#cwe-480

共收录 8 条相关情报。

漏洞预警2026-10-28 发布INFO

Incorrect operator (CWE-480) in the FetchSnapshot RPC handler in Apache Kafka from 2.8.0 before 4.2.2, and from 4.3.0 before 4.3.2 on all platforms allows an authenticated attac...

CVE-2026-83525

Incorrect operator (CWE-480) in the FetchSnapshot RPC handler in Apache Kafka from 2.8.0 before 4.2.2, and from 4.3.0 be

来源摘录 · NVD / OSV.dev

#advisory #cve #cwe-480

安全公告2026-09-07 发布INFO

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior...

CVE-2026-79643

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-480 #severity:high

漏洞预警2026-09-07 发布INFO

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Use of Incorrect Operator vulnerability. An unauthenti...

CVE-2026-79643

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains

历史摘要 · 未重新核验 · NVD

#cve #cwe-480

漏洞预警2026-08-21 发布INFO

Keystone is a content management system for Node.js. Prior to 6.5.3, the findMany resolver in packages/core/src/lib/core/queries/resolvers.ts compares the signed take argument d...

CVE-2026-63421

Keystone is a content management system for Node.js. Prior to 6.5.3, the findMany resolver in packages/core/src/lib/core

历史摘要 · 未重新核验 · NVD

#cve #cwe-20 #cwe-480

安全公告2026-08-21 发布INFO

Keystone vulnerable to `graphql.maxTake` bypass with negative `take`

CVE-2026-63421

# Summary The value of `graphql.maxTake` can be bypassed by providing a negative input. This can be used to exceed the d

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #npm #cwe-20 #cwe-480 #severity:high

漏洞预警2026-07-17 发布INFO

pyzipper is a replacement for Python's zipfile that can read and write AES encrypted zip files. Prior to 0.4.0, a Python operator precedence bug in pyzipper/zipfile_aes.py cause...

CVE-2026-44722

pyzipper is a replacement for Python's zipfile that can read and write AES encrypted zip files. Prior to 0.4.0, a Python

历史摘要 · 未重新核验 · NVD

#cve #cwe-480

安全公告2026-07-17 发布INFO

pyzipper: Encryption bypass for small files encrypted with pyzipper

CVE-2026-44722

pyzipper is a replacement for Python's zipfile that can read and write AES encrypted zip files. Prior to 0.4.0, a Python

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-480

漏洞预警2026-06-26 发布INFO

Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.35.11, 1.36.7, 1.37.3, and 1.38.1, in cases where UDP DNS filter is configured ...

CVE-2026-48497

Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.35.11, 1.36.7, 1.37.3,

历史摘要 · 未重新核验 · NVD

#cve #cwe-480