#cwe-770

共收录 1180 条相关情报。

← 返回所有主题

漏洞预警2026-09-29 发布INFO

Issue summary: QUIC process may keep memory for QUIC packet buffer for much longer period than necessary. Impact summary: Remote peer can exploit this vulnerability by sending ...

CVE-2026-54873

Issue summary: QUIC process may keep memory for QUIC packet buffer for much longer period than necessary. Impact summar

历史摘要 · 未重新核验 · NVD

#cve #cwe-770

漏洞预警2026-09-29 发布INFO

Issue summary: A certificate with many nameRelativeToCRLIssuer CRL distribution points causes disproportionate heap growth when OpenSSL caches X.509 extensions. Impact summary:...

CVE-2026-35189

Issue summary: A certificate with many nameRelativeToCRLIssuer CRL distribution points causes disproportionate heap grow

历史摘要 · 未重新核验 · NVD

#cve #cwe-770

安全公告2026-09-29 发布INFO

urllib3: HTTPResponse.stream()/read_chunked() buffers an unbounded chunk-size line into memory

CVE-2026-97689

urllib3 is an HTTP client library for Python. From 1.10.3 until 2.8.0, the HTTPResponse.read_chunked and HTTPResponse.st

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-770

安全公告2026-09-29 发布INFO

Excessive Memory Allocation in Relative CRLDP Processing

CVE-2026-35189

Issue summary: A certificate with many nameRelativeToCRLIssuer CRL distribution points causes disproportionate heap grow

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-770

漏洞预警2026-09-29 发布INFO

Denial-of-service in the Storage: StorageManager component. This vulnerability was fixed in Firefox ESR 153.4 and Firefox 157.

CVE-2026-100826

Denial-of-service in the Storage: StorageManager component. This vulnerability was fixed in Firefox ESR 153.4 and Firefo

历史摘要 · 未重新核验 · NVD

#cve #cwe-770

漏洞预警2026-09-29 发布INFO

Denial-of-service in the Graphics component. This vulnerability was fixed in Firefox ESR 153.4 and Firefox 157.

CVE-2026-100812

Denial-of-service in the Graphics component. This vulnerability was fixed in Firefox ESR 153.4 and Firefox 157.

历史摘要 · 未重新核验 · NVD

#cve #cwe-770

漏洞预警2026-09-29 发布INFO

Denial-of-service in the Networking component. This vulnerability was fixed in Firefox 157.

CVE-2026-100795

Denial-of-service in the Networking component. This vulnerability was fixed in Firefox 157.

历史摘要 · 未重新核验 · NVD

#cve #cwe-770

漏洞预警2026-09-28 发布INFO

PyJWT is a Python implementation of JSON Web Token standards. Prior to 2.14.0, PyJWT get_signing_key_from_jwt is affected because unknown kid misses force refreshes without a ne...

CVE-2026-101917

PyJWT is a Python implementation of JSON Web Token standards. Prior to 2.14.0, PyJWT get_signing_key_from_jwt is affecte

历史摘要 · 未重新核验 · NVD

#cve #cwe-770

漏洞预警2026-09-28 发布INFO

ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. Prior to 10.7.1, the Address6 constructor, Address6.isValid, and parse code in src/ip...

CVE-2026-101911

ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. Prior to 10.7.1, the Address

历史摘要 · 未重新核验 · NVD

#cve #cwe-400 #cwe-770

安全公告2026-09-28 发布INFO

ip-address: Address6 builds a parse diagnostic proportional to the input with no length bound, allowing a single long string to stall or crash the process

CVE-2026-101911

ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. Prior to 10.7.1, the Address

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-400 #cwe-770

漏洞预警2026-09-28 发布INFO

A flaw was found in the Micrometer user-event metrics listener of Keycloak, a solution for integrated identity and access management. The issue occurs when the listener is confi...

CVE-2026-101333

A flaw was found in the Micrometer user-event metrics listener of Keycloak, a solution for integrated identity and acces

历史摘要 · 未重新核验 · NVD

#cve #cwe-770

漏洞预警2026-09-28 发布INFO

mH-DEVELOPER smart home module is vulnerable to Denial of Service due to uncontrolled resource consumption. The Express bodyParser is configured with a 250 MB limit for JSON and...

