#cwe-754

共收录 135 条相关情报。

漏洞预警2026-05-27 发布INFO

free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, free5GC's UDR nudr-dr DELETE /subscription-data/{ueId}/{servingPlmnId}/ee-subscriptions/{subsId}...

CVE-2026-44324

free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, free5GC's UDR nudr-dr DELETE /subscript

历史摘要 · 未重新核验 · NVD

#cve #cwe-704 #cwe-754

漏洞预警2026-05-27 发布INFO

free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, free5GC's NEF PATCH /3gpp-pfd-management/v1/{afId}/transactions/{transId}/applications/{appId} h...

CVE-2026-44322

free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, free5GC's NEF PATCH /3gpp-pfd-managemen

历史摘要 · 未重新核验 · NVD

#cve #cwe-476 #cwe-754

漏洞预警2026-05-27 发布INFO

free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, free5GC's PCF POST /npcf-policyauthorization/v1/app-sessions handler panics on a single authenti...

CVE-2026-44317

free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, free5GC's PCF POST /npcf-policyauthoriz

历史摘要 · 未重新核验 · NVD

#cve #cwe-476 #cwe-754

漏洞预警2026-05-27 发布INFO

free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, free5GC's PCF POST /npcf-smpolicycontrol/v1/sm-policies handler (HandleCreateSmPolicyRequest) pa...

CVE-2026-44316

free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, free5GC's PCF POST /npcf-smpolicycontro

历史摘要 · 未重新核验 · NVD

#cve #cwe-476 #cwe-754

漏洞预警2026-05-27 发布INFO

Improper check for unusual or exceptional conditions vulnerability in SSO in Synology DiskStation Manager (DSM) before 7.2.2-72806-5 and 7.3.1-86003-1 (7.2.1-69057 is not affect...

CVE-2025-13392

Improper check for unusual or exceptional conditions vulnerability in SSO in Synology DiskStation Manager (DSM) before 7

历史摘要 · 未重新核验 · NVD

#cve #cwe-754

漏洞预警2026-05-20 发布INFO

nimiq-blockchain provides persistent block storage for Nimiq's Rust implementation. In versions 1.3.0 and prior, network-libp2p discovery accepts signed PeerContact updates from...

CVE-2026-40094

nimiq-blockchain provides persistent block storage for Nimiq's Rust implementation. In versions 1.3.0 and prior, network

历史摘要 · 未重新核验 · NVD

#cve #cwe-754

漏洞预警2026-05-20 发布INFO

Multiple flaws have been identified in `named` related to the handling of DNS messages whose CLASS is not Internet (`IN`) — for example, `CHAOS` or `HESIOD`, or DNS messages tha...

CVE-2026-5946

Multiple flaws have been identified in `named` related to the handling of DNS messages whose CLASS is not Internet (`IN`

历史摘要 · 未重新核验 · NVD

#cve #cwe-20 #cwe-125 #cwe-617 #cwe-754 #cwe-843

安全公告2026-05-20 发布INFO

Improper Check for Unusual or Exceptional Conditions vulnerability in Drupal Node View...

CVE-2026-8491

Improper Check for Unusual or Exceptional Conditions vulnerability in Drupal Node View Permissions allows Forceful Brows

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-754

漏洞预警2026-05-19 发布INFO

Improper Check for Unusual or Exceptional Conditions vulnerability in Drupal Node View Permissions allows Forceful Browsing. This issue affects Node View Permissions: from 0.0....

CVE-2026-8491

Improper Check for Unusual or Exceptional Conditions vulnerability in Drupal Node View Permissions allows Forceful Brows

历史摘要 · 未重新核验 · NVD

#cve #cwe-754

漏洞预警2026-05-19 发布INFO

Improper Check for Unusual or Exceptional Conditions vulnerability in Samsung Open Source Escargot allows Input Data Manipulation. This issue affects Escargot: 590345cc6258317c...

