#cwe-770

共收录 1181 条相关情报。

← 返回所有主题
漏洞预警2026-08-20 发布HIGH

A flaw was found in FreeIPA. A remote, unauthenticated attacker can exploit a vulnerability in the `/ipa/i18n_messages` endpoint by sending an arbitrarily large request body. Th...

CVE-2026-73198

A flaw was found in FreeIPA. A remote, unauthenticated attacker can exploit a vulnerability in the `/ipa/i18n_messages`

来源摘录 · NVD

漏洞预警2026-08-20 发布HIGH

A flaw was found in FreeIPA. A remote, unauthenticated attacker can exploit this vulnerability by sending oversized form POST requests to the `/ipa/migration/migration.py` endpo...

CVE-2026-73197

A flaw was found in FreeIPA. A remote, unauthenticated attacker can exploit this vulnerability by sending oversized form

来源摘录 · NVD / OSV.dev

漏洞预警2026-08-20 发布INFO

A flaw was found in FreeIPA. A low-privilege authenticated user can exploit this vulnerability by submitting an oversized One-Time Password (OTP) key value. This oversized key i...

CVE-2026-73196

A flaw was found in FreeIPA. A low-privilege authenticated user can exploit this vulnerability by submitting an oversize

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-19 发布INFO

IBM Reliable Scalable Cluster Technology (RSCT) 3.0 could allow a remote attacker to cause a denial of service by sending a specially crafted request due improper input validation.

CVE-2026-14514

IBM Reliable Scalable Cluster Technology (RSCT) 3.0 could allow a remote attacker to cause a denial of service by sendin

历史摘要 · 未重新核验 · NVD

安全公告2026-08-19 发布INFO

BuildKit has a possible runtime DoS via unbounded group parsing

CVE-2026-61712

### Impact Maliciously crafted base image or build can cause a Denial of Service (DoS) condition. When creating a contai

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-19 发布INFO

BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. Prior to 0.31.1, BuildKit read attacker-controlled /etc/pa...

CVE-2026-61712

BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. P

历史摘要 · 未重新核验 · NVD

安全公告2026-08-19 发布INFO

MCP PHP SDK: client HttpTransport SSE buffer (sseBuffer .= chunk) grows unbounded when server withholds the event delimiter

CVE-2026-53965

## Summary The HTTP client transport in `mcp/sdk` reads a Server-Sent-Events (SSE) response stream incrementally and ap

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-19 发布INFO

Snipe-IT is an IT asset/license management system. Prior to 8.6.1, POST /two-factor has no rate limiting, lockout, or attempt counter, allowing an attacker with valid credential...

CVE-2026-49870

Snipe-IT is an IT asset/license management system. Prior to 8.6.1, POST /two-factor has no rate limiting, lockout, or at

历史摘要 · 未重新核验 · NVD

安全公告2026-08-19 发布INFO

Uprobe gadgets: unprivileged container's ld.so.cache causes high CPU utilization and container startup DoS

CVE-2026-53941

## Summary An unprivileged container can block all other containers from starting on the same host by placing a crafted

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-19 发布INFO

Allocation of Resources Without Limits or Throttling in ZenHive mpp allows an unauthenticated remote client to drain the fee-payer wallet through concurrent sponsored payments, ...

CVE-2026-73541

Allocation of Resources Without Limits or Throttling in ZenHive mpp allows an unauthenticated remote client to drain the

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-19 发布INFO

A vulnerability in the handling of management plane packets by Cisco Industrial Ethernet (IE) 1000 Series Switches could allow an unauthenticated, remote attacker to cause ...

CVE-2026-20177

A vulnerability in the handling of management plane packets by Cisco Industrial Ethernet (IE) 1000 Series Switches could

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-19 发布INFO

Wazuh is a free and open source platform used for threat prevention, detection, and response. From 3.9.0 until 4.14.5 and 5.0.0-beta2, the Wazuh cluster protocol in framework/wa...

CVE-2026-44253

Wazuh is a free and open source platform used for threat prevention, detection, and response. From 3.9.0 until 4.14.5 an

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-19 发布INFO

Joomla Extension - cmsjunkie.com - DOS vector in pagination parameter handling in J-BusinessDirectory < 6.2.3 - Pagination values were not strictly typed. Array/non-numeric valu...

CVE-2026-75956

Joomla Extension - cmsjunkie.com - DOS vector in pagination parameter handling in J-BusinessDirectory < 6.2.3 - Paginati

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-18 发布INFO

libheif is a HEIF and AVIF file format decoder and encoder. From 1.19.0 until 1.23.0, a crafted HEIF sequence accepted by heif_context_read_from_memory() with the msf1 sequence ...

CVE-2026-50142

libheif is a HEIF and AVIF file format decoder and encoder. From 1.19.0 until 1.23.0, a crafted HEIF sequence accepted b

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-18 发布INFO

ZEBRA is a Zcash node written entirely in Rust. Prior to 4.5.0, one unauthenticated P2P peer can monopolize all 25 MAX_INBOUND_CONCURRENCY slots in Zebra's inbound mempool downl...

CVE-2026-52732

ZEBRA is a Zcash node written entirely in Rust. Prior to 4.5.0, one unauthenticated P2P peer can monopolize all 25 MAX_I

历史摘要 · 未重新核验 · NVD

安全公告2026-08-18 发布INFO

membrane_mp4_plugin has an unauthenticated denial-of-service via BEAM atom table exhaustion

CVE-2026-53423

### Summary `membrane_mp4_plugin` interns every 4-byte MP4 box name as a BEAM atom while parsing container headers, wit

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-18 发布INFO

NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause an allocation of resources without limits. A successful exploit might lead to den...

CVE-2026-47628

NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause an allocation of resourc

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-18 发布INFO

Wazuh 4.0.0 before 4.14.7 and 5.0.0-beta2 contain a denial of service vulnerability that allows authenticated attackers with allow_run_as enabled to exhaust CPU resources by sub...

CVE-2026-74039

Wazuh 4.0.0 before 4.14.7 and 5.0.0-beta2 contain a denial of service vulnerability that allows authenticated attackers

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-18 发布INFO

Unauthenticated Denial of Service Attack in Starter Templates by Kadence WP <= 2.3.3 versions.

CVE-2026-73997

Unauthenticated Denial of Service Attack in Starter Templates by Kadence WP <= 2.3.3 versions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-18 发布INFO

ArcadeDB before 26.8.1 contains a denial of service vulnerability in the Cypher range() function that allows authenticated users to exhaust server heap memory. Attackers can sub...

CVE-2026-75841

ArcadeDB before 26.8.1 contains a denial of service vulnerability in the Cypher range() function that allows authenticat

历史摘要 · 未重新核验 · NVD