#cwe-754

共收录 135 条相关情报。

← 返回所有主题
漏洞预警2026-08-25 发布INFO

Improper state validation in Performance in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page....

CVE-2026-79072

Improper state validation in Performance in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentiall

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-19 发布INFO

Netty is an asynchronous, event-driven network application framework. Prior to 4.1.137.Fina and 4.2.17.Final, io.netty.handler.ssl.SslClientHelloHandler#decode checks the wrong ...

CVE-2026-75595

Netty is an asynchronous, event-driven network application framework. Prior to 4.1.137.Fina and 4.2.17.Final, io.netty.h

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-13 发布INFO

This vulnerability allows a normal (non-admin) user to disable the Forcepoint One Endpoint SafariExtension and bypass DLP protection in F1E Mac OS before v26.04.5758.

CVE-2026-11970

This vulnerability allows a normal (non-admin) user to disable the Forcepoint One Endpoint SafariExtension and bypass DL

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-13 发布INFO

@fastify/busboy is a multipart form-data parser. In versions 1.0.0 through 3.2.0, an attacker who can submit multipart form-data can crash the parser by sending a part header wh...

CVE-2026-19481

@fastify/busboy is a multipart form-data parser. In versions 1.0.0 through 3.2.0, an attacker who can submit multipart f

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-12 发布INFO

Russh is a Rust SSH client & server library. Prior to 0.62.4, an unauthenticated SSH client can cause a denial of service by sending SSH_MSG_KEX_ECDH_INIT with a 32-byte all-zer...

CVE-2026-73430

Russh is a Rust SSH client & server library. Prior to 0.62.4, an unauthenticated SSH client can cause a denial of servic

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-12 发布INFO

Russh is a Rust SSH client & server library. Prior to 0.62.4, a malicious SSH server can crash a russh client session with a malformed KEX_ECDH_REPLY containing a server ephemer...

CVE-2026-73429

Russh is a Rust SSH client & server library. Prior to 0.62.4, a malicious SSH server can crash a russh client session wi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-12 发布INFO

RustFS is a distributed object storage system built in Rust. Prior to 1.0.0-rc.1, RustFS Object Lock enforcement in crates/ecstore/src/bucket/object_lock/objectlock_sys.rs lets ...

CVE-2026-73288

RustFS is a distributed object storage system built in Rust. Prior to 1.0.0-rc.1, RustFS Object Lock enforcement in crat

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

Improper conditions check in the firmware for the Intel(R) NPU Driver for all versions within Ring 1: Device Drivers may allow a denial of service. Unprivileged software adversa...

CVE-2026-20783

Improper conditions check in the firmware for the Intel(R) NPU Driver for all versions within Ring 1: Device Drivers may

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

Improper conditions check for some Intel(R) PROSet/Wireless WiFi Software within Ring 2: Device Drivers may allow a denial of service. Network adversary with an unauthenticated ...

CVE-2026-20776

Improper conditions check for some Intel(R) PROSet/Wireless WiFi Software within Ring 2: Device Drivers may allow a deni

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

Improper conditions check for the Intel(R) NPU Driver for all versions within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary with an au...

CVE-2026-20769

Improper conditions check for the Intel(R) NPU Driver for all versions within Ring 3: User Applications may allow a deni

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

Improper conditions check for some Intel(R) PROSet/Wireless WiFi Software within Ring 2: Device Drivers may allow a denial of service. Network adversary with an unauthenticated ...

CVE-2026-20747

Improper conditions check for some Intel(R) PROSet/Wireless WiFi Software within Ring 2: Device Drivers may allow a deni

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

Improper conditions check for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow a denial of service. Network adversary with an unau...

CVE-2026-20739

Improper conditions check for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

A vulnerability has been identified in Desigo DXR2 (All versions < V01.21.233.16-7862), Desigo PXC3 (All versions < V01.21.233.16-7862), Desigo PXC4 (All versions < V02.21.194.3...

CVE-2026-59693

A vulnerability has been identified in Desigo DXR2 (All versions < V01.21.233.16-7862), Desigo PXC3 (All versions < V01.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

SAP Approuter does not consistently handle certain error conditions. An attacker with low privileges could exploit this under a non-default configuration. Successful exploitatio...

CVE-2026-66774

SAP Approuter does not consistently handle certain error conditions. An attacker with low privileges could exploit this

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-10 发布INFO

Improper verification of cryptographic signature and Improper Check for Unusual or Exceptional Conditions vulnerability in Estonian Information System Authority (RIA) libdigidoc...

CVE-2026-59112

Improper verification of cryptographic signature and Improper Check for Unusual or Exceptional Conditions vulnerability

历史摘要 · 未重新核验 · NVD

安全公告2026-08-07 发布INFO

Injection of false emergency or status messages over CPDLC may lead to misallocation of resources...

CVE-2025-71412

Injection of false emergency or status messages over CPDLC may lead to misallocation of resources, operational confusion

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-07 发布INFO

Malformed or out-of-sequence frames at the Aviation Very High Frequency Link Control X.25 layers...

CVE-2025-71413

Malformed or out-of-sequence frames at the Aviation Very High Frequency Link Control X.25 layers cause repeated resets w

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-07 发布INFO

Malformed or out-of-sequence frames at the Aviation Very High Frequency Link Control X.25 layers cause repeated resets which may result in increased workload and reduced situati...

CVE-2025-71413

Malformed or out-of-sequence frames at the Aviation Very High Frequency Link Control X.25 layers cause repeated resets w

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-07 发布INFO

Injection of false emergency or status messages over CPDLC may lead to misallocation of resources, operational confusion, and improper response actions by flight crews, traffic ...

CVE-2025-71412

Injection of false emergency or status messages over CPDLC may lead to misallocation of resources, operational confusion

历史摘要 · 未重新核验 · NVD

安全公告2026-08-05 发布INFO

A vulnerability has been found in epsilla-cloud vectordb up to 0.3.18...

CVE-2026-18852

A vulnerability has been found in epsilla-cloud vectordb up to 0.3.18/df5a5f5afb85a2376a0f2f316c79dea9b2c6ac7a. This imp

历史摘要 · 未重新核验 · GitHub Advisory