#cwe-703

共收录 32 条相关情报。

漏洞预警2026-10-30 发布LOW

LibreDWG is a free C library to read and write DWG files. Prior to 0.14, `bit_TV_to_utf8()` in `src/bits.c` can write to the caller-provided `src` buffer despite accepting const...

CVE-2026-54610

LibreDWG is a free C library to read and write DWG files. Prior to 0.14, `bit_TV_to_utf8()` in `src/bits.c` can write to

来源摘录 · NVD

#cve #cwe-471 #cwe-703

漏洞预警2026-10-21 发布CRITICAL

As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software...

CVE-2026-76527

As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive int

来源摘录 · NVD

#cve #cwe-703

安全公告2026-10-05 发布INFO

vm2: Host Promise rejection from an exposed constructor can terminate the vm2 host process

CVE-2026-100722

## Summary An untrusted script run by `VM.run` can construct an embedder-exposed host function that returns a rejected

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #npm #cwe-248 #cwe-703 #severity:high

漏洞预警2026-09-18 发布INFO

pg_partman is a PostgreSQL extension that manages partitioned tables by time or ID. Prior to 5.5.0, run_maintenance() handles exceptions outside the loop that processes rows fro...

CVE-2026-61822

pg_partman is a PostgreSQL extension that manages partitioned tables by time or ID. Prior to 5.5.0, run_maintenance() ha

历史摘要 · 未重新核验 · NVD

#cve #cwe-703

漏洞预警2026-09-18 发布INFO

Parseable is a log analytics platform built for high-volume data ingestion and analysis. Prior to 3.0.0, src/handlers/http/middleware.rs uses unwrap() while parsing the x-amz-fi...

CVE-2026-32641

Parseable is a log analytics platform built for high-volume data ingestion and analysis. Prior to 3.0.0, src/handlers/ht

历史摘要 · 未重新核验 · NVD

#cve #cwe-248 #cwe-703

安全公告2026-09-18 发布INFO

Parseable: Unauthenticated Denial of Service via panic in Kinesis header parsing middleware

CVE-2026-32641

Parseable is a log analytics platform built for high-volume data ingestion and analysis. Prior to 3.0.0, src/handlers/ht

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-248 #cwe-703

安全公告2026-09-16 发布INFO

Higress before 2.2.4 panics when processing a Cookie header segment without an equals sign,...

CVE-2026-92790

Higress before 2.2.4 panics when processing a Cookie header segment without an equals sign, causing the plugin wrapper t

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-703 #severity:medium

漏洞预警2026-09-16 发布INFO

Higress before 2.2.4 panics when processing a Cookie header segment without an equals sign, causing the plugin wrapper to recover and return a continue action that bypasses AI t...

CVE-2026-92790

Higress before 2.2.4 panics when processing a Cookie header segment without an equals sign, causing the plugin wrapper t

历史摘要 · 未重新核验 · NVD

#cve #cwe-703

漏洞预警2026-09-16 发布INFO

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Soft...

CVE-2026-20329

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appl

历史摘要 · 未重新核验 · NVD

#cve #cwe-703

漏洞预警2026-09-07 发布INFO

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Check or Handling of Exceptional Conditions v...

CVE-2026-80135

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains

历史摘要 · 未重新核验 · NVD

#cve #cwe-703

漏洞预警2026-09-03 发布INFO

Gardens v2 is a modular governance framework that enables communities to create and manage multiple governance pools with customizable parameters and voting mechanisms. In dfba9...

CVE-2026-57445

Gardens v2 is a modular governance framework that enables communities to create and manage multiple governance pools wit

历史摘要 · 未重新核验 · NVD

#cve #cwe-703

安全公告2026-09-02 发布INFO

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco...

CVE-2026-20280

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineer

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-703 #severity:high

漏洞预警2026-09-02 发布INFO

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering team has conducted a comprehensive internal security ...

CVE-2026-20280

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineer

历史摘要 · 未重新核验 · NVD

#cve #cwe-703

漏洞预警2026-08-30 发布MEDIUM

### Summary `qs.stringify` throws a `TypeError` when it serializes an object whose own `constructor` property has a truthy, non-callable `isBuffer` member. `utils.isBuffer` d...

CVE-2026-82417

CVE-2026-82417 是 Node.js 的 qs 库（用于查询字符串解析与序列化）中的一个拒绝服务漏洞，影响版本 >=2.2.5 且 <6.16.0。漏洞根源在于 qs.stringify 在序列化非原始值时会调用 utils.i

历史摘要 · 未重新核验 · NVD

#cve #cwe-248 #cwe-703

漏洞预警2026-08-17 发布INFO

This issue was addressed through improved state management. This issue is fixed in Safari 26.6.1, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafte...

CVE-2026-65351

This issue was addressed through improved state management. This issue is fixed in Safari 26.6.1, iOS 26.6.1 and iPadOS

历史摘要 · 未重新核验 · NVD

#cve #cwe-703

漏洞预警2026-08-17 发布INFO

This issue was addressed through improved state management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6....

CVE-2026-65340

This issue was addressed through improved state management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS

历史摘要 · 未重新核验 · NVD

#cve #cwe-20 #cwe-703

漏洞预警2026-08-17 发布INFO

This issue was addressed through improved state management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6....

CVE-2026-65337

This issue was addressed through improved state management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS

历史摘要 · 未重新核验 · NVD

#cve #cwe-20 #cwe-703

漏洞预警2026-08-17 发布INFO

This issue was addressed through improved state management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6....

CVE-2026-65332

This issue was addressed through improved state management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS

历史摘要 · 未重新核验 · NVD

#cve #cwe-703

漏洞预警2026-08-17 发布INFO

This issue was addressed through improved state management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6....

CVE-2026-65331

This issue was addressed through improved state management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS

历史摘要 · 未重新核验 · NVD

#cve #cwe-703

漏洞预警2026-08-11 发布INFO

Any authenticated Velociraptor user — including one holding only the readerrole — can terminate the entire server process with a single request, by calling SetPassword with a us...

CVE-2026-18638

Any authenticated Velociraptor user — including one holding only the readerrole — can terminate the entire server proces

历史摘要 · 未重新核验 · NVD

#cve #cwe-476 #cwe-703