#cwe-567

共收录 9 条相关情报。

← 返回所有主题
漏洞预警2026-10-30 发布MEDIUM

Traefik from 3.2.0 before 3.7.15 contains a data race in the experimental FastProxy that allows unauthenticated attackers to crash the process by abusing HTTP/1 protocol upgrade...

CVE-2026-119574

Traefik from 3.2.0 before 3.7.15 contains a data race in the experimental FastProxy that allows unauthenticated attacker

来源摘录 · NVD

漏洞预警2026-10-05 发布INFO

A malicious external BuildKit frontend can send requests using the internal API that can create conditions for a data race that can cause the BuildKit daemon to panic.

CVE-2026-93319

A malicious external BuildKit frontend can send requests using the internal API that can create conditions for a data ra

历史摘要 · 未重新核验 · NVD

安全公告2026-10-05 发布INFO

A malicious frontend can cause a daemon panic

CVE-2026-93319

A malicious external BuildKit frontend can send requests using the internal API that can create conditions for a data ra

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-08-15 发布INFO

Exposure of data element to wrong session vulnerability in the JSON plugin of Apache Struts. Per-response serialization state could be shared across concurrent requests, allowin...

CVE-2026-73632

Exposure of data element to wrong session vulnerability in the JSON plugin of Apache Struts. Per-response serialization

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-15 发布INFO

Exposure of data element to wrong session vulnerability in the JSON plugin of Apache Struts. Per-request parsing state could be shared across concurrent requests, allowing data ...

CVE-2026-73631

Exposure of data element to wrong session vulnerability in the JSON plugin of Apache Struts. Per-request parsing state c

历史摘要 · 未重新核验 · NVD

安全公告2026-06-24 发布INFO

OliveTin has a Concurrent Template Parsing Race Condition which Leads to Cross-Request Command Contamination

CVE-2026-48708

## Summary OliveTin's template engine uses a **single shared `text/template.Template` instance** (`tpl` package-level v

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-06-15 发布INFO

OliveTin gives access to predefined shell commands from a web interface. In versions 3000.0.0 and prior, the template engine uses a single shared text/template.Template instance...

CVE-2026-48708

OliveTin gives access to predefined shell commands from a web interface. In versions 3000.0.0 and prior, the template en

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-10 发布INFO

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-48 and 7.1.2-23, an attacker who can connect to a magick ...

CVE-2026-46693

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-

历史摘要 · 未重新核验 · NVD

安全公告2026-05-22 发布INFO

ImageMagick: Race Condition in distributed pixel cache server can result in file descriptor hijacking

CVE-2026-46693

An attacker who can connect to a magick -distribute-cache service can hijack a file descriptor in the server process whe

历史摘要 · 未重新核验 · GitHub Advisory