#cwe-770

共收录 1181 条相关情报。

漏洞预警2026-08-12 发布INFO

An unauthenticated denial-of-service vulnerability in the device's PLCnext Engineer communication interface allow an remote attacker to interrupt access via the client applicati...

CVE-2025-41770

An unauthenticated denial-of-service vulnerability in the device's PLCnext Engineer communication interface allow an rem

历史摘要 · 未重新核验 · NVD

#cve #cwe-770

漏洞预警2026-08-11 发布INFO

Malcolm is a network traffic analysis tool suite. Prior to version 26.07.0, `safe-extract.py` extracts uploaded archives with no limit on entry count, directory depth, total ent...

CVE-2026-63133

Malcolm is a network traffic analysis tool suite. Prior to version 26.07.0, `safe-extract.py` extracts uploaded archives

历史摘要 · 未重新核验 · NVD

#cve #cwe-770

安全公告2026-08-11 发布INFO

Malcolm has Uncontrolled Resource Consumption in Archive Extraction (Inode-Exhaustion DoS)

CVE-2026-63133

Malcolm is a network traffic analysis tool suite. Prior to version 26.07.0, `safe-extract.py` extracts uploaded archives

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-770

漏洞预警2026-08-11 发布INFO

python-socketio is a Python implementation of the Socket.IO realtime client and server. The python-socketio server stores binary `EVENT` and `ACK` messages in memory while it wa...

CVE-2026-48804

python-socketio is a Python implementation of the Socket.IO realtime client and server. The python-socketio server store

历史摘要 · 未重新核验 · NVD

#cve #cwe-770

漏洞预警2026-08-11 发布INFO

Django REST framework is a toolkit for building Web APIs. Prior to 3.17.2, Django REST Framework's request.data parsing in rest_framework/request.py Request._parse() passes the ...

CVE-2026-73228

Django REST framework is a toolkit for building Web APIs. Prior to 3.17.2, Django REST Framework's request.data parsing

历史摘要 · 未重新核验 · NVD

#cve #cwe-400 #cwe-770

漏洞预警2026-08-11 发布INFO

python-engineio is a Python implementation of the Engine.IO realtime client and server. Versions prior to 4.13.2 have two specific configurations of the python-engineio server i...

CVE-2026-48809

python-engineio is a Python implementation of the Engine.IO realtime client and server. Versions prior to 4.13.2 have tw

历史摘要 · 未重新核验 · NVD

#cve #cwe-770

漏洞预警2026-08-11 发布INFO

python-engineio is a Python implementation of the Engine.IO realtime client and server. Prior to version 4.13.2, an attacker can cause the creation of unnecessary background thr...

CVE-2026-48802

python-engineio is a Python implementation of the Engine.IO realtime client and server. Prior to version 4.13.2, an atta

历史摘要 · 未重新核验 · NVD

#cve #cwe-770

漏洞预警2026-08-11 发布INFO

Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.16.0, dtls_server_input_handler() and create_new_connected_udp_socket() in src/apps/relay/dtls_li...

CVE-2026-73214

Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.16.0, dtls_server_input_handler() and cr

历史摘要 · 未重新核验 · NVD

#cve #cwe-400 #cwe-770

安全公告2026-08-11 发布INFO

coturn allocates a full per-peer SSL/session before verifying the DTLS cookie, enabling source-spoofing/botnet state-exhaustion DoS

CVE-2026-73214

Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.16.0, dtls_server_input_handler() and cr

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-400 #cwe-770

漏洞预警2026-08-11 发布INFO

Browserslist is a configuration tool for sharing target browsers and Node.js versions between front-end tools. Prior to 4.28.7, index.js retains every distinct `(queries, contex...

CVE-2026-73089

Browserslist is a configuration tool for sharing target browsers and Node.js versions between front-end tools. Prior to

历史摘要 · 未重新核验 · NVD

#cve #cwe-770

漏洞预警2026-08-11 发布INFO

Allocation of resources without limits or throttling in Windows Kernel allows an unauthorized attacker to deny service over a network.

