#cwe-674

共收录 308 条相关情报。

← 返回所有主题
漏洞预警2026-08-07 发布INFO

HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare interoperability in Java. Prior to 6.9.11, XhtmlParser.java imposes no maximum element nesting dep...

CVE-2026-62296

HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare interoperability in Java. Prior to 6.9.11

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-07 发布INFO

HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare interoperability in Java. Prior to 6.9.11, the JSON utility parser in org.hl7.fhir.utilities.json....

CVE-2026-62295

HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare interoperability in Java. Prior to 6.9.11

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-06 发布INFO

A bug in APR-util version 1.6.3 (and earlier) allows a stack recursion attack against any library consumer which parses XML from untrusted sources and uses the apr_xml_quote_ele...

CVE-2026-32327

A bug in APR-util version 1.6.3 (and earlier) allows a stack recursion attack against any library consumer which parses

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-05 发布INFO

A denial of service vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated attacker to cause excessive CPU consumption and exhaust the pool of ...

CVE-2026-15996

A denial of service vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated attacker to

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-03 发布INFO

Misskey is an open source, federated social media platform. IVersions 8.63.0 and later, but prior to 2026.5.4, contain a vulnerability that can cause the Misskey web client to s...

CVE-2026-46714

Misskey is an open source, federated social media platform. IVersions 8.63.0 and later, but prior to 2026.5.4, contain a

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-03 发布INFO

In Bouncy Castle for Java before 1.85, Lazy ASN.1 sequence forcing resets nesting-depth guard. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Cast...

CVE-2026-13506

In Bouncy Castle for Java before 1.85, Lazy ASN.1 sequence forcing resets nesting-depth guard. This issue also affects B

历史摘要 · 未重新核验 · NVD

安全公告2026-08-03 发布INFO

In Bouncy Castle for Java before 1.85, OER parser recurses without depth limit on self...

CVE-2026-59645

In Bouncy Castle for Java before 1.85, OER parser recurses without depth limit on self-referential IEEE 1609.2 schema. T

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-03 发布INFO

In Bouncy Castle for Java before 1.85, OER parser recurses without depth limit on self-referential IEEE 1609.2 schema. This issue also affects Bouncy Castle for Java LTS before ...

CVE-2026-59645

In Bouncy Castle for Java before 1.85, OER parser recurses without depth limit on self-referential IEEE 1609.2 schema. T

历史摘要 · 未重新核验 · NVD

安全公告2026-08-03 发布INFO

OER parser recurses without depth limit on self-referential IEEE 1609.2 schema

CVE-2026-59645

In Bouncy Castle for Java before 1.85, OER parser recurses without depth limit on self-referential IEEE 1609.2 schema. T

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-08-01 发布INFO

axios before 0.33.0 contains an incomplete depth-limit bypass in toFormData.js when serializing...

CVE-2026-67321

axios before 0.33.0 contains an incomplete depth-limit bypass in toFormData.js when serializing objects with top-level k

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-01 发布INFO

axios before 0.33.0 contains an incomplete depth-limit bypass in toFormData.js when serializing objects with top-level keys ending in '{}'. Attackers who control object keys and...

CVE-2026-67321

axios before 0.33.0 contains an incomplete depth-limit bypass in toFormData.js when serializing objects with top-level k

历史摘要 · 未重新核验 · NVD

安全公告2026-08-01 发布INFO

axios before 0.33.0 Denial of Service via maxDepth bypass

CVE-2026-67321

axios before 0.33.0 contains an incomplete depth-limit bypass in toFormData.js when serializing objects with top-level k

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-07-29 发布INFO

Courier IMAP before 6.0.1 and Courier Mail Server before 2.0.2 allow authenticated IMAP users to crash the imapd process via deeply nested parenthesized SEARCH queries. The SEAR...

CVE-2026-67194

Courier IMAP before 6.0.1 and Courier Mail Server before 2.0.2 allow authenticated IMAP users to crash the imapd process

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-29 发布INFO

cJSON through 1.7.19 is vulnerable to uncontrolled recursion leading to stack exhaustion when an untrusted RFC 6902 JSON Patch is applied via cJSONUtils_ApplyPatches() or cJSONU...

CVE-2026-67215

cJSON through 1.7.19 is vulnerable to uncontrolled recursion leading to stack exhaustion when an untrusted RFC 6902 JSON

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-29 发布INFO

The Apache Traffic Server ESI plugin can recurse without bound and fetch attacker-controlled URLs. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.9, from 9.0....

CVE-2026-58178

The Apache Traffic Server ESI plugin can recurse without bound and fetch attacker-controlled URLs. This issue affects A

历史摘要 · 未重新核验 · NVD

安全公告2026-07-28 发布INFO

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is affected by a denial of...

CVE-2026-16192

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is affected by a denial of service vulnerability wh

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-07-28 发布INFO

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is affected by a denial of service vulnerability when the restConnector-2.0 feature is enabled.

CVE-2026-16192

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is affected by a denial of service vulnerability wh

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-28 发布INFO

Pivotick contains an uncontrolled-recursion vulnerability when processing caller-supplied graph and node data. The affected graph algorithms recursively traversed graph edges, w...

CVE-2026-66920

Pivotick contains an uncontrolled-recursion vulnerability when processing caller-supplied graph and node data. The affec

历史摘要 · 未重新核验 · NVD

安全公告2026-07-28 发布INFO

Pivotick - Stack Exhaustion Denial of Service via Deep or Cyclic Graph Data

CVE-2026-66920

Pivotick contains an uncontrolled-recursion vulnerability when processing caller-supplied graph and node data. The affec

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-07-27 发布INFO

The Erlang/OTP ssl application does not detect cycles when reconstructing an incomplete peer certificate chain during a TLS or DTLS handshake. In ssl_certificate:handle_incomple...

CVE-2026-58227

The Erlang/OTP ssl application does not detect cycles when reconstructing an incomplete peer certificate chain during a

历史摘要 · 未重新核验 · NVD