#cwe-697
共收录 62 条相关情报。
← 返回所有主题 漏洞预警2026-08-17 发布INFO
CVE-2026-75110
MemOS is a memory operating system for LLMs and AI agents. In deployments where authentication is enabled (AUTH_ENABLED=
历史摘要 · 未重新核验 · NVD
漏洞预警2026-08-14 发布INFO
CVE-2026-50029
js-toml is a TOML parser for JavaScript, Prior to version 1.1.2, the interpreter checks whether a key already exists in
历史摘要 · 未重新核验 · NVD
漏洞预警2026-08-11 发布INFO
CVE-2026-20765
Incorrect comparison for some Intel(R) TDX Guest software before version 0.3.1 within Ring 3: User Applications may allo
历史摘要 · 未重新核验 · NVD
漏洞预警2026-07-30 发布INFO
CVE-2026-67207
Wolf CMS through 0.8.3.1 contains an authorization bypass vulnerability in BackupRestoreController that allows authentic
历史摘要 · 未重新核验 · NVD
安全公告2026-07-30 发布INFO
CVE-2026-67207
Wolf CMS through 0.8.3.1 contains an authorization bypass vulnerability in BackupRestoreController that allows authentic
历史摘要 · 未重新核验 · OSV.dev
漏洞预警2026-07-13 发布INFO
CVE-2026-55771
CedarJava is an open source Java implementation of the Cedar policy language, used for fine-grained authorization decisi
历史摘要 · 未重新核验 · NVD
安全公告2026-07-13 发布INFO
CVE-2026-55771
CedarJava is an open source Java implementation of the Cedar policy language, used for fine-grained authorization decisi
历史摘要 · 未重新核验 · OSV.dev
漏洞预警2026-07-10 发布INFO
CVE-2026-22660
FlaskBB through 2.2.0, fixed in commit a5da9a5, contains a logic flaw vulnerability that allows authenticated administra
历史摘要 · 未重新核验 · NVD
漏洞预警2026-07-08 发布INFO
CVE-2026-59890
setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. Prior to
历史摘要 · 未重新核验 · NVD
安全公告2026-07-08 发布INFO
CVE-2026-59890
setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. Prior to
历史摘要 · 未重新核验 · OSV.dev
安全公告2026-07-05 发布INFO
CVE-2026-14686
A vulnerability was found in HdrHistogram up to 2.2.2. This issue affects the function org.HdrHistogram.DoubleHistogram.
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-07-05 发布MEDIUM
CVE-2026-14687
CVE-2026-14687 影响 666ghj BettaFish 版本 1.2.1 及之前版本。该漏洞位于 InsightEngine 组件的 agent.py 文件中的 _deduplicate_results 函数,用于搜索结果的去
历史摘要 · 未重新核验 · NVD
漏洞预警2026-07-05 发布LOW
CVE-2026-14686
该漏洞影响 HdrHistogram 库的 2.2.2 及之前版本。问题位于 `org.HdrHistogram.DoubleHistogram.recordValue` 方法中,属于范围检查(Range Check)组件。由于不正确的比较
历史摘要 · 未重新核验 · NVD
漏洞预警2026-07-03 发布INFO
CVE-2026-14617
A security vulnerability has been detected in NousResearch hermes-agent up to 2026.4.30. Affected is the function Gatewa
历史摘要 · 未重新核验 · NVD
安全公告2026-06-26 发布INFO
CVE-2026-49340
## Summary
A logic error in `ServeCreateOrUpdatePlaylist` allows **any authenticated Subsonic user** (including non-adm
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-06-26 发布INFO
CVE-2026-50029
### Summary
`js-toml`'s interpreter checks whether a key already exists in a parser-built container with `if (object[ke
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-06-25 发布INFO
CVE-2026-10097
wolfSSL's AVX2-optimized ML-KEM implementation (mlkem_cmp_avx2) compares only 1536 of the 1568 ciphertext bytes during t
历史摘要 · 未重新核验 · NVD
漏洞预警2026-06-19 发布INFO
CVE-2026-49340
gonic is a music streaming server / free-software subsonic server API implementation. Prior to version 0.21.0, a logic e
历史摘要 · 未重新核验 · NVD
漏洞预警2026-06-11 发布INFO
CVE-2026-44249
Netty is a network application framework for development of protocol servers and clients. In netty-handler prior to vers
历史摘要 · 未重新核验 · NVD
安全公告2026-06-08 发布INFO
CVE-2026-44249
### Summary
An attacker can bypass IPv6 subnet rules due to an incorrect masking operation in IpSubnetFilterRule.compare
历史摘要 · 未重新核验 · GitHub Advisory