#cwe-617

共收录 216 条相关情报。

← 返回所有主题
漏洞预警2026-06-23 发布HIGH

A malformed Bluetooth Classic SDP attribute can trigger a reachable assertion in Zephyr's SDP parser. In subsys/bluetooth/host/classic/sdp.c, bt_sdp_parse_attribute() accepts an...

CVE-2026-10651

该漏洞存在于 Zephyr RTOS 的蓝牙经典 SDP 解析器中。在 subsys/bluetooth/host/classic/sdp.c 文件的 bt_sdp_parse_attribute() 函数中,当输入缓冲区包含 1 字节的属

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-22 发布HIGH

vLLM is an inference and serving engine for large language models (LLMs). Prior to 0.22.0, an assert-based security check in vLLM's activation function loading allows any unauth...

CVE-2026-41523

vLLM(一个用于大型语言模型的推理和服务引擎)在0.22.0版本之前存在一个安全漏洞。该漏洞源于vLLM在加载激活函数时使用了基于断言的检查(assert-based security check),该检查在Python优化模式(pyth

历史摘要 · 未重新核验 · NVD

安全公告2026-06-19 发布INFO

OpenBao: Transit secrets engine crashes on key creation with `derived: true` for asymmetric key types

CVE-2026-55776

On OpenBao 2.5.4 and 2.5.2(and likely earlier versions also), an authenticated caller with write access to `transit/keys

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-06-15 发布INFO

A denial of service vulnerability was found in GStreamer's AV1 codec parser in gst-plugins-bad. The gst_av1_parser_parse_tile_list_obu() function passes a byte count to a bit-re...

CVE-2026-52718

A denial of service vulnerability was found in GStreamer's AV1 codec parser in gst-plugins-bad. The gst_av1_parser_parse

历史摘要 · 未重新核验 · NVD

安全公告2026-06-10 发布INFO

When using $changestreams and $_requestReshardingResumeToken with the exchange option the server...

CVE-2026-9746

When using $changestreams and $_requestReshardingResumeToken with the exchange option the server hits an invariant which

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-10 发布INFO

This issue can occur when running an aggregation pipeline that uses the internal $exchange stage...

CVE-2026-9749

This issue can occur when running an aggregation pipeline that uses the internal $exchange stage configured with key-ran

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-10 发布INFO

Adding fromRouter:true and runtimeConstants.userRoles could cause aggregations to crash mongodb...

CVE-2026-9747

Adding fromRouter:true and runtimeConstants.userRoles could cause aggregations to crash mongodb server.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-10 发布INFO

An authenticated user can cause a MongoDB server to crash or return incorrect results by creating...

CVE-2026-9750

An authenticated user can cause a MongoDB server to crash or return incorrect results by creating documents that interfe

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-10 发布INFO

The $_internalConvertBucketIndexStats stage used PauseExecution as a way to signal "skip this...

CVE-2026-9748

The $_internalConvertBucketIndexStats stage used PauseExecution as a way to signal "skip this document" when an index st

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-06-10 发布INFO

Nimiq is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. Prior to version 1.5.0, a remote peer can crash any full node by ...

CVE-2026-46543

Nimiq is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. Prior to

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-10 发布INFO

Nimiq is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. Prior to version 1.4.0, a denial-of-service vulnerability exists ...

CVE-2026-46542

Nimiq is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. Prior to

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-09 发布INFO

An authenticated user can cause a MongoDB server to crash or return incorrect results by creating documents that interfere with internal metadata processing during query executi...

CVE-2026-9750

An authenticated user can cause a MongoDB server to crash or return incorrect results by creating documents that interfe

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-09 发布INFO

This issue can occur when running an aggregation pipeline that uses the internal $exchange stage configured with key-range partitioning and order-preserving delivery. If a singl...

CVE-2026-9749

This issue can occur when running an aggregation pipeline that uses the internal $exchange stage configured with key-ran

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-09 发布INFO

The $_internalConvertBucketIndexStats stage used PauseExecution as a way to signal "skip this document" when an index stats conversion failed. But PauseExecution is not a genera...

CVE-2026-9748

The $_internalConvertBucketIndexStats stage used PauseExecution as a way to signal "skip this document" when an index st

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-09 发布INFO

Adding fromRouter:true and runtimeConstants.userRoles could cause aggregations to crash mongodb server.

CVE-2026-9747

Adding fromRouter:true and runtimeConstants.userRoles could cause aggregations to crash mongodb server.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-09 发布INFO

When using $changestreams and $_requestReshardingResumeToken with the exchange option the server hits an invariant which causes the server to crash. There are no special privile...

CVE-2026-9746

When using $changestreams and $_requestReshardingResumeToken with the exchange option the server hits an invariant which

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-08 发布INFO

Improper validation of packet length during tls-crypt-v2 key extraction in OpenVPN 2.6.0 through 2.6.19 and 2.7_alpha1 through 2.7.1 allows authenticated attackers to trigger a ...

CVE-2026-35058

Improper validation of packet length during tls-crypt-v2 key extraction in OpenVPN 2.6.0 through 2.6.19 and 2.7_alpha1 t

历史摘要 · 未重新核验 · NVD

安全公告2026-06-02 发布INFO

A security vulnerability has been detected in SGLang 0.5.10.post1. Impacted is an unknown...

CVE-2026-10300

A security vulnerability has been detected in SGLang 0.5.10.post1. Impacted is an unknown function of the file python/sg

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-06-01 发布INFO

A security vulnerability has been detected in SGLang 0.5.10.post1. Impacted is an unknown function of the file python/sglang/srt/lora/lora_manager.py of the component Inference ...

CVE-2026-10300

A security vulnerability has been detected in SGLang 0.5.10.post1. Impacted is an unknown function of the file python/sg

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-01 发布INFO

FlexRIC v2.0.0 contains an authorization bypass in the iApp's xApp isolation mechanism. The equality function eq_xapp_ric_gen_id() in src/ric/iApp/xapp_ric_id.c compares m0->xap...

CVE-2026-37233

FlexRIC v2.0.0 contains an authorization bypass in the iApp's xApp isolation mechanism. The equality function eq_xapp_ri

历史摘要 · 未重新核验 · NVD