#cwe-770

共收录 1181 条相关情报。

← 返回所有主题
漏洞预警2026-09-04 发布INFO

undici's decompress interceptor decompresses response bodies according to the untrusted Content-Encoding header. While the number of content-encoding layers is capped, the total...

CVE-2026-84890

undici's decompress interceptor decompresses response bodies according to the untrusted Content-Encoding header. While t

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-04 发布INFO

Chroma 1.5.9 fails to validate maximum bounds on HNSW index parameters max_neighbors, ef_construction, and ef_search in collection-create requests. Unauthenticated attackers can...

CVE-2026-85664

Chroma 1.5.9 fails to validate maximum bounds on HNSW index parameters max_neighbors, ef_construction, and ef_search in

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-04 发布INFO

Allocation of Resources Without Limits or Throttling vulnerability in elixir-mint mint allows a remote HTTP server to exhaust memory on the client host and cause a denial of ser...

CVE-2026-82728

Allocation of Resources Without Limits or Throttling vulnerability in elixir-mint mint allows a remote HTTP server to ex

历史摘要 · 未重新核验 · NVD

安全公告2026-09-04 发布INFO

Chroma 1.5.9 Unbounded HNSW Index Parameters Memory Exhaustion

CVE-2026-85664

Chroma 1.5.9 fails to validate maximum bounds on HNSW index parameters max_neighbors, ef_construction, and ef_search in

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-09-04 发布INFO

Robots::Validate versions from 0.3.2 before 0.3.11 for Perl allow unbounded outbound DNS queries per validation via a forward-confirmation loop that does not bound the names it ...

CVE-2026-82309

Robots::Validate versions from 0.3.2 before 0.3.11 for Perl allow unbounded outbound DNS queries per validation via a fo

历史摘要 · 未重新核验 · NVD

安全公告2026-09-04 发布INFO

Robots::Validate versions from 0.3.2 before 0.3.11 for Perl allow unbounded outbound DNS queries per validation via a forward-confirmation loop that does not bound the names it ...

CVE-2026-82309

Robots::Validate versions from 0.3.2 before 0.3.11 for Perl allow unbounded outbound DNS queries per validation via a fo

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-09-04 发布INFO

SiYuan versions before v3.8.2 contain a denial of service vulnerability in the publish-service Basic Auth throttle that stores failed-attempt state using attacker-controlled use...

CVE-2026-85584

SiYuan versions before v3.8.2 contain a denial of service vulnerability in the publish-service Basic Auth throttle that

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-04 发布INFO

SiYuan versions before v3.8.2 contain an unbounded session creation vulnerability in the publish-service Basic Auth handler that allows authenticated attackers to exhaust memory...

CVE-2026-85582

SiYuan versions before v3.8.2 contain an unbounded session creation vulnerability in the publish-service Basic Auth hand

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-04 发布INFO

SiYuan before v3.8.2 contains a denial of service vulnerability in the unauthenticated /api/system/uiproc endpoint that accepts and retains attacker-controlled process identifie...

CVE-2026-85581

SiYuan before v3.8.2 contains a denial of service vulnerability in the unauthenticated /api/system/uiproc endpoint that

历史摘要 · 未重新核验 · NVD

安全公告2026-09-04 发布INFO

SiYuan before v3.8.2 Denial of Service via Auth Throttle

CVE-2026-85584

SiYuan versions before v3.8.2 contain a denial of service vulnerability in the publish-service Basic Auth throttle that

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-04 发布INFO

SiYuan before v3.8.2 Unbounded Session Creation via Basic Auth

CVE-2026-85582

SiYuan versions before v3.8.2 contain an unbounded session creation vulnerability in the publish-service Basic Auth hand

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-04 发布INFO

SiYuan before v3.8.2 Denial of Service via unauthenticated UI-process registration

CVE-2026-85581

SiYuan before v3.8.2 contains a denial of service vulnerability in the unauthenticated /api/system/uiproc endpoint that

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-04 发布INFO

MOOS core-moos through 10.4.0 contains a denial of service vulnerability in the MOOSDB HTTP...

CVE-2026-85450

MOOS core-moos through 10.4.0 contains a denial of service vulnerability in the MOOSDB HTTP server that creates unbounde

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-04 发布INFO

MOOS-IvP pMarineViewer through 24.8.1 fails to limit the number of tracked node identities from...

CVE-2026-85449

MOOS-IvP pMarineViewer through 24.8.1 fails to limit the number of tracked node identities from NODE_REPORT messages, al

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-04 发布INFO

MOOS-IvP pRealm through version 24.8.1 accepts unbounded REALMCAST_REQ subscriptions without...

CVE-2026-85447

MOOS-IvP pRealm through version 24.8.1 accepts unbounded REALMCAST_REQ subscriptions without validating duration or vari

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-04 发布INFO

MOOS-IvP uFldShoreBroker through 24.8.1 fails to limit the number of claimed communities stored...

CVE-2026-85448

MOOS-IvP uFldShoreBroker through 24.8.1 fails to limit the number of claimed communities stored in parallel vectors with

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-03 发布INFO

MOOS core-moos through 10.4.0 contains a denial of service vulnerability in the MOOSDB HTTP server that creates unbounded connections and threads without limits. Attackers can o...

CVE-2026-85450

MOOS core-moos through 10.4.0 contains a denial of service vulnerability in the MOOSDB HTTP server that creates unbounde

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-03 发布INFO

MOOS-IvP pMarineViewer through 24.8.1 fails to limit the number of tracked node identities from NODE_REPORT messages, allowing attackers to exhaust memory by supplying unbounded...

CVE-2026-85449

MOOS-IvP pMarineViewer through 24.8.1 fails to limit the number of tracked node identities from NODE_REPORT messages, al

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-03 发布INFO

MOOS-IvP uFldShoreBroker through 24.8.1 fails to limit the number of claimed communities stored in parallel vectors within ShoreBroker::handleMailNodePing(). A single publisher ...

CVE-2026-85448

MOOS-IvP uFldShoreBroker through 24.8.1 fails to limit the number of claimed communities stored in parallel vectors with

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-03 发布INFO

MOOS-IvP pRealm through version 24.8.1 accepts unbounded REALMCAST_REQ subscriptions without validating duration or variable list limits. Attackers can register long-lived pipew...

CVE-2026-85447

MOOS-IvP pRealm through version 24.8.1 accepts unbounded REALMCAST_REQ subscriptions without validating duration or vari

历史摘要 · 未重新核验 · NVD