#cwe-770

共收录 1181 条相关情报。

← 返回所有主题
漏洞预警2026-08-13 发布INFO

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to unbounded resource allocation.

CVE-2026-17199

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to unbounded resource alloca

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-13 发布INFO

@hono/node-server allows running the Hono application on Node.js. From 2.0.0 until 2.0.10, a WebSocket upgrade request to an upgradeWebSocket route with a missing or malformed S...

CVE-2026-73565

@hono/node-server allows running the Hono application on Node.js. From 2.0.0 until 2.0.10, a WebSocket upgrade request t

历史摘要 · 未重新核验 · NVD

安全公告2026-08-13 发布INFO

@hono/node-server: Unauthenticated memory-leak DoS via aborted WebSocket handshake

CVE-2026-73565

@hono/node-server allows running the Hono application on Node.js. From 2.0.0 until 2.0.10, a WebSocket upgrade request t

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-08-13 发布INFO

Denial of Service via Unbounded io.ReadAll in NPM Package Tag Endpoint

CVE-2026-42931

Denial of Service via Unbounded io.ReadAll in NPM Package Tag Endpoint

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-13 发布INFO

rsync daemon 2.0.0 before 3.5.0 contains a denial of service vulnerability that allows unauthenticated remote attackers to exhaust daemon connection slots by stalling the handsh...

CVE-2026-70464

rsync daemon 2.0.0 before 3.5.0 contains a denial of service vulnerability that allows unauthenticated remote attackers

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-13 发布INFO

rsync 3.4.2 before 3.5.0 contains a denial of service vulnerability that allows a remote sender to exhaust system resources by specifying the --zt short alias for --compress-thr...

CVE-2026-70455

rsync 3.4.2 before 3.5.0 contains a denial of service vulnerability that allows a remote sender to exhaust system resour

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-13 发布INFO

Issue summary: When an OpenSSL QUIC server (Listener SSL object) processes valid QUIC Initial packets for unknown destination connection IDs, it can allocate and queue new incom...

CVE-2026-14456

Issue summary: When an OpenSSL QUIC server (Listener SSL object) processes valid QUIC Initial packets for unknown destin

历史摘要 · 未重新核验 · NVD

安全公告2026-08-13 发布INFO

rsync 3.4.2 < 3.5.0 DoS via --zt Zstandard Compression Thread Exhaustion

CVE-2026-70455

rsync 3.4.2 before 3.5.0 contains a denial of service vulnerability that allows a remote sender to exhaust system resour

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-08-13 发布INFO

rsync 2.0.0 < 3.5.0 Connection Slot Exhaustion DoS via Handshake Stall

CVE-2026-70464

rsync daemon 2.0.0 before 3.5.0 contains a denial of service vulnerability that allows unauthenticated remote attackers

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-08-13 发布INFO

Rekor is a software supply chain transparency log. Starting in version 0.3.0 and prior to version 1.5.2, the `Package.Unmarshal()` function in `pkg/types/alpine/apk.go` decompre...

CVE-2026-48702

Rekor is a software supply chain transparency log. Starting in version 0.3.0 and prior to version 1.5.2, the `Package.Un

历史摘要 · 未重新核验 · NVD

安全公告2026-08-13 发布INFO

A flaw was found in search-v2-api. An unauthenticated attacker can exploit this by sending...

CVE-2026-71469

A flaw was found in search-v2-api. An unauthenticated attacker can exploit this by sending requests with unique random b

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-12 发布INFO

etcd is a distributed key-value store for the data of a distributed system. Prior to versions 3.5.33, 3.6.14, and 3.7.1, a network attacker who can reach an etcd TLS listener ca...

CVE-2026-73500

etcd is a distributed key-value store for the data of a distributed system. Prior to versions 3.5.33, 3.6.14, and 3.7.1,

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-12 发布INFO

Http4s (http4s-blaze-server) is a minimal, idiomatic Scala interface for HTTP services. Prior to 0.23.18 and 1.0.0-M42, http4s-blaze-server aggregates fragments of an incoming W...

CVE-2026-73493

Http4s (http4s-blaze-server) is a minimal, idiomatic Scala interface for HTTP services. Prior to 0.23.18 and 1.0.0-M42,

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-12 发布INFO

A flaw was found in search-v2-api. An unauthenticated attacker can exploit this by sending requests with unique random bearer tokens. Each unique token creates a permanent entry...

CVE-2026-71469

A flaw was found in search-v2-api. An unauthenticated attacker can exploit this by sending requests with unique random b

历史摘要 · 未重新核验 · NVD

安全公告2026-08-12 发布INFO

IBM Db2 12.1.5 for Linux, UNIX and Windows (includes DB2 Connect Server) could allow a local...

CVE-2026-18096

IBM Db2 12.1.5 for Linux, UNIX and Windows (includes DB2 Connect Server) could allow a local attacker to cause a denial

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-12 发布INFO

IBM Db2 12.1.5 for Linux, UNIX and Windows (includes DB2 Connect Server) could allow a local attacker to cause a denial of service due to a memory leak.

CVE-2026-18096

IBM Db2 12.1.5 for Linux, UNIX and Windows (includes DB2 Connect Server) could allow a local attacker to cause a denial

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-12 发布INFO

An authorization bypass vulnerability in LXD allows an authenticated user to bypass project-level disk and volume limits. Two related code paths fail to verify resource limits d...

CVE-2026-63299

An authorization bypass vulnerability in LXD allows an authenticated user to bypass project-level disk and volume limits

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-12 发布INFO

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.5 before 19.0.6, 19.1 before 19.1.4, and 19.2 before 19.2.2 that under certain conditions could hav...

CVE-2026-7427

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.5 before 19.0.6, 19.1 before 19.1.4, and 1

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-12 发布INFO

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to improper validation of input size.

CVE-2026-17271

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to improper validation of in

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-12 发布MEDIUM

A allocation of resources without limits or throttling vulnerability in Fortinet FortiOS 7.6.0 through 7.6.6, FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiOS 7.0 all...

CVE-2026-71408

A allocation of resources without limits or throttling vulnerability in Fortinet FortiOS 7.6.0 through 7.6.6, FortiOS 7.

来源摘录 · NVD