#cwe-694

共收录 11 条相关情报。

安全公告2026-10-23 发布INFO

filelock: SoftFileLock evicts a fresh lock file whose watched age another local user's pre-dated file passed on through inode reuse

CVE-2026-112906

`SoftFileLock` and `MarkerSoftFileLock` evict an unparsable marker (the lock file at ``, whose presence says a process h

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #pip #cwe-694 #severity:medium

漏洞预警2026-10-20 发布INFO

filelock is a platform-independent file lock for Python. From 4.1.0 until 4.2.1, SoftFileLock versions from 4.1.0 can reuse a stale observation when an attacker pre-dates and re...

CVE-2026-112906

filelock is a platform-independent file lock for Python. From 4.1.0 until 4.2.1, SoftFileLock versions from 4.1.0 can re

历史摘要 · 未重新核验 · NVD

#cve #cwe-694

漏洞预警2026-10-12 发布INFO

OTRS does not sufficiently enforce the uniqueness of customer user identities across multiple configured CustomerUser backends. When multiple backends, such as a database and LD...

CVE-2026-78359

OTRS does not sufficiently enforce the uniqueness of customer user identities across multiple configured CustomerUser ba

历史摘要 · 未重新核验 · NVD

#cve #cwe-694 #cwe-706

漏洞预警2026-10-11 发布INFO

JupyterHub through 6.0.1 contains an identifier collision vulnerability that allows authenticated users to overwrite another user's named-server OAuth client by registering a hy...

CVE-2026-108752

JupyterHub through 6.0.1 contains an identifier collision vulnerability that allows authenticated users to overwrite ano

历史摘要 · 未重新核验 · NVD

#cve #cwe-694

安全公告2026-10-11 发布INFO

JupyterHub through 6.0.1 OAuth Client ID Collision via Unescaped Hyphen

CVE-2026-108752

JupyterHub through 6.0.1 contains an identifier collision vulnerability that allows authenticated users to overwrite ano

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-694

漏洞预警2026-09-29 发布INFO

SGLang through 0.5.20 in prefill/decode disaggregation mode fails to validate duplicate bootstrap_room fields in /generate requests with Mooncake KV transfer backend. Unauthenti...

CVE-2026-102634

SGLang through 0.5.20 in prefill/decode disaggregation mode fails to validate duplicate bootstrap_room fields in /genera

历史摘要 · 未重新核验 · NVD

#cve #cwe-694

安全公告2026-09-29 发布INFO

SGLang through 0.5.20 Denial of Service via Duplicate bootstrap_room

CVE-2026-102634

SGLang through 0.5.20 in prefill/decode disaggregation mode fails to validate duplicate bootstrap_room fields in /genera

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-694

漏洞预警2026-08-06 发布INFO

Traefik is an open source HTTP reverse proxy and load balancer. From 3.0.0 until 3.6.25 and 3.7.10, Traefik's Kubernetes Gateway API provider in pkg/provider/kubernetes/gateway/...

CVE-2026-71327

Traefik is an open source HTTP reverse proxy and load balancer. From 3.0.0 until 3.6.25 and 3.7.10, Traefik's Kubernetes

历史摘要 · 未重新核验 · NVD

#cve #cwe-694

安全公告2026-08-06 发布INFO

Traefik: Gateway API route identity collision allows cross-namespace backend hijacking

CVE-2026-71327

Traefik is an open source HTTP reverse proxy and load balancer. From 3.0.0 until 3.6.25 and 3.7.10, Traefik's Kubernetes

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-694

安全公告2026-07-10 发布INFO

A Use of Multiple Resources with Duplicate Identifier vulnerability in the IKE daemon (iked) of...

CVE-2026-57024

A Use of Multiple Resources with Duplicate Identifier vulnerability in the IKE daemon (iked) of Juniper Networks Junos O

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-694 #severity:medium

漏洞预警2026-07-09 发布INFO

A Use of Multiple Resources with Duplicate Identifier vulnerability in the IKE daemon (iked) of Juniper Networks Junos OS on MX with SPC3 and SRX Series allows an unauthenticate...

CVE-2026-57024

A Use of Multiple Resources with Duplicate Identifier vulnerability in the IKE daemon (iked) of Juniper Networks Junos O

历史摘要 · 未重新核验 · NVD

#cve #cwe-694