#cwe-501

共收录 8 条相关情报。

← 返回所有主题

漏洞预警2026-09-30 发布HIGH

A trust-boundary flaw in CRI-O's sandbox state persistence allows attacker-influenced pod metadata to overwrite CRI-O's own reserved sandbox bookkeeping; once reloaded as truste...

CVE-2026-62146

A trust-boundary flaw in CRI-O's sandbox state persistence allows attacker-influenced pod metadata to overwrite CRI-O's

来源摘录 · NVD

#cve #cwe-501

漏洞预警2026-09-29 发布INFO

Improper validation of non-secure (NS) pointers in multiple TrustZone-M non-secure callable (NSC) entry functions allows an attacker executing in the non-secure world to supply ...

CVE-2026-102709

Improper validation of non-secure (NS) pointers in multiple TrustZone-M non-secure callable (NSC) entry functions allows

历史摘要 · 未重新核验 · NVD

#cve #cwe-200 #cwe-501 #cwe-822

安全公告2026-09-29 发布INFO

CVE-2026-102709

Improper validation of non-secure (NS) pointers in multiple TrustZone-M non-secure callable (NSC) entry functions allows

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-200 #cwe-501 #cwe-822

漏洞预警2026-09-11 发布INFO

Doco-CD is a GitOps continuous delivery tool that automatically deploys and updates Docker Compose projects/services and Swarm stacks. Prior to version 0.90.1, a trust-boundary ...

CVE-2026-54248

Doco-CD is a GitOps continuous delivery tool that automatically deploys and updates Docker Compose projects/services and

历史摘要 · 未重新核验 · NVD

#cve #cwe-347 #cwe-501

漏洞预警2026-07-23 发布MEDIUM

DOMPurify before 3.4.7 passes direct references to the module-level DEFAULT_ALLOWED_TAGS and DEFAULT_ALLOWED_ATTR sets to the uponSanitizeElement and uponSanitizeAttribute hooks...

CVE-2026-65902

DOMPurify before 3.4.7 passes direct references to the module-level DEFAULT_ALLOWED_TAGS and DEFAULT_ALLOWED_ATTR sets t

来源摘录 · NVD

#cve #cwe-501

漏洞预警2026-07-14 发布INFO

DOMPurify is a DOM-only cross-site scripting sanitizer for HTML, MathML, and SVG. Prior to 3.4.6, DOMPurify.sanitize(node, { IN_PLACE: true }) accepted same-origin foreign-realm...

CVE-2026-49458

DOMPurify is a DOM-only cross-site scripting sanitizer for HTML, MathML, and SVG. Prior to 3.4.6, DOMPurify.sanitize(nod

历史摘要 · 未重新核验 · NVD

#cve #cwe-79 #cwe-501 #cwe-693

安全公告2026-07-14 发布INFO

DOMPurify: Cross-realm IN_PLACE sanitization leaves executable markup intact via realm-bound `instanceof` checks

CVE-2026-49458

DOMPurify is a DOM-only cross-site scripting sanitizer for HTML, MathML, and SVG. Prior to 3.4.6, DOMPurify.sanitize(nod

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-501 #cwe-693 #cwe-79

漏洞预警2026-06-09 发布INFO

Trust boundary violation in Windows Attestation allows an authorized attacker to elevate privileges locally.

CVE-2026-33828

Trust boundary violation in Windows Attestation allows an authorized attacker to elevate privileges locally.

历史摘要 · 未重新核验 · NVD

#cve #cwe-501