 发布INFO

CoreDNS is a DNS server written in Go. Prior to 1.14.4, a single 28-byte UDP datagram can crash the CoreDNS process when the proxyproto plugin is enabled because plugin/pkg/prox...

CVE-2026-62309

CoreDNS is a DNS server written in Go. Prior to 1.14.4, a single 28-byte UDP datagram can crash the CoreDNS process when

历史摘要 · 未重新核验 · NVD

#cve #cwe-476

漏洞预警2026-07-16 发布INFO

CoreDNS is a DNS server written in Go. Prior to 1.14.5, the CoreDNS rewrite plugin supports edns0 rewrite rules with an optional revert flag, and two response rules, edns0SetRes...

CVE-2026-62299

CoreDNS is a DNS server written in Go. Prior to 1.14.5, the CoreDNS rewrite plugin supports edns0 rewrite rules with an

历史摘要 · 未重新核验 · NVD

#cve #cwe-476

漏洞预警2026-07-16 发布INFO

A vulnerability exists in the Health & Safety (HS) application of NASA's Core Flight System (cFS). The flaw allows the application to crash via segmentation fault when processin...

CVE-2026-15352

A vulnerability exists in the Health & Safety (HS) application of NASA's Core Flight System (cFS). The flaw allows the a

历史摘要 · 未重新核验 · NVD

#cve #cwe-476

安全公告2026-07-16 发布INFO

NASA Core Flight System (cFS) Health & Safety (HS) Application NULL Pointer Dereference

CVE-2026-15352

A vulnerability exists in the Health & Safety (HS) application of NASA's Core Flight System (cFS). The flaw allows the a

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-476

安全公告2026-07-16 发布INFO

CoreDNS: rewrite-plugin EDNS0 response-revert nil-pointer panic (remote DoS) when a downstream plugin returns a response with no OPT record

CVE-2026-62299

CoreDNS is a DNS server written in Go. Prior to 1.14.5, the CoreDNS rewrite plugin supports edns0 rewrite rules with an

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-476

安全公告2026-07-16 发布INFO

CoreDNS: proxyproto plugin panics on PPv2 datagram with non-UDP transport — single 28-byte packet remote DoS

CVE-2026-62309

CoreDNS is a DNS server written in Go. Prior to 1.14.4, a single 28-byte UDP datagram can crash the CoreDNS process when

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-476