CVE-2026-47315

Improper Check for Unusual or Exceptional Conditions vulnerability in Samsung Open Source Escargot allows Input Data Man

历史摘要 · 未重新核验 · NVD

#cve #cwe-754

安全公告2026-05-18 发布INFO

OpenTelemetry eBPF Instrumentation: Postgres BIND parsing can panic on malformed payloads

CVE-2026-45678

### Summary The Postgres protocol parser assumes `BIND` message payloads contain a valid NUL-terminated portal name. A

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #go #cwe-20 #cwe-754 #severity:high

安全公告2026-05-18 发布INFO

Mattermost Desktop App versions <=6.1 6.0.1 5.4.13.0 fail to prevent server-rendered content from...

CVE-2026-4643

Mattermost Desktop App versions <=6.1 6.0.1 5.4.13.0 fail to prevent server-rendered content from closing an underlying

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-754 #severity:low

漏洞预警2026-05-18 发布INFO

Mattermost Desktop App versions <=6.1 6.0.1 5.4.13.0 fail to prevent server-rendered content from closing an underlying application view in the Mattermost Desktop App which allo...

CVE-2026-4643

Mattermost Desktop App versions <=6.1 6.0.1 5.4.13.0 fail to prevent server-rendered content from closing an underlying

历史摘要 · 未重新核验 · NVD

#cve #cwe-754

安全公告2026-05-15 发布INFO

Mattermost versions 11.5.x <= 11.5.1, 10.11.x <= 10.11.13, 11.4.x <= 11.4.3 Fail to validate the...

CVE-2026-4054

Mattermost versions 11.5.x <= 11.5.1, 10.11.x <= 10.11.13, 11.4.x <= 11.4.3 Fail to validate the response body of proxie

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-754 #severity:medium

漏洞预警2026-05-15 发布INFO

Mattermost versions 11.5.x <= 11.5.1, 10.11.x <= 10.11.13, 11.4.x <= 11.4.3 Fail to validate the response body of proxied images, which allows a remote attacker to enact client-...

CVE-2026-4054

Mattermost versions 11.5.x <= 11.5.1, 10.11.x <= 10.11.13, 11.4.x <= 11.4.3 Fail to validate the response body of proxie

历史摘要 · 未重新核验 · NVD

#cve #cwe-754

安全公告2026-05-13 发布INFO

A race condition vulnerability in Palo Alto Networks Prisma® Browser enables a locally...

CVE-2026-0235

A race condition vulnerability in Palo Alto Networks Prisma® Browser enables a locally authenticated non-admin user to b

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-754 #severity:medium

安全公告2026-05-13 发布INFO

Multiple denial of service vulnerabilities in Palo Alto Networks PAN-OS® software allow an...

CVE-2026-0262

Multiple denial of service vulnerabilities in Palo Alto Networks PAN-OS® software allow an unauthenticated attacker with

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-754 #severity:medium

安全公告2026-05-13 发布INFO

Incorrect Authorization vulnerabilities in Trust Protection Foundation allow attackers to bypass...

CVE-2026-0241

Incorrect Authorization vulnerabilities in Trust Protection Foundation allow attackers to bypass access controls and per

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-754 #severity:medium

漏洞预警2026-05-13 发布INFO

Multiple denial of service vulnerabilities in Palo Alto Networks PAN-OS® software allow an unauthenticated attacker with network access to cause a denial of service (DoS) condit...

CVE-2026-0262

Multiple denial of service vulnerabilities in Palo Alto Networks PAN-OS® software allow an unauthenticated attacker with

历史摘要 · 未重新核验 · NVD

#cve #cwe-754

漏洞预警2026-05-13 发布INFO

Incorrect Authorization vulnerabilities in Trust Protection Foundation allow attackers to bypass access controls and perform unauthorized actions on restricted resources.

CVE-2026-0241

Incorrect Authorization vulnerabilities in Trust Protection Foundation allow attackers to bypass access controls and per

历史摘要 · 未重新核验 · NVD

#cve #cwe-754