#cwe-617

共收录 216 条相关情报。

← 返回所有主题
漏洞预警2026-08-24 发布INFO

A flaw has been found in Open5GS up to 2.8.0. This affects an unknown function of the file src/hss/hss-cx-path.c of the component HSS. This manipulation of the argument User-Nam...

CVE-2026-78186

A flaw has been found in Open5GS up to 2.8.0. This affects an unknown function of the file src/hss/hss-cx-path.c of the

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-20 发布INFO

Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent has a heap out-of-bounds write in bufferevent_sock.c when bufferevent_socket_set_conn_addres...

CVE-2026-63388

Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent has a heap out-of-bounds write in b

历史摘要 · 未重新核验 · NVD

安全公告2026-08-20 发布INFO

Libevent: Heap out-of-bounds write in bufferevent_socket_set_conn_address_ reachable via AF_UNIX accept

CVE-2026-63388

Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent has a heap out-of-bounds write in b

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-08-20 发布INFO

BUSMASTER file parser abnormal exit in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

CVE-2026-76926

BUSMASTER file parser abnormal exit in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-19 发布INFO

BUSMASTER file parser abnormal exit in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

CVE-2026-76926

BUSMASTER file parser abnormal exit in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-18 发布INFO

libheif is a HEIF and AVIF file format decoder and encoder. In 1.23.0 and earlier, a crafted HEIF sequence accepted by heif_context_read_from_memory() can leave the context with...

CVE-2026-62377

libheif is a HEIF and AVIF file format decoder and encoder. In 1.23.0 and earlier, a crafted HEIF sequence accepted by h

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-18 发布INFO

libheif is a HEIF and AVIF file format decoder and encoder. In 1.23.0 and earlier, a crafted HEIF or AVIF file containing a clean aperture box can reduce an image dimension to z...

CVE-2026-62289

libheif is a HEIF and AVIF file format decoder and encoder. In 1.23.0 and earlier, a crafted HEIF or AVIF file containin

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-18 发布INFO

ZEBRA is a Zcash node written entirely in Rust. Prior to 4.5.0, an unauthenticated IPv4 peer can deterministically terminate a synced Zebra node using the default Linux dual-sta...

CVE-2026-52829

ZEBRA is a Zcash node written entirely in Rust. Prior to 4.5.0, an unauthenticated IPv4 peer can deterministically termi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-17 发布INFO

A reachable assertion was addressed with improved input validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10. An attacker in a privileged network position may be ab...

CVE-2026-43667

A reachable assertion was addressed with improved input validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.1

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-12 发布INFO

A vulnerability was detected in Open5GS up to 2.7.6. Affected is the function diam_log_func of the file lib/diameter/common/init.c of the component CER Handler. The manipulation...

CVE-2025-15684

A vulnerability was detected in Open5GS up to 2.7.6. Affected is the function diam_log_func of the file lib/diameter/com

历史摘要 · 未重新核验 · NVD

安全公告2026-08-12 发布INFO

Open5GS CER init.c diam_log_func assertion

CVE-2025-15684

A vulnerability was detected in Open5GS up to 2.7.6. Affected is the function diam_log_func of the file lib/diameter/com

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-08-11 发布INFO

An issue in MongoDB Server could allow an authenticated user, including one with no assigned...

CVE-2026-18707

An issue in MongoDB Server could allow an authenticated user, including one with no assigned privileges, to cause the se

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-11 发布INFO

An issue in MongoDB Server's aggregation framework could allow an unauthenticated party to cause...

CVE-2026-18697

An issue in MongoDB Server's aggregation framework could allow an unauthenticated party to cause a mongos (router) proce

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-11 发布INFO

An issue in MongoDB Server's handling of certain query predicates against time-series collections...

CVE-2026-18695

An issue in MongoDB Server's handling of certain query predicates against time-series collections with a metaField could

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-11 发布INFO

An issue in MongoDB Server could allow an authenticated user, including one with no assigned privileges, to cause the server process to terminate unexpectedly by submitting a sp...

CVE-2026-18707

An issue in MongoDB Server could allow an authenticated user, including one with no assigned privileges, to cause the se

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

An issue in MongoDB Server's aggregation framework could allow an unauthenticated party to cause a mongos (router) process to terminate unexpectedly by submitting a specially fo...

CVE-2026-18697

An issue in MongoDB Server's aggregation framework could allow an unauthenticated party to cause a mongos (router) proce

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

An issue in MongoDB Server's handling of certain query predicates against time-series collections with a metaField could allow an authenticated user with write access to cause t...

CVE-2026-18695

An issue in MongoDB Server's handling of certain query predicates against time-series collections with a metaField could

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

A flaw was found in claircore's RPM package scanner. Crafted RPM header data in a container layer can cause an unchecked type assertion to panic the scanner. The panic is not re...

CVE-2026-19519

A flaw was found in claircore's RPM package scanner. Crafted RPM header data in a container layer can cause an unchecked

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-06 发布INFO

node-re2 provides RE2 regular expression bindings for Node.js. Prior to version 1.25.1, the WrappedRE2::Replace function built its replacement result and passed it to V8 using T...

CVE-2026-71430

node-re2 provides RE2 regular expression bindings for Node.js. Prior to version 1.25.1, the WrappedRE2::Replace function

历史摘要 · 未重新核验 · NVD

安全公告2026-08-06 发布INFO

node-re2: String.prototype.replace(re2, template) aborts the Node process (uncatchable ToLocalChecked on empty MaybeLocal) when the result exceeds V8's max string length

CVE-2026-71430

## Description `WrappedRE2::Replace` builds the replacement result and hands it to V8 with `.ToLocalChecked()` **withou

历史摘要 · 未重新核验 · GitHub Advisory