#cwe-476

共收录 587 条相关情报。

← 返回所有主题
安全公告2026-10-09 发布INFO

A flaw was found in GIMP. The XCF loader processes image-simulation-intent and image-simulation...

CVE-2026-108093

A flaw was found in GIMP. The XCF loader processes image-simulation-intent and image-simulation-bpc parasites without en

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-09 发布INFO

A flaw was found in GIMP. The XCF loader processes image-simulation-intent and image-simulation-bpc parasites without ensuring the parasite data is present before dereferencing ...

CVE-2026-108093

A flaw was found in GIMP. The XCF loader processes image-simulation-intent and image-simulation-bpc parasites without en

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-09 发布INFO

A NULL pointer dereference in the illumos Network Auto-Magic daemon (nwamd) allows a local user to crash the daemon. nwamd_door_switch() in usr/src/cmd/cmd-inet/lib/nwamd/door_i...

CVE-2026-104114

A NULL pointer dereference in the illumos Network Auto-Magic daemon (nwamd) allows a local user to crash the daemon. nwa

历史摘要 · 未重新核验 · NVD

安全公告2026-10-09 发布INFO

NULL pointer dereference in illumos nwamd door handler allows local users to crash the daemon

CVE-2026-104114

A NULL pointer dereference in the illumos Network Auto-Magic daemon (nwamd) allows a local user to crash the daemon. nwa

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-10-09 发布INFO

A flaw was found in libhangul. When parsing Hanja dictionary files, the library fails to verify that an entry contains a valid value alongside its key. By providing a specially ...

CVE-2026-108063

A flaw was found in libhangul. When parsing Hanja dictionary files, the library fails to verify that an entry contains a

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-09 发布INFO

A flaw was found in CUPS. When processing embedded job ticket comments within documents, the service improperly handles specific IPP attributes, causing an unhandled null pointe...

CVE-2026-107655

A flaw was found in CUPS. When processing embedded job ticket comments within documents, the service improperly handles

历史摘要 · 未重新核验 · NVD

安全公告2026-10-09 发布INFO

OpenPrinting CUPS before 2.4.20 contains a NULL pointer dereference caused by repeated IPP group...

CVE-2026-107890

OpenPrinting CUPS before 2.4.20 contains a NULL pointer dereference caused by repeated IPP group tags in job-creation re

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-09 发布INFO

OpenPrinting CUPS before 2.4.20 contains a NULL pointer dereference in cupsdCheckJobs() when a...

CVE-2026-107888

OpenPrinting CUPS before 2.4.20 contains a NULL pointer dereference in cupsdCheckJobs() when a job marked job-held-on-cr

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-09 发布INFO

OpenPrinting CUPS before 2.4.20 contains a NULL pointer dereference caused by repeated IPP group tags in job-creation requests. IPP parsing creates unnamed separator attributes ...

CVE-2026-107890

OpenPrinting CUPS before 2.4.20 contains a NULL pointer dereference caused by repeated IPP group tags in job-creation re

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-09 发布INFO

OpenPrinting CUPS before 2.4.20 contains a NULL pointer dereference in cupsdCheckJobs() when a job marked job-held-on-create refers to a temporary printer that has been automati...

CVE-2026-107888

OpenPrinting CUPS before 2.4.20 contains a NULL pointer dereference in cupsdCheckJobs() when a job marked job-held-on-cr

历史摘要 · 未重新核验 · NVD

安全公告2026-10-09 发布INFO

CVE-2026-107890

CVE-2026-107890

OpenPrinting CUPS before 2.4.20 contains a NULL pointer dereference caused by repeated IPP group tags in job-creation re

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-10-09 发布INFO

CVE-2026-107888

CVE-2026-107888

OpenPrinting CUPS before 2.4.20 contains a NULL pointer dereference in cupsdCheckJobs() when a job marked job-held-on-cr

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-10-08 发布INFO

MIT Kerberos 5 (krb5) through 1.22.2 contains a NULL pointer dereference in make_cred_list() in rd_cred.c that allows authenticated Kerberos clients to crash services by sending...

CVE-2026-107778

MIT Kerberos 5 (krb5) through 1.22.2 contains a NULL pointer dereference in make_cred_list() in rd_cred.c that allows au

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-06 发布INFO

On affected Arista Wi-Fi access points with Captive Portal enabled, an unauthenticated wireless client connected to a captive-portal-enabled SSID can crash the portal service wi...

CVE-2026-102169

On affected Arista Wi-Fi access points with Captive Portal enabled, an unauthenticated wireless client connected to a ca

历史摘要 · 未重新核验 · NVD

安全公告2026-10-06 发布INFO

A flaw was found in sssd. A local attacker can trigger a Denial of Service (DoS) by sending a...

CVE-2026-104044

A flaw was found in sssd. A local attacker can trigger a Denial of Service (DoS) by sending a specially crafted Pluggabl

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-06 发布INFO

A flaw was found in sssd. A remote attacker can cause a denial of service (DoS) by submitting a...

CVE-2026-104038

A flaw was found in sssd. A remote attacker can cause a denial of service (DoS) by submitting a certificate that lacks a

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-06 发布INFO

A flaw was found in sssd. A local attacker can trigger a Denial of Service (DoS) by sending a specially crafted Pluggable Authentication Module (PAM) request when passkey authen...

CVE-2026-104044

A flaw was found in sssd. A local attacker can trigger a Denial of Service (DoS) by sending a specially crafted Pluggabl

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-06 发布INFO

A flaw was found in sssd. A remote attacker can cause a denial of service (DoS) by submitting a certificate that lacks an expected Security Identifier (SID) extension. In deploy...

CVE-2026-104038

A flaw was found in sssd. A remote attacker can cause a denial of service (DoS) by submitting a certificate that lacks a

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-05 发布INFO

If BuildKit daemon is started with --cdi-disabled it can lead to daemon panic when builds try to use CDI devices. This can happen maliciously or by accident.

CVE-2026-93316

If BuildKit daemon is started with --cdi-disabled it can lead to daemon panic when builds try to use CDI devices. This c

历史摘要 · 未重新核验 · NVD

安全公告2026-10-05 发布INFO

Starting daemon with --cdi-disabled flag can lead to panic on specific builds

CVE-2026-93316

If BuildKit daemon is started with --cdi-disabled it can lead to daemon panic when builds try to use CDI devices. This c

历史摘要 · 未重新核验 · OSV.dev