#cwe-755

共收录 66 条相关情报。

← 返回所有主题
漏洞预警2026-07-27 发布INFO

Improper Handling of Exceptional Conditions vulnerability in Erlang OTP erts (epmd) allows an unauthenticated remote attacker to permanently terminate the Erlang Port Mapper Dae...

CVE-2026-42792

Improper Handling of Exceptional Conditions vulnerability in Erlang OTP erts (epmd) allows an unauthenticated remote att

历史摘要 · 未重新核验 · NVD

安全公告2026-07-17 发布INFO

ExifReader HEIC/AVIF ISO-BMFF parser throws uncaught RangeError on truncated boxes

CVE-2026-53496

## Summary ExifReader 4.40.0 can throw an uncaught `RangeError: Offset is outside the bounds of the DataView` while par

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-07-16 发布INFO

CoreDNS is a DNS server written in Go. From 1.9.4 until 1.14.5, a network DNS client allowed to request AXFR for a CoreDNS zone can trigger a panic when CoreDNS is configured wi...

CVE-2026-62994

CoreDNS is a DNS server written in Go. From 1.9.4 until 1.14.5, a network DNS client allowed to request AXFR for a CoreD

历史摘要 · 未重新核验 · NVD

安全公告2026-07-16 发布INFO

CoreDNS `k8s_external` headless AXFR can emit an empty transfer batch that panics the `transfer` plugin

CVE-2026-62994

CoreDNS is a DNS server written in Go. From 1.9.4 until 1.14.5, a network DNS client allowed to request AXFR for a CoreD

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-07-10 发布INFO

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. Prior to 2.11.0, Excelize parses shared-string cell values with strconv.Atoi and checks o...

CVE-2026-59162

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. Prior to 2.11.0, Excelize parses

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-08 发布INFO

CoreWCF is a port of the service side of Windows Communication Foundation (WCF) to .NET Core. Prior to 1.8.1 and 1.9.1, a CoreWCF service listening on a Kafka topic stops proces...

CVE-2026-54775

CoreWCF is a port of the service side of Windows Communication Foundation (WCF) to .NET Core. Prior to 1.8.1 and 1.9.1,

历史摘要 · 未重新核验 · NVD

安全公告2026-07-08 发布INFO

CoreWCF: Kafka consume pump halts permanently on a Kafka tombstone (null-value record), causing persistent endpoint denial of service.

CVE-2026-54775

CoreWCF is a port of the service side of Windows Communication Foundation (WCF) to .NET Core. Prior to 1.8.1 and 1.9.1,

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-07-08 发布INFO

Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.3.0, the Include directive in src/mistune/directives/include.py detects only direct self-includes and ...

CVE-2026-59927

Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.3.0, the Include directive in src/mistune/dir

历史摘要 · 未重新核验 · NVD

安全公告2026-07-08 发布INFO

Mistune directives/include: mutual `.. include::` recursion crashes the renderer with `RecursionError`, denial of service via two attacker-controlled markdown files

CVE-2026-59927

Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.3.0, the Include directive in src/mistune/dir

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-07-06 发布INFO

chmod: recursive mode returns exit code 0 even when some files fail (last-file-wins)

CVE-2026-35339

In `Chmoder::chmod()` the recursive branch overwrites the running result instead of accumulating it, so the exit code re

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-07-01 发布INFO

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-51 and 7.1.2-26, a heap buffer overflow occurs in the MVG...

CVE-2026-55577

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-10 发布INFO

Nimiq is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. network-libp2p handles kad get-record query progress in handle_dh...

CVE-2026-44505

Nimiq is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. network-

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-09 发布INFO

An issue was discovered in Malwarebytes 4.x and 5.x (and Nebula 2020-10-21 and later). A large number of Firefox preference files can cause the parser to ignore other browser co...

CVE-2023-43686

An issue was discovered in Malwarebytes 4.x and 5.x (and Nebula 2020-10-21 and later). A large number of Firefox prefere

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-08 发布INFO

When Routinator encounters a file via RRDP using a specifically crafted Document Type Definition, Routinator crashes.

CVE-2026-49235

When Routinator encounters a file via RRDP using a specifically crafted Document Type Definition, Routinator crashes.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-08 发布INFO

Routinator exits on any error when accepting incoming HTTP or RTR connections, including ones it can recover from such as running out of file descriptors. This condition can be ...

CVE-2026-49232

Routinator exits on any error when accepting incoming HTTP or RTR connections, including ones it can recover from such a

历史摘要 · 未重新核验 · NVD

安全公告2026-06-03 发布INFO

Cpanel::JSON::XS versions before 4.41 for Perl allow denial of service via UTF-8 BOM prefixed...

CVE-2026-9516

Cpanel::JSON::XS versions before 4.41 for Perl allow denial of service via UTF-8 BOM prefixed input when a decode filter

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-06-03 发布INFO

Cpanel::JSON::XS versions before 4.41 for Perl allow denial of service via UTF-8 BOM prefixed input when a decode filter callback throws. To skip a leading 3-byte UTF-8 BOM, de...

CVE-2026-9516

Cpanel::JSON::XS versions before 4.41 for Perl allow denial of service via UTF-8 BOM prefixed input when a decode filter

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-27 发布INFO

free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, free5GC's NRF root SBI endpoint POST /oauth2/token contains a parser-level type-confusion bug fa...

CVE-2026-44325

free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, free5GC's NRF root SBI endpoint POST /o

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-27 发布INFO

free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, free5GC's NEF terminates the entire process when a stored PFD-subscription notifyUri cannot be r...

CVE-2026-44319

free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, free5GC's NEF terminates the entire pro

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-27 发布INFO

opentelemetry-js is the OpenTelemetry JavaScript Client. Prior to 0.217.0, a single malformed HTTP request crashes any Node.js process running the OpenTelemetry JS Prometheus ex...

CVE-2026-44902

opentelemetry-js is the OpenTelemetry JavaScript Client. Prior to 0.217.0, a single malformed HTTP request crashes any N

历史摘要 · 未重新核验 · NVD