#cwe-674

共收录 308 条相关情报。

← 返回所有主题
漏洞预警2026-09-04 发布INFO

IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 could allow a local attacker to ...

CVE-2026-17440

IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 1

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-03 发布INFO

toml-node is a TOML parser for Node.js and the browser. Prior to 4.2.0, toml.parse() uses a Peggy 5.1.0 generated recursive-descent parser in lib/parser.js whose peg$parsevalue,...

CVE-2026-77465

toml-node is a TOML parser for Node.js and the browser. Prior to 4.2.0, toml.parse() uses a Peggy 5.1.0 generated recurs

历史摘要 · 未重新核验 · NVD

安全公告2026-09-03 发布INFO

toml-node: Uncontrolled Recursion

CVE-2026-77465

### Summary `toml.parse()` crashes with an uncaught `RangeError: Maximum call stack size exceeded` when parsing deeply

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-03 发布INFO

An uncontrolled recursion issue exists in Amazon Ion-C versions before 1.1.6 that might allow a remote unauthenticated actor to craft Ion data that exhausts the native call stac...

CVE-2026-84851

An uncontrolled recursion issue exists in Amazon Ion-C versions before 1.1.6 that might allow a remote unauthenticated a

历史摘要 · 未重新核验 · NVD

安全公告2026-09-02 发布INFO

Uncontrolled recursion in the Ion reader in Amazon Ion-C before 1.1.6

CVE-2026-84851

An uncontrolled recursion issue exists in Amazon Ion-C versions before 1.1.6 that might allow a remote unauthenticated a

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-09-02 发布INFO

A maliciously crafted IFC file, when parsed through certain Autodesk products, can trigger an Uncontrolled Recursion vulnerability. A malicious actor may leverage this vulnerabi...

CVE-2026-14255

A maliciously crafted IFC file, when parsed through certain Autodesk products, can trigger an Uncontrolled Recursion vul

历史摘要 · 未重新核验 · NVD

安全公告2026-09-02 发布INFO

Mistune: Denial of Service — RecursionError via Excessive Emphasis Markers in Markdown

CVE-2026-76098

## Summary Mistune v3.3.2 is vulnerable to a Denial of Service (DoS) attack via uncontrolled recursion in the HTML rende

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-02 发布INFO

In Eclipse Ditto versions 3.0.0 to 3.9.6, the Things service fetches WoT (Web of Things) ThingModels over HTTP from URLs supplied by API users in the definition field of a Thing...

CVE-2026-84175

In Eclipse Ditto versions 3.0.0 to 3.9.6, the Things service fetches WoT (Web of Things) ThingModels over HTTP from URLs

历史摘要 · 未重新核验 · NVD

安全公告2026-09-02 发布INFO

CVE-2026-84175

CVE-2026-84175

In Eclipse Ditto versions 3.0.0 to 3.9.6, the Things service fetches WoT (Web of Things) ThingModels over HTTP from URLs

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-02 发布INFO

Net::DNS versions before 1.57 for Perl allow memory exhaustion via unbounded recursion in...

CVE-2026-81928

Net::DNS versions before 1.57 for Perl allow memory exhaustion via unbounded recursion in sig_data when re-encoding a me

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-02 发布INFO

Net::DNS versions before 1.57 for Perl allow memory exhaustion via unbounded recursion in sig_data when re-encoding a message with a misplaced TSIG record. sig_data signs a mes...

CVE-2026-81928

Net::DNS versions before 1.57 for Perl allow memory exhaustion via unbounded recursion in sig_data when re-encoding a me

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-01 发布INFO

llama.cpp through commit 97f06e9, when started with the --reranking flag, allows remote attackers to cause a denial of service (std::bad_alloc and HTTP 500) via a negative top_n...

CVE-2026-52132

llama.cpp through commit 97f06e9, when started with the --reranking flag, allows remote attackers to cause a denial of s

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-01 发布INFO

llama.cpp b5693 and before is vulnerable to Uncontrolled Recursion in common/json-schema-to-grammar.cpp, resulting in a denial of service.

CVE-2026-52130

llama.cpp b5693 and before is vulnerable to Uncontrolled Recursion in common/json-schema-to-grammar.cpp, resulting in a

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-31 发布INFO

Uncontrolled Recursion vulnerability in Samsung Open Source rlottie allows Serialized Data with Nested Payloads. This issue affects rlottie: before 8de0d9e6ca80ffef654965505981...

CVE-2026-82797

Uncontrolled Recursion vulnerability in Samsung Open Source rlottie allows Serialized Data with Nested Payloads. This i

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-31 发布INFO

A flaw has been found in BareBones BBEdit up to 15.5.5. Impacted is an unknown function of the component Java Language Module. This manipulation causes uncontrolled recursion. R...

CVE-2026-82604

A flaw has been found in BareBones BBEdit up to 15.5.5. Impacted is an unknown function of the component Java Language M

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-30 发布INFO

Uncontrolled Recursion vulnerability in ash-project ash_oban allows a user who can drive a trigger's on_error action to fail on the final attempt to exhaust worker CPU and memor...

CVE-2026-78228

Uncontrolled Recursion vulnerability in ash-project ash_oban allows a user who can drive a trigger's on_error action to

历史摘要 · 未重新核验 · NVD

安全公告2026-08-30 发布INFO

Unbounded handle_error recursion enables denial of service in AshOban triggers

CVE-2026-78228

Uncontrolled Recursion vulnerability in ash-project ash_oban allows a user who can drive a trigger's on_error action to

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-08-28 发布INFO

Uncontrolled Recursion vulnerability in the Elixir standard library allows an attacker who controls a list passed to inspect/1, List.to_string/1, or List.to_charlist/1 to exhaus...

CVE-2026-75758

Uncontrolled Recursion vulnerability in the Elixir standard library allows an attacker who controls a list passed to ins

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-28 发布INFO

An attacker that has valid credentials can send crafted compressed data that causes the affected process to exhaust its stack and crash. The affected process is terminated, whic...

CVE-2026-73209

An attacker that has valid credentials can send crafted compressed data that causes the affected process to exhaust its

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-27 发布INFO

NLTK before 3.10.3 contains an uncontrolled recursion vulnerability in nltk.featstruct.FeatStructReader that allows unauthenticated attackers to cause a denial of service by sup...

CVE-2026-81724

NLTK before 3.10.3 contains an uncontrolled recursion vulnerability in nltk.featstruct.FeatStructReader that allows unau

历史摘要 · 未重新核验 · NVD