#cwe-770

共收录 1180 条相关情报。

漏洞预警2026-09-09 发布INFO

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.0 until 0.11.1, the unauthenticated POST /oauth/backchannel-logout handler in back...

CVE-2026-87011

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.0 until 0.11.1, the unaut

历史摘要 · 未重新核验 · NVD

#cve #cwe-405 #cwe-770

安全公告2026-09-09 发布INFO

Open WebUI: Unauthenticated requests can stall the server via uncached OIDC fetches in back-channel logout

CVE-2026-87011

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.0 until 0.11.1, the unaut

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-405 #cwe-770

漏洞预警2026-09-08 发布INFO

Allocation of resources without limits or throttling in Windows SMB Server allows an authorized attacker to deny service over a network.

CVE-2026-69374

Allocation of resources without limits or throttling in Windows SMB Server allows an authorized attacker to deny service

历史摘要 · 未重新核验 · NVD

#cve #cwe-770

漏洞预警2026-09-08 发布INFO

Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.

CVE-2026-57099

Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service ove

历史摘要 · 未重新核验 · NVD

#cve #cwe-770

漏洞预警2026-09-08 发布INFO

An uncontrolled resource consumption weakness exists in the request-handling path of the MongoDB sharded-cluster router process. A client that has network access to a router por...

CVE-2026-82075

An uncontrolled resource consumption weakness exists in the request-handling path of the MongoDB sharded-cluster router

历史摘要 · 未重新核验 · NVD

#cve #cwe-770

漏洞预警2026-09-08 发布INFO

A security issue exists in MongoDB server's JSON Pointer parser used during $jsonSchema query filter processing. When a find command includes a specially crafted $jsonSchema fil...

CVE-2026-82054

A security issue exists in MongoDB server's JSON Pointer parser used during $jsonSchema query filter processing. When a

历史摘要 · 未重新核验 · NVD

#cve #cwe-770

漏洞预警2026-09-08 发布INFO

A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). The web server does not properly limit or manage system resources when processing a high volume of c...

CVE-2026-62649

A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). The web server does not properly limit or m

历史摘要 · 未重新核验 · NVD

#cve #cwe-770

漏洞预警2026-09-08 发布INFO

Allocation of Resources Without Limits or Throttling vulnerability in Automattic WooCommerce allows HTTP DoS. This issue affects WooCommerce: from n/a before 11.1.0.

CVE-2026-48888

Allocation of Resources Without Limits or Throttling vulnerability in Automattic WooCommerce allows HTTP DoS. This issu

历史摘要 · 未重新核验 · NVD

#cve #cwe-770

安全公告2026-09-08 发布INFO

Allocation of Resources Without Limits or Throttling in ASUS Armoury Crate allows a local user to...

CVE-2026-75808

Allocation of Resources Without Limits or Throttling in ASUS Armoury Crate allows a local user to cause a denial-of-serv

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-770 #severity:medium

漏洞预警2026-09-08 发布INFO

A security flaw has been discovered in java-json-tools jackson-coreutils 2.0. This vulnerability affects the function TreePointer.tokensFromInput of the file src/main/java/com/g...

CVE-2026-86513

A security flaw has been discovered in java-json-tools jackson-coreutils 2.0. This vulnerability affects the function Tr

历史摘要 · 未重新核验 · NVD

#cve #cwe-400 #cwe-770

漏洞预警2026-09-08 发布INFO

Allocation of Resources Without Limits or Throttling in ASUS Armoury Crate allows a local user to cause a denial-of-service condition through system memory exhaustion by bypassi...

CVE-2026-75808

Allocation of Resources Without Limits or Throttling in ASUS Armoury Crate allows a local user to cause a denial-of-serv

历史摘要 · 未重新核验 · NVD

#cve #cwe-770

漏洞预警2026-09-07 发布INFO

Allocation of Resources Without Limits or Throttling vulnerability in ash-project ash_authentication_oauth2_server allows an unauthenticated attacker to exhaust database storage...

CVE-2026-82753

Allocation of Resources Without Limits or Throttling vulnerability in ash-project ash_authentication_oauth2_server allow

历史摘要 · 未重新核验 · NVD

#cve #cwe-770

漏洞预警2026-09-07 发布INFO

Affected versions of MISP permit unauthenticated or weakly constrained request paths to perform persistent work without adequate input bounds or rate limiting. The users/forgo...

CVE-2026-86452

Affected versions of MISP permit unauthenticated or weakly constrained request paths to perform persistent work without

历史摘要 · 未重新核验 · NVD

#cve #cwe-400 #cwe-770

安全公告2026-09-07 发布INFO

MISP Unauthenticated Mail Endpoints Allow Unbounded Storage Consumption and Request Flooding

CVE-2026-86452

Affected versions of MISP permit unauthenticated or weakly constrained request paths to perform persistent work without

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-400 #cwe-770

漏洞预警2026-09-07 发布INFO

A client may send a WebSocket frame with an unknown opcode and a very large declared payload length, causing Jetty to attempt a large memory allocation and potentially exhaust t...

CVE-2026-19204

A client may send a WebSocket frame with an unknown opcode and a very large declared payload length, causing Jetty to at

历史摘要 · 未重新核验 · NVD

#cve #cwe-770 #cwe-789

漏洞预警2026-09-07 发布INFO

HCL MyXalytics was affected by Potential DOS Vulnerability. It allows users to input data without any restriction on the number of characters which can impact system performance...

CVE-2025-52657

HCL MyXalytics was affected by Potential DOS Vulnerability. It allows users to input data without any restriction on the

历史摘要 · 未重新核验 · NVD

#cve #cwe-770

安全公告2026-09-07 发布INFO

CVE-2026-19204

A client may send a WebSocket frame with an unknown opcode and a very large declared payload length, causing Jetty to at

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-770 #cwe-789

安全公告2026-09-04 发布INFO

vLLM: Derender endpoints decode caller-supplied GenerateResponse token IDs without output bounds

CVE-2026-71486

## Summary The `/v1/completions/derender` and `/v1/chat/completions/derender` endpoints accept caller-supplied `Generat

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #pip #cwe-400 #cwe-770 #severity:medium

漏洞预警2026-09-04 发布INFO

A flaw has been found in ramon-victor freegpt-webui up to 098db3dfeb41555c2ca9269df0f13e10ec1c35dc. Affected by this issue is the function getJailbreak of the file server/backen...

CVE-2026-85703

A flaw has been found in ramon-victor freegpt-webui up to 098db3dfeb41555c2ca9269df0f13e10ec1c35dc. Affected by this iss

历史摘要 · 未重新核验 · NVD

#cve #cwe-400 #cwe-770

漏洞预警2026-09-04 发布INFO

undici's decompress interceptor decompresses response bodies according to the untrusted Content-Encoding header. While the number of content-encoding layers is capped, the total...

CVE-2026-84890

undici's decompress interceptor decompresses response bodies according to the untrusted Content-Encoding header. While t

历史摘要 · 未重新核验 · NVD

#cve #cwe-770