#cwe-674

共收录 308 条相关情报。

← 返回所有主题
漏洞预警2026-09-18 发布INFO

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.20.0, 3.1.15.0, and 3.2.0.3-beta1,...

CVE-2026-59156

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / a

历史摘要 · 未重新核验 · NVD

安全公告2026-09-18 发布INFO

Mojolicious pure-Perl Mojo::JSON decoder allows memory exhaustion via deeply nested data

CVE-2026-68914

Mojolicious is a real-time web framework for Perl. Prior to 9.47, the pure-Perl implementation of Mojo::JSON does not li

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-18 发布INFO

OpenImageIO: Unbounded recursion in FITS header parser leads to stack overflow

CVE-2026-59156

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / a

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-18 发布INFO

braces through 3.0.3 Stack Overflow via Deeply Nested Patterns

CVE-2026-93687

braces through 3.0.3 contains a stack overflow vulnerability in the recursive AST walkers that lack depth guards. Attack

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-18 发布INFO

go-openapi/swag jsonutils before 0.27.1 contains a stack overflow vulnerability in ordered JSON...

CVE-2026-93450

go-openapi/swag jsonutils before 0.27.1 contains a stack overflow vulnerability in ordered JSON parsing and serializatio

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-18 发布INFO

redis-parser through 3.0.0 contains a denial of service vulnerability in the RESP protocol parser...

CVE-2026-93435

redis-parser through 3.0.0 contains a denial of service vulnerability in the RESP protocol parser that allows malicious

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-18 发布INFO

go-openapi/swag jsonutils before 0.27.1 contains a stack overflow vulnerability in ordered JSON parsing and serialization due to unbounded recursion with no depth limit. Remote ...

CVE-2026-93450

go-openapi/swag jsonutils before 0.27.1 contains a stack overflow vulnerability in ordered JSON parsing and serializatio

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-17 发布INFO

redis-parser through 3.0.0 contains a denial of service vulnerability in the RESP protocol parser that allows malicious Redis endpoints to crash the client process through unbou...

CVE-2026-93435

redis-parser through 3.0.0 contains a denial of service vulnerability in the RESP protocol parser that allows malicious

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-17 发布INFO

Elixir protobuf is a pure Elixir implementation of Google Protobuf. From 0.8.0 until 0.16.1, services that decode attacker-controlled protobuf bytes with Protobuf.Decoder can be...

CVE-2026-54451

Elixir protobuf is a pure Elixir implementation of Google Protobuf. From 0.8.0 until 0.16.1, services that decode attack

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-17 发布INFO

Traccar is an open source GPS tracking system. Prior to 6.14.0, an authenticated user with permission to manage groups and request reports can create a cyclic group-parent hiera...

CVE-2026-52852

Traccar is an open source GPS tracking system. Prior to 6.14.0, an authenticated user with permission to manage groups a

历史摘要 · 未重新核验 · NVD

安全公告2026-09-17 发布INFO

Traccar: Uncontrolled Infinite Loop DoS via Group Parent Cycle

CVE-2026-52852

Traccar is an open source GPS tracking system. Prior to 6.14.0, an authenticated user with permission to manage groups a

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-17 发布INFO

Elixir protobuf: Unbounded recursion depth in embedded-message decoding

CVE-2026-54451

Elixir protobuf is a pure Elixir implementation of Google Protobuf. From 0.8.0 until 0.16.1, services that decode attack

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-09-17 发布INFO

google-protobuf contains an unbounded recursion when parsing unknown protobuf group fields. An attacker can send a small crafted payload of deeply nested START_GROUP wire bytes ...

CVE-2026-89418

google-protobuf contains an unbounded recursion when parsing unknown protobuf group fields. An attacker can send a small

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-16 发布INFO

QDomDocument XML parsing is vulnerable to a remotely-triggerable denial-of-service crash when processing untrusted input.

CVE-2026-19248

QDomDocument XML parsing is vulnerable to a remotely-triggerable denial-of-service crash when processing untrusted input

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

IBM Verify Identity Access could allow a remote attacker to cause a denial of service due to insufficient validation of incoming request resources.

CVE-2026-12358

IBM Verify Identity Access could allow a remote attacker to cause a denial of service due to insufficient validation of

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

vikunja versions before 2.6.0 contain a resource exhaustion vulnerability in the task-filter endpoint that accepts deeply nested filter expressions without recursion depth limit...

CVE-2026-91968

vikunja versions before 2.6.0 contain a resource exhaustion vulnerability in the task-filter endpoint that accepts deepl

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-10 发布INFO

A flaw was found in the skupper-router component of Red Hat Service Interconnect, which is used to provide secure communication between distributed services. The issue occurs wh...

CVE-2026-88763

A flaw was found in the skupper-router component of Red Hat Service Interconnect, which is used to provide secure commun

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-08 发布INFO

Uncontrolled recursion in Microsoft Exchange Server allows an unauthorized attacker to deny service over a network.

CVE-2026-69378

Uncontrolled recursion in Microsoft Exchange Server allows an unauthorized attacker to deny service over a network.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-08 发布INFO

XenForo before 2.3.13 contains an uncontrolled recursion vulnerability in the BBCode parser that allows authenticated attackers to cause persistent denial of service by submitti...

CVE-2026-73321

XenForo before 2.3.13 contains an uncontrolled recursion vulnerability in the BBCode parser that allows authenticated at

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-08 发布INFO

Uncontrolled recursion in Qt's QDomDocument serialization (QtXml) lets deeply nested untrusted XML crash the app via stack exhaustion (DoS only).

CVE-2026-11573

Uncontrolled recursion in Qt's QDomDocument serialization (QtXml) lets deeply nested untrusted XML crash the app via sta

历史摘要 · 未重新核验 · NVD