#cwe-706

共收录 71 条相关情报。

漏洞预警2026-10-30 发布HIGH

In Trail of Bits fickling through 0.1.12, a pickle STACK_GLOBAL operand carrying a dotted qualname (for example "Values.read_file") is resolved by pickle's find_class throug...

CVE-2026-118938

In Trail of Bits fickling through 0.1.12, a pickle STACK_GLOBAL operand carrying a dotted __qualname__ (for example "Val

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-502 #cwe-706 #severity:high

安全公告2026-10-22 发布INFO

Vyper 0.4.0b1 through 0.5.0b1 miscompiles unfoldable constants and omitted default arguments from...

CVE-2026-114663

Vyper 0.4.0b1 through 0.5.0b1 miscompiles unfoldable constants and omitted default arguments from imported modules, beca

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-706 #severity:high

漏洞预警2026-10-22 发布INFO

Vyper 0.4.0b1 through 0.5.0b1 miscompiles unfoldable constants and omitted default arguments from imported modules, because parse_Name resolves their names in the using function...

CVE-2026-114663

Vyper 0.4.0b1 through 0.5.0b1 miscompiles unfoldable constants and omitted default arguments from imported modules, beca

历史摘要 · 未重新核验 · NVD

#cve #cwe-706

安全公告2026-10-22 发布INFO

Vyper 0.4.0b1 through 0.5.0b1 Name Shadowing of Imported Constants and Default Arguments

CVE-2026-114663

Vyper 0.4.0b1 through 0.5.0b1 miscompiles unfoldable constants and omitted default arguments from imported modules, beca

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-706

漏洞预警2026-10-22 发布LOW

GitLab has remediated an issue in GitLab EE affecting all versions from 17.4 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that under certain conditions could have a...

CVE-2026-14288

GitLab has remediated an issue in GitLab EE affecting all versions from 17.4 before 19.3.6, 19.4 before 19.4.3, and 19.5

来源摘录 · NVD

#cve #cwe-706

漏洞预警2026-10-20 发布INFO

filelock is a platform-independent file lock for Python. Prior to 4.2.1, UnixFileLock can truncate a regular file renamed onto the lock path when another local user has actual r...

CVE-2026-112909

filelock is a platform-independent file lock for Python. Prior to 4.2.1, UnixFileLock can truncate a regular file rename

历史摘要 · 未重新核验 · NVD

#cve #cwe-706

安全公告2026-10-14 发布INFO

Incorrect reference resolution in Extensions in Google Chrome on on Mac prior to 155.0.8059.79...

CVE-2026-110156

Incorrect reference resolution in Extensions in Google Chrome on on Mac prior to 155.0.8059.79 allowed a remote attacker

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-706

漏洞预警2026-10-12 发布INFO

OTRS does not sufficiently enforce the uniqueness of customer user identities across multiple configured CustomerUser backends. When multiple backends, such as a database and LD...

CVE-2026-78359

OTRS does not sufficiently enforce the uniqueness of customer user identities across multiple configured CustomerUser ba

历史摘要 · 未重新核验 · NVD

#cve #cwe-694 #cwe-706

漏洞预警2026-10-09 发布INFO

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, MariaDB's ACL cache could generate the sa...

CVE-2026-107822

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3

历史摘要 · 未重新核验 · NVD

#cve #cwe-706 #cwe-863

安全公告2026-10-09 发布INFO

MariaDB: database privilege escalation via user / role name collision in the acl cache

CVE-2026-107822

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-706 #cwe-863

漏洞预警2026-10-06 发布INFO

Incorrect reference resolution in WebAppInstalls in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to execute ...

CVE-2026-106409

Incorrect reference resolution in WebAppInstalls in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote atta

历史摘要 · 未重新核验 · NVD

#cve #cwe-706

漏洞预警2026-10-06 发布INFO

Incorrect reference resolution in Core in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to leak cross-origin data via a crafted HT...

CVE-2026-106325

Incorrect reference resolution in Core in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging soci

历史摘要 · 未重新核验 · NVD

#cve #cwe-706

漏洞预警2026-10-06 发布INFO

Incorrect reference resolution in Autofill in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensitive info...

CVE-2026-106308

Incorrect reference resolution in Autofill in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attack

历史摘要 · 未重新核验 · NVD

#cve #cwe-706

漏洞预警2026-10-06 发布INFO

Incorrect reference resolution in Passwords in Google Chrome on on iOS prior to 155.0.8059.39 allowed a local attacker who had compromised the renderer process to potentially ex...

CVE-2026-106279

Incorrect reference resolution in Passwords in Google Chrome on on iOS prior to 155.0.8059.39 allowed a local attacker w

历史摘要 · 未重新核验 · NVD

#cve #cwe-706

漏洞预警2026-10-06 发布INFO

Incorrect reference resolution in Browser in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensitive informati...

CVE-2026-106274

Incorrect reference resolution in Browser in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker le

历史摘要 · 未重新核验 · NVD

#cve #cwe-706

漏洞预警2026-10-06 发布INFO

Incorrect reference resolution in Offline in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to obtain sens...

CVE-2026-106230

Incorrect reference resolution in Offline in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacke

历史摘要 · 未重新核验 · NVD

#cve #cwe-706

漏洞预警2026-10-06 发布INFO

Incorrect reference resolution in DevTools in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to obtain sensitive informa...

CVE-2026-106181

Incorrect reference resolution in DevTools in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had com

历史摘要 · 未重新核验 · NVD

#cve #cwe-706

安全公告2026-10-01 发布INFO

vm2 Custom Module Resolver Can Bypass the External Package Allowlist by Loading a Colliding Host Package

CVE-2026-92951

### Summary vm2 is a sandbox library for isolating and executing untrusted JavaScript code inside a Node.js process. It

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #npm #cwe-706 #cwe-829 #cwe-863 #severity:critical

漏洞预警2026-09-29 发布INFO

Incorrect reference resolution in WebProtect in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute ar...

CVE-2026-95334

Incorrect reference resolution in WebProtect in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had c

历史摘要 · 未重新核验 · NVD

#cve #cwe-706

漏洞预警2026-09-29 发布INFO

Incorrect reference resolution in MediaStream in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to bypass web origin policy into a privileged page via a crafted ...

CVE-2026-95275

Incorrect reference resolution in MediaStream in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to bypas

历史摘要 · 未重新核验 · NVD

#cve #cwe-706