#cwe-770

共收录 1180 条相关情报。

漏洞预警2026-09-15 发布INFO

atomic-agents-stack before 1.1.0 contains a cost-guardrail bypass in the _estimate_batch_cost function that returns zero cost for unknown models not in the pricing table. Attack...

CVE-2026-91987

atomic-agents-stack before 1.1.0 contains a cost-guardrail bypass in the _estimate_batch_cost function that returns zero

历史摘要 · 未重新核验 · NVD

#cve #cwe-770

漏洞预警2026-09-15 发布INFO

Vikunja versions before 2.6.0 contain a resource exhaustion vulnerability in the Planka migrator that fails to enforce aggregate memory budgets during migration jobs. Authentica...

CVE-2026-91970

Vikunja versions before 2.6.0 contain a resource exhaustion vulnerability in the Planka migrator that fails to enforce a

历史摘要 · 未重新核验 · NVD

#cve #cwe-770

漏洞预警2026-09-15 发布INFO

pyLoad is a free and open-source download manager written in Python. Prior to 0.5.0b3.dev101, EventManager in src/pyload/core/managers/event_manager.py appends a Client object t...

CVE-2026-48987

pyLoad is a free and open-source download manager written in Python. Prior to 0.5.0b3.dev101, EventManager in src/pyload

历史摘要 · 未重新核验 · NVD

#cve #cwe-400 #cwe-401 #cwe-770

漏洞预警2026-09-15 发布INFO

Affected versions of MISP do not consistently apply the existing authentication-failure logging throttle. Two API authentication failure branches wrote directly to the Log mod...

CVE-2026-92003

Affected versions of MISP do not consistently apply the existing authentication-failure logging throttle. Two API auth

历史摘要 · 未重新核验 · NVD

#cve #cwe-400 #cwe-770

漏洞预警2026-09-14 发布INFO

IBM Verify Identity Access could allow a remote attacker to cause a denial of service due to insufficient validation of incoming request resources.

CVE-2026-13260

IBM Verify Identity Access could allow a remote attacker to cause a denial of service due to insufficient validation of

历史摘要 · 未重新核验 · NVD

#cve #cwe-770

漏洞预警2026-09-11 发布INFO

Hoverfly is an open source API simulation tool. Prior to version 1.12.8, remote post-serve actions use `http.DefaultClient` without any timeout configuration. When the remote en...

CVE-2026-50018

Hoverfly is an open source API simulation tool. Prior to version 1.12.8, remote post-serve actions use `http.DefaultClie

历史摘要 · 未重新核验 · NVD

#cve #cwe-400 #cwe-770

漏洞预警2026-09-11 发布INFO

OpenTelemetry eBPF Profiler is a production-scale agent for profiling applications across multiple programming languages. Starting in version 0.0.202527 and prior to version 0.0...

CVE-2026-48496

OpenTelemetry eBPF Profiler is a production-scale agent for profiling applications across multiple programming languages

历史摘要 · 未重新核验 · NVD

#cve #cwe-770

漏洞预警2026-09-11 发布INFO

AirSane is a SANE frontend, and a scanner server that supports Apple's AirScan protocol. Versions prior to 0.4.12 have a vulnerability in the custom HTTP server implementation o...

CVE-2026-54135

AirSane is a SANE frontend, and a scanner server that supports Apple's AirScan protocol. Versions prior to 0.4.12 have a

历史摘要 · 未重新核验 · NVD

#cve #cwe-400 #cwe-770

漏洞预警2026-09-11 发布INFO

multiparty is a Node.js library for parsing multipart/form-data request bodies. In versions from 2.1.0 up to but not including 4.3.1, the parser does not bound the amount of mem...

CVE-2026-87908

multiparty is a Node.js library for parsing multipart/form-data request bodies. In versions from 2.1.0 up to but not inc

历史摘要 · 未重新核验 · NVD

#cve #cwe-400 #cwe-770

安全公告2026-09-10 发布INFO

Open WebUI: Unauthenticated requests can stall the server via uncached OIDC fetches in back-channel logout

CVE-2026-87011

## Summary The OIDC back-channel logout endpoint is unauthenticated by design, because the identity provider calls it w

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #pip #cwe-405 #cwe-770 #severity:high

漏洞预警2026-09-10 发布INFO

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5,IKEv2 parser state could...

CVE-2026-45769

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Pr

历史摘要 · 未重新核验 · NVD

#cve #cwe-400 #cwe-770

漏洞预警2026-09-10 发布INFO

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Starting in version 8.0.0 and prior to version 8.0.5, LDAP ...

CVE-2026-45768

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. St

历史摘要 · 未重新核验 · NVD

#cve #cwe-400 #cwe-770

漏洞预警2026-09-10 发布INFO

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5, certain NFS parser stat...

CVE-2026-45766

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Pr

历史摘要 · 未重新核验 · NVD

#cve #cwe-400 #cwe-770

漏洞预警2026-09-10 发布INFO

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5, DNP3 reassembly could b...

CVE-2026-45765

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Pr

历史摘要 · 未重新核验 · NVD

#cve #cwe-400 #cwe-770

漏洞预警2026-09-10 发布INFO

Traefik is an open source HTTP reverse proxy and load balancer. From 2.8.2 until 2.11.56 and 3.7.12, HTTP/3 entrypoints do not apply entryPoints..transport.respondingTimeouts.re...

CVE-2026-88012

Traefik is an open source HTTP reverse proxy and load balancer. From 2.8.2 until 2.11.56 and 3.7.12, HTTP/3 entrypoints

历史摘要 · 未重新核验 · NVD

#cve #cwe-770

安全公告2026-09-10 发布INFO

Traefik: respondingTimeouts.readTimeout is not applied to HTTP/3, leaving slow-body uploads unbounded

CVE-2026-88878 · CVE-2026-88012

Traefik is an open source HTTP reverse proxy and load balancer. From 2.8.2 until 2.11.56 and 3.7.12, HTTP/3 entrypoints

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-770

漏洞预警2026-09-10 发布INFO

Traefik is an HTTP reverse proxy and load balancer. In versions >= v2.8.2 through <= v2.11.55 and >= v3.0.0 through <= v3.7.11, the entryPoints.<name>.transport.respondingTimeou...

CVE-2026-88878

Traefik is an HTTP reverse proxy and load balancer. In versions >= v2.8.2 through = v3.0.0 through .transport.responding

历史摘要 · 未重新核验 · NVD

#cve #cwe-770

漏洞预警2026-09-10 发布INFO

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Starting in version 8.0.0 and prior to version 8.0.5, when ...

CVE-2026-45763

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. St

历史摘要 · 未重新核验 · NVD

#cve #cwe-770

安全公告2026-09-10 发布INFO

Suricata lua: sandbox allocation limit not enforced for new allocations

CVE-2026-45763

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. St

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-770

安全公告2026-09-10 发布INFO

Traefik v2.8.2 through v3.6 HTTP/3 Timeout Bypass

CVE-2026-88012 · CVE-2026-88878

Traefik is an HTTP reverse proxy and load balancer. In versions >= v2.8.2 through = v3.0.0 through .transport.responding

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-770