#cwe-697

共收录 62 条相关情报。

← 返回所有主题
漏洞预警2026-08-17 发布INFO

MemOS is a memory operating system for LLMs and AI agents. In deployments where authentication is enabled (AUTH_ENABLED=true) but the undocumented, defaultless INTERNAL_SERVICE_...

CVE-2026-75110

MemOS is a memory operating system for LLMs and AI agents. In deployments where authentication is enabled (AUTH_ENABLED=

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-14 发布INFO

js-toml is a TOML parser for JavaScript, Prior to version 1.1.2, the interpreter checks whether a key already exists in a parser-built container with `if (object[key])` instead ...

CVE-2026-50029

js-toml is a TOML parser for JavaScript, Prior to version 1.1.2, the interpreter checks whether a key already exists in

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

Incorrect comparison for some Intel(R) TDX Guest software before version 0.3.1 within Ring 3: User Applications may allow an escalation of privilege. System software adversary w...

CVE-2026-20765

Incorrect comparison for some Intel(R) TDX Guest software before version 0.3.1 within Ring 3: User Applications may allo

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-30 发布INFO

Wolf CMS through 0.8.3.1 contains an authorization bypass vulnerability in BackupRestoreController that allows authenticated non-administrative users to access restricted backup...

CVE-2026-67207

Wolf CMS through 0.8.3.1 contains an authorization bypass vulnerability in BackupRestoreController that allows authentic

历史摘要 · 未重新核验 · NVD

安全公告2026-07-30 发布INFO

Wolf CMS 0.8.3.1 Authorization Bypass via BackupRestoreController

CVE-2026-67207

Wolf CMS through 0.8.3.1 contains an authorization bypass vulnerability in BackupRestoreController that allows authentic

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-07-13 发布INFO

CedarJava is an open source Java implementation of the Cedar policy language, used for fine-grained authorization decisions. In versions prior to 4.9.0, the EntityIdentifier.equ...

CVE-2026-55771

CedarJava is an open source Java implementation of the Cedar policy language, used for fine-grained authorization decisi

历史摘要 · 未重新核验 · NVD

安全公告2026-07-13 发布INFO

CedarJava has policy injection, type confusion, and incorrect equality comparison vulnerabilities

CVE-2026-55771

CedarJava is an open source Java implementation of the Cedar policy language, used for fine-grained authorization decisi

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-07-10 发布INFO

FlaskBB through 2.2.0, fixed in commit a5da9a5, contains a logic flaw vulnerability that allows authenticated administrators to delete all built-in authorization groups by explo...

CVE-2026-22660

FlaskBB through 2.2.0, fixed in commit a5da9a5, contains a logic flaw vulnerability that allows authenticated administra

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-08 发布INFO

setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. Prior to 83.0.0, FileList applied MANIFEST.in exclude, global-excl...

CVE-2026-59890

setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. Prior to

历史摘要 · 未重新核验 · NVD

安全公告2026-07-08 发布INFO

setuptools: MANIFEST.in exclusion bypass in sdist via Unicode normalization collision (NFC/NFD) on macOS APFS/HFS+

CVE-2026-59890

setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. Prior to

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-07-05 发布INFO

A vulnerability was found in HdrHistogram up to 2.2.2. This issue affects the function org...

CVE-2026-14686

A vulnerability was found in HdrHistogram up to 2.2.2. This issue affects the function org.HdrHistogram.DoubleHistogram.

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-07-05 发布MEDIUM

A vulnerability was determined in 666ghj BettaFish up to 1.2.1. Impacted is the function _deduplicate_results of the file InsightEngine/agent.py of the component InsightEngine s...

CVE-2026-14687

CVE-2026-14687 影响 666ghj BettaFish 版本 1.2.1 及之前版本。该漏洞位于 InsightEngine 组件的 agent.py 文件中的 _deduplicate_results 函数,用于搜索结果的去

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-05 发布LOW

A vulnerability was found in HdrHistogram up to 2.2.2. This issue affects the function org.HdrHistogram.DoubleHistogram.recordValue of the file src/main/java/org/HdrHistogram/Do...

CVE-2026-14686

该漏洞影响 HdrHistogram 库的 2.2.2 及之前版本。问题位于 `org.HdrHistogram.DoubleHistogram.recordValue` 方法中,属于范围检查(Range Check)组件。由于不正确的比较

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-03 发布INFO

A security vulnerability has been detected in NousResearch hermes-agent up to 2026.4.30. Affected is the function GatewayStreamConsumer._filter_and_accumulate of the file gatewa...

CVE-2026-14617

A security vulnerability has been detected in NousResearch hermes-agent up to 2026.4.30. Affected is the function Gatewa

历史摘要 · 未重新核验 · NVD

安全公告2026-06-26 发布INFO

gonic has arbitrary file write in createPlaylist: any authenticated user can write playlist M3U content to attacker-controlled path on the host

CVE-2026-49340

## Summary A logic error in `ServeCreateOrUpdatePlaylist` allows **any authenticated Subsonic user** (including non-adm

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-26 发布INFO

js-toml has silent type confusion via falsy-primitive duplicate-key bypass

CVE-2026-50029

### Summary `js-toml`'s interpreter checks whether a key already exists in a parser-built container with `if (object[ke

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-06-25 发布INFO

wolfSSL's AVX2-optimized ML-KEM implementation (mlkem_cmp_avx2) compares only 1536 of the 1568 ciphertext bytes during the Fujisaki-Okamoto re-encryption check in ML-KEM-1024 de...

CVE-2026-10097

wolfSSL's AVX2-optimized ML-KEM implementation (mlkem_cmp_avx2) compares only 1536 of the 1568 ciphertext bytes during t

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-19 发布INFO

gonic is a music streaming server / free-software subsonic server API implementation. Prior to version 0.21.0, a logic error in `ServeCreateOrUpdatePlaylist` allows any authenti...

CVE-2026-49340

gonic is a music streaming server / free-software subsonic server API implementation. Prior to version 0.21.0, a logic e

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-11 发布INFO

Netty is a network application framework for development of protocol servers and clients. In netty-handler prior to versions 4.1.135.Final and 4.2.15.Final, an attacker can bypa...

CVE-2026-44249

Netty is a network application framework for development of protocol servers and clients. In netty-handler prior to vers

历史摘要 · 未重新核验 · NVD

安全公告2026-06-08 发布INFO

Netty has an IPv6 Subnet Filter Bypass via Incorrect Comparator Masking

CVE-2026-44249

### Summary An attacker can bypass IPv6 subnet rules due to an incorrect masking operation in IpSubnetFilterRule.compare

历史摘要 · 未重新核验 · GitHub Advisory