CVE-2026-54113

Allocation of resources without limits or throttling in Windows Kernel allows an unauthorized attacker to deny service o

历史摘要 · 未重新核验 · NVD

#cve #cwe-770

漏洞预警2026-08-11 发布HIGH

A flaw was found in EAP's undertow http/1.1 chunked-transfer decoder. missing limits on size and count would allow an attacker to use an unauthenticated connection to drive the ...

CVE-2026-15561

A flaw was found in EAP's undertow http/1.1 chunked-transfer decoder. missing limits on size and count would allow an at

来源摘录 · NVD

#cve #cwe-770

漏洞预警2026-08-11 发布INFO

Improper Validation of Specified Quantity in Input and Allocation of Resources Without Limits or Throttling vulnerability in Samsung Open Source rlottie allows Excessive Allocat...

CVE-2026-19517

Improper Validation of Specified Quantity in Input and Allocation of Resources Without Limits or Throttling vulnerabilit

历史摘要 · 未重新核验 · NVD

#cve #cwe-770 #cwe-1284

漏洞预警2026-08-11 发布INFO

SAP Approuter does not enforce sufficient flow control in certain functionality. An attacker with low privileges could send high volumes of data without consuming responses, cau...

CVE-2026-66761

SAP Approuter does not enforce sufficient flow control in certain functionality. An attacker with low privileges could s

历史摘要 · 未重新核验 · NVD

#cve #cwe-770

漏洞预警2026-08-11 发布INFO

SAP Approuter does not sufficiently handle certain requests under specific conditions. An unauthenticated attacker could send specially crafted input that causes the component t...

CVE-2026-58238

SAP Approuter does not sufficiently handle certain requests under specific conditions. An unauthenticated attacker could

历史摘要 · 未重新核验 · NVD

#cve #cwe-770

漏洞预警2026-08-10 发布INFO

Mastodon is a free, open-source social network server based on ActivityPub. Prior to 4.4.21, 4.5.14, 4.6.4, and 4.7.0-beta.1, the administrative statistics endpoints handled by ...

CVE-2026-72914

Mastodon is a free, open-source social network server based on ActivityPub. Prior to 4.4.21, 4.5.14, 4.6.4, and 4.7.0-be

历史摘要 · 未重新核验 · NVD

#cve #cwe-405 #cwe-770

安全公告2026-08-10 发布INFO

A flaw was found in ml-metadata. The statically-linked gRPC stack in ml-metadata is outdated,...

CVE-2026-18618

A flaw was found in ml-metadata. The statically-linked gRPC stack in ml-metadata is outdated, making it vulnerable to kn

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-770 #severity:high

安全公告2026-08-10 发布INFO

TBEA TLogger V2.1.0.0B0.0.0.0 contains an unauthenticated resource exhaustion vulnerability in...

CVE-2025-15682

TBEA TLogger V2.1.0.0B0.0.0.0 contains an unauthenticated resource exhaustion vulnerability in its web server. An unauth

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-770 #severity:high

漏洞预警2026-08-10 发布INFO

A flaw was found in ml-metadata. The statically-linked gRPC stack in ml-metadata is outdated, making it vulnerable to known HTTP/2 denial of service (DoS) issues. An in-cluster ...

CVE-2026-18618

A flaw was found in ml-metadata. The statically-linked gRPC stack in ml-metadata is outdated, making it vulnerable to kn

历史摘要 · 未重新核验 · NVD

#cve #cwe-770

漏洞预警2026-08-10 发布INFO

TBEA TLogger V2.1.0.0B0.0.0.0 contains an unauthenticated resource exhaustion vulnerability in its web server. An unauthenticated remote attacker can send PUT requests to the /t...

CVE-2025-15682

TBEA TLogger V2.1.0.0B0.0.0.0 contains an unauthenticated resource exhaustion vulnerability in its web server. An unauth

历史摘要 · 未重新核验 · NVD

#cve #cwe-770