CVE-2026-82936

mH-DEVELOPER smart home module is vulnerable to Denial of Service due to uncontrolled resource consumption. The Express

历史摘要 · 未重新核验 · NVD

#cve #cwe-770

漏洞预警2026-09-28 发布INFO

Allocation of Resources Without Limits or Throttling vulnerability in elixir-mint mint allows a malicious HTTP/2 server to make the client hold up to about 16 MiB per connection...

CVE-2026-92103

Allocation of Resources Without Limits or Throttling vulnerability in elixir-mint mint allows a malicious HTTP/2 server

历史摘要 · 未重新核验 · NVD

#cve #cwe-770

漏洞预警2026-09-28 发布INFO

Allocation of Resources Without Limits or Throttling vulnerability in elixir-mint mint allows a malicious HTTP/2 server to exhaust memory on the client host and cause a denial o...

CVE-2026-91043

Allocation of Resources Without Limits or Throttling vulnerability in elixir-mint mint allows a malicious HTTP/2 server

历史摘要 · 未重新核验 · NVD

#cve #cwe-770

漏洞预警2026-09-26 发布INFO

Netty's HTTP/3 codec (io.netty:netty-codec-http3) from 4.2.0.Final through 4.2.17.Final retains unbounded per-stream QPACK encoder state. QpackEncoder stores a queue and a dynam...

CVE-2026-100660

Netty's HTTP/3 codec (io.netty:netty-codec-http3) from 4.2.0.Final through 4.2.17.Final retains unbounded per-stream QPA

历史摘要 · 未重新核验 · NVD

#cve #cwe-770

漏洞预警2026-09-26 发布INFO

Netty (io.netty:netty-codec-http) contains an unbounded per-connection queue in WebSocketServerExtensionHandler. The handler offers an entry to its per-channel validExtensions q...

CVE-2026-100658

Netty (io.netty:netty-codec-http) contains an unbounded per-connection queue in WebSocketServerExtensionHandler. The han

历史摘要 · 未重新核验 · NVD

#cve #cwe-770

漏洞预警2026-09-26 发布INFO

Netty (io.netty:netty-codec-http) contains an unbounded per-connection queue growth flaw in HttpServerCodec. The codec tracks the HTTP method of each still-unanswered pipelined ...

CVE-2026-100656

Netty (io.netty:netty-codec-http) contains an unbounded per-connection queue growth flaw in HttpServerCodec. The codec t

历史摘要 · 未重新核验 · NVD

#cve #cwe-770

漏洞预警2026-09-26 发布INFO

Netty (io.netty:netty-codec-http) versions up to and including 4.1.137.Final and from 4.2.0.Final through 4.2.17.Final accept an unlimited number of concurrent remote-initiated ...

CVE-2026-100655

Netty (io.netty:netty-codec-http) versions up to and including 4.1.137.Final and from 4.2.0.Final through 4.2.17.Final a

历史摘要 · 未重新核验 · NVD

#cve #cwe-770

漏洞预警2026-09-26 发布INFO

vLLM before 0.29.0 contains a resource-limit bypass vulnerability in PyNvVideoCodec decoder allocation where sampler subclass shadowing allows independent counter increments. Un...

CVE-2026-100649

vLLM before 0.29.0 contains a resource-limit bypass vulnerability in PyNvVideoCodec decoder allocation where sampler sub

历史摘要 · 未重新核验 · NVD

#cve #cwe-770

漏洞预警2026-09-26 发布INFO

ClawHub (the openclaw/clawhub application/backend) does not bind anonymous HTTP API requests to a trusted caller identity, so all direct anonymous API requests share a single de...

CVE-2026-100600

ClawHub (the openclaw/clawhub application/backend) does not bind anonymous HTTP API requests to a trusted caller identit

历史摘要 · 未重新核验 · NVD

#cve #cwe-770