#cwe-670

共收录 41 条相关情报。

← 返回所有主题
漏洞预警2026-10-29 发布MEDIUM

A flaw was found in the Pushed Authorization Request PAR implementation of the keycloak-services component. The issue occurs when an authentication flow is restarted, which inco...

CVE-2026-117859

A flaw was found in the Pushed Authorization Request PAR implementation of the keycloak-services component. The issue oc

来源摘录 · NVD

安全公告2026-10-21 发布INFO

Vyper from 0.1.0b10 before 0.2.3 generates incorrect code for a return statement inside a for...

CVE-2020-37288

Vyper from 0.1.0b10 before 0.2.3 generates incorrect code for a return statement inside a for loop in an internal functi

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-21 发布INFO

Vyper from 0.1.0b10 before 0.2.3 generates incorrect code for a return statement inside a for loop in an internal function called two or more internal calls deep, producing an i...

CVE-2020-37288

Vyper from 0.1.0b10 before 0.2.3 generates incorrect code for a return statement inside a for loop in an internal functi

历史摘要 · 未重新核验 · NVD

安全公告2026-10-06 发布INFO

In sshd in OpenSSH before 10.6, the restrict keyword (in authorized_keys) was supposed to be...

CVE-2026-106586

In sshd in OpenSSH before 10.6, the restrict keyword (in authorized_keys) was supposed to be applicable to tunnel forwar

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-06 发布INFO

In sshd in OpenSSH before 10.6, the restrict keyword (in authorized_keys) was supposed to be applicable to tunnel forwarding but was not, a different vulnerability than CVE-2026...

CVE-2026-106586

In sshd in OpenSSH before 10.6, the restrict keyword (in authorized_keys) was supposed to be applicable to tunnel forwar

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-30 发布INFO

A Kiteworks appliance setup interface did not enforce authentication once the appliance had completed initial configuration. An unauthenticated attacker with network access to t...

CVE-2026-102124

A Kiteworks appliance setup interface did not enforce authentication once the appliance had completed initial configurat

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-30 发布INFO

An endpoint used during initial appliance setup did not require authentication and did not correctly enforce its intended state precondition, so during the initial activation wi...

CVE-2026-102110

An endpoint used during initial appliance setup did not require authentication and did not correctly enforce its intende

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-17 发布INFO

In the MISP sachertortephp library, the Xml::build() static method in lib/Cake/Utility/Xml.php contains a logic error in the conditional that gates network-based XML fetching. T...

CVE-2026-92932

In the MISP sachertortephp library, the Xml::build() static method in lib/Cake/Utility/Xml.php contains a logic error in

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-16 发布INFO

A specially crafted packet can cause the premature expiry of multicast forwarding state on affected interfaces, potentially resulting in temporary multicast traffic loss during ...

CVE-2026-73468

A specially crafted packet can cause the premature expiry of multicast forwarding state on affected interfaces, potentia

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-25 发布INFO

MintyItanium Lost-Auction is an auction plugin for Minecraft. Prior to commit 88c920b05042929db334ba06d57f052b42d6b3f8, players can take items like barrier blocks or duplicate i...

CVE-2026-55624

MintyItanium Lost-Auction is an auction plugin for Minecraft. Prior to commit 88c920b05042929db334ba06d57f052b42d6b3f8,

历史摘要 · 未重新核验 · NVD

安全公告2026-08-24 发布INFO

The guard checker in Rocq Prover does not recheck the recursive tree representation of an...

CVE-2026-72704

The guard checker in Rocq Prover does not recheck the recursive tree representation of an inductive type parameter after

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-24 发布INFO

The guard checker in Rocq Prover does not follow recursive calls made through a fixpoint's own...

CVE-2026-72705

The guard checker in Rocq Prover does not follow recursive calls made through a fixpoint's own arguments. A fixpoint may

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-24 发布INFO

The guard checker in Rocq Prover treats a parameter of a nested mutual fixpoint as uniform...

CVE-2026-72703

The guard checker in Rocq Prover treats a parameter of a nested mutual fixpoint as uniform without examining calls betwe

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-24 发布INFO

The guard checker in Rocq Prover does not follow recursive calls made through a fixpoint's own arguments. A fixpoint may pass itself as a higher-order argument to a second fixpo...

CVE-2026-72705

The guard checker in Rocq Prover does not follow recursive calls made through a fixpoint's own arguments. A fixpoint may

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-24 发布INFO

The guard checker in Rocq Prover does not recheck the recursive tree representation of an inductive type parameter after that parameter has been changed by transport. A fixpoint...

CVE-2026-72704

The guard checker in Rocq Prover does not recheck the recursive tree representation of an inductive type parameter after

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-24 发布INFO

The guard checker in Rocq Prover treats a parameter of a nested mutual fixpoint as uniform without examining calls between the different bodies of that fixpoint. find_uniform_pa...

CVE-2026-72703

The guard checker in Rocq Prover treats a parameter of a nested mutual fixpoint as uniform without examining calls betwe

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-13 发布INFO

Perl versions from 5.9.4 before 5.41.9 produce incorrect regular expression match results when a stale failure flag ends the Aho-Corasick prescan early in S_find_byclass. The p...

CVE-2026-19487

Perl versions from 5.9.4 before 5.41.9 produce incorrect regular expression match results when a stale failure flag ends

历史摘要 · 未重新核验 · NVD

安全公告2026-08-11 发布INFO

In sshd in OpenSSH before 10.5, the restrict keyword (in authorized_keys) was supposed to be...

CVE-2026-73283

In sshd in OpenSSH before 10.5, the restrict keyword (in authorized_keys) was supposed to be applicable to tunnel forwar

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-11 发布INFO

In sshd in OpenSSH before 10.5, the restrict keyword (in authorized_keys) was supposed to be applicable to tunnel forwarding but was not.

CVE-2026-73283

In sshd in OpenSSH before 10.5, the restrict keyword (in authorized_keys) was supposed to be applicable to tunnel forwar

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

Always-incorrect control flow implementation in some firmware for some Intel(R) Xeon(R) processors may allow an escalation of privilege. System software adversary with a privile...

CVE-2026-20713

Always-incorrect control flow implementation in some firmware for some Intel(R) Xeon(R) processors may allow an escalati

历史摘要 · 未重新核验 · NVD