#cwe-606

共收录 22 条相关情报。

← 返回所有主题
漏洞预警2026-10-28 发布INFO

In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, uncontrolled recursion, infinite loop, unchecked loop condition and inefficient regular express...

CVE-2026-118037

In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, uncontrolled recursion, infinite loop,

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

Microsoft Network Monitor file parser large loop in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service

CVE-2026-95394

Microsoft Network Monitor file parser large loop in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-18 发布INFO

A denial of service flaw was found in Poppler's Splash backend. A crafted PDF with tiling-pattern geometry approaching the int32 boundary can cause SplashOutputDev::tilingPatter...

CVE-2026-93653

A denial of service flaw was found in Poppler's Splash backend. A crafted PDF with tiling-pattern geometry approaching t

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-04 发布INFO

smol-toml is a small, fast, and correct TOML parser and serializer. Prior to 1.7.1, parse() can enter an infinite loop when a value inside an array or inline table is followed b...

CVE-2026-85730

smol-toml is a small, fast, and correct TOML parser and serializer. Prior to 1.7.1, parse() can enter an infinite loop w

历史摘要 · 未重新核验 · NVD

安全公告2026-09-04 发布INFO

smol-toml: Denial of Service via malformed TOML documents

CVE-2026-85730

smol-toml is a small, fast, and correct TOML parser and serializer. Prior to 1.7.1, parse() can enter an infinite loop w

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-08-28 发布INFO

Pega Platform versions 7.1.0 through 25.1.2 are affected by an improper validation of inputs that are used for loop conditions, potentially leading to a denial of service or oth...

CVE-2026-13761

Pega Platform versions 7.1.0 through 25.1.2 are affected by an improper validation of inputs that are used for loop cond

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-25 发布INFO

GNU wget is vulnerable to denial of service in its FTP OPIE/S-KEY authentication functionality. The server-supplied sequence number from the FTP challenge line is used as an ite...

CVE-2026-16599

GNU wget is vulnerable to denial of service in its FTP OPIE/S-KEY authentication functionality. The server-supplied sequ

历史摘要 · 未重新核验 · NVD

安全公告2026-08-11 发布INFO

Microsoft Security Advisory CVE-2026-62901 – .NET Denial of Service Vulnerability

CVE-2026-62901

## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Syst

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-11 发布HIGH

Unchecked input for loop condition in .NET allows an unauthorized attacker to deny service over a network.

CVE-2026-62901

Unchecked input for loop condition in .NET allows an unauthorized attacker to deny service over a network.

来源摘录 · NVD

漏洞预警2026-08-06 发布INFO

Mermaid is a JavaScript tool that uses Markdown-inspired text to create and modify diagrams and charts. From version 11.6.0 until 11.16.1, Mermaid Radar Diagrams allow arbitrary...

CVE-2026-71439

Mermaid is a JavaScript tool that uses Markdown-inspired text to create and modify diagrams and charts. From version 11.

历史摘要 · 未重新核验 · NVD

安全公告2026-08-06 发布INFO

Mermaid radar diagrams are vulnerable to DoS

CVE-2026-71439

### Impact Mermaid radar diagrams allow arbitrary large values for `ticks`, which can cause high CPU usage, freezing th

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-05 发布INFO

A vulnerability in the Extensible Messaging Client Protocol (XMCP), also referred to as the External Client protocol, of Cisco IOS Software and Cisco IOS XE Software could allow...

CVE-2026-20301

A vulnerability in the Extensible Messaging Client Protocol (XMCP), also referred to as the External Client protocol, of

历史摘要 · 未重新核验 · NVD

安全公告2026-07-09 发布INFO

An Unchecked Input for Loop Condition vulnerability in the Packet Forwarding Engine (pfe) of...

CVE-2026-33800

An Unchecked Input for Loop Condition vulnerability in the Packet Forwarding Engine (pfe) of Juniper Networks Junos OS o

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-07-09 发布INFO

An Unchecked Input for Loop Condition vulnerability in the Packet Forwarding Engine (pfe) of Juniper Networks Junos OS on MX Series allows an unauthenticated, adjacent attacker ...

CVE-2026-33800

An Unchecked Input for Loop Condition vulnerability in the Packet Forwarding Engine (pfe) of Juniper Networks Junos OS o

历史摘要 · 未重新核验 · NVD

安全公告2026-07-08 发布INFO

FMP/NOTIFY protocol dissector crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial...

CVE-2026-15172

FMP/NOTIFY protocol dissector crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-07-08 发布INFO

FMP/NOTIFY protocol dissector crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service

CVE-2026-15172

FMP/NOTIFY protocol dissector crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-23 发布INFO

When using the "tarfile" module with a file opened in "streaming mode" (mode="r|") the tarfile module did not properly handle EOF, making archive parsing take exponentially longer.

CVE-2026-11972

When using the "tarfile" module with a file opened in "streaming mode" (mode="r|") the tarfile module did not properly h

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-09 发布INFO

Logic bypass vulnerability in the file system. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2026-41986

Logic bypass vulnerability in the file system. Impact: Successful exploitation of this vulnerability may affect availabi

历史摘要 · 未重新核验 · NVD

安全公告2026-05-20 发布INFO

An unbounded resend loop vulnerability exists in the BIND 9 resolver state machine during bad...

CVE-2026-5950

An unbounded resend loop vulnerability exists in the BIND 9 resolver state machine during bad-server handling, enabling

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-20 发布INFO

An unbounded resend loop vulnerability exists in the BIND 9 resolver state machine during bad-server handling, enabling a remote unauthenticated attacker to cause severe resourc...

CVE-2026-5950

An unbounded resend loop vulnerability exists in the BIND 9 resolver state machine during bad-server handling, enabling

历史摘要 · 未重新核验 · NVD