#cwe-770

共收录 1181 条相关情报。

← 返回所有主题
漏洞预警2026-08-10 发布INFO

A vulnerability in keras-team/keras versions <= 3.15.0 allows for a denial of service (DoS) attack when loading malicious .keras model files via the keras.models.load_model() fu...

CVE-2026-12570

A vulnerability in keras-team/keras versions <= 3.15.0 allows for a denial of service (DoS) attack when loading maliciou

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-07 发布HIGH

Klever-Go is the Go implementation of the Klever blockchain protocol. Versions from 1.7.14 through 1.7.17 are vulnerable to a remotely triggerable denial of service. Both REST A...

CVE-2026-52880

Klever-Go 是 Klever 区块链协议的 Go 实现,其 REST API 使用 Gin 框架的 `Engine.Run` 便捷方法启动。该方法依赖于 Go 标准库的 `http.Server`,但未设置 `ReadHeaderT

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-07 发布HIGH

Klever-Go is the Go implementation of the Klever blockchain protocol. In versions 1.7.14 through 1.7.17, the direct-message ingress handler spawns a new goroutine for every inco...

CVE-2026-52879

Klever-Go是Klever区块链协议的Go实现。在版本1.7.14至1.7.17中,其直接消息入口处理器在处理每个传入的直接消息时,会在处理器层面的防洪水层做出接纳决定之前,就为每条消息新建一个goroutine,且没有信号量、节流器

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-07 发布MEDIUM

OpenBao is an open source identity-based secrets management system. Prior to version 2.5.4, in OpenBao's Kerberos auth method on the `GET` handler, or when an `Authorization: Ne...

CVE-2026-46405

CVE-2026-46405 是 OpenBao(开源身份基础密钥管理系统)中的一个漏洞,影响 2.5.4 之前的所有版本。在 Kerberos 认证方法的 GET 处理器中,或当请求带有 Authorization: Negotiate

历史摘要 · 未重新核验 · NVD

安全公告2026-08-07 发布INFO

Consul Community Edition and Consul Enterprise 1.17.0 through 2.0.2 are vulnerable to an...

CVE-2026-19014

Consul Community Edition and Consul Enterprise 1.17.0 through 2.0.2 are vulnerable to an uncontrolled resource consumpti

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-07 发布INFO

Unnumbered Disconnect (U DISC) and malformed Aviation Very High Frequency Link Control frames can...

CVE-2025-71410

Unnumbered Disconnect (U DISC) and malformed Aviation Very High Frequency Link Control frames can terminate sessions and

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-07 发布INFO

Consul Community Edition and Consul Enterprise 1.2.0 through 2.0.2 are vulnerable to an...

CVE-2026-19015

Consul Community Edition and Consul Enterprise 1.2.0 through 2.0.2 are vulnerable to an uncontrolled resource consumptio

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-07 发布INFO

Consul Community Edition and Consul Enterprise 1.13.0 through 2.0.2 are vulnerable to an...

CVE-2026-15972

Consul Community Edition and Consul Enterprise 1.13.0 through 2.0.2 are vulnerable to an unauthenticated denial of servi

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-07 发布INFO

Broadcast control frames can disconnect multiple aircraft simultaneously leading to delayed...

CVE-2025-71411

Broadcast control frames can disconnect multiple aircraft simultaneously leading to delayed clearances and air traffic c

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-07 发布INFO

Consul Community Edition and Consul Enterprise 1.2.0 through 2.0.2 are vulnerable to an uncontrolled resource consumption issue in the Connect CA roots endpoint that may allow a...

CVE-2026-19015

Consul Community Edition and Consul Enterprise 1.2.0 through 2.0.2 are vulnerable to an uncontrolled resource consumptio

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-07 发布INFO

Consul Community Edition and Consul Enterprise 1.17.0 through 2.0.2 are vulnerable to an uncontrolled resource consumption issue in the Connect authorization endpoint that may a...

CVE-2026-19014

Consul Community Edition and Consul Enterprise 1.17.0 through 2.0.2 are vulnerable to an uncontrolled resource consumpti

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-07 发布INFO

Consul Community Edition and Consul Enterprise 1.13.0 through 2.0.2 are vulnerable to an unauthenticated denial of service through unbounded connection acceptance on the externa...

CVE-2026-15972

Consul Community Edition and Consul Enterprise 1.13.0 through 2.0.2 are vulnerable to an unauthenticated denial of servi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-07 发布INFO

Broadcast control frames can disconnect multiple aircraft simultaneously leading to delayed clearances and air traffic controller overload. This type of attack can be carried ou...

CVE-2025-71411

Broadcast control frames can disconnect multiple aircraft simultaneously leading to delayed clearances and air traffic c

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-07 发布INFO

Unnumbered Disconnect (U DISC) and malformed Aviation Very High Frequency Link Control frames can terminate sessions and lead to a loss of CPDLC functions requiring a reversion ...

CVE-2025-71410

Unnumbered Disconnect (U DISC) and malformed Aviation Very High Frequency Link Control frames can terminate sessions and

历史摘要 · 未重新核验 · NVD

安全公告2026-08-07 发布INFO

Allocation of Resources Without Limits or Throttling vulnerability in DivvyPayHQ...

CVE-2026-67585

Allocation of Resources Without Limits or Throttling vulnerability in DivvyPayHQ absinthe_federation allows an unauthent

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-07 发布INFO

Allocation of Resources Without Limits or Throttling vulnerability in DivvyPayHQ absinthe_federation allows an unauthenticated remote attacker to abort the Erlang VM via crafted...

CVE-2026-67585

Allocation of Resources Without Limits or Throttling vulnerability in DivvyPayHQ absinthe_federation allows an unauthent

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-06 发布INFO

OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to version 1.0.6, the bootstrap challenge endpoint at `/api/ten...

CVE-2026-48082

OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to ver

历史摘要 · 未重新核验 · NVD

安全公告2026-08-06 发布INFO

OpenReception's bootstrap challenge proof-of-work difficulty hardcoded to 16 bits, which enables abuse rate amplification

CVE-2026-48082

OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to ver

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-08-06 发布INFO

Apache CXF allows to control the maximum attachment size via the "attachment-max-size". Prior to Apache CXF 4.2.3 and 4.1.8 and 3.6.12, there was no default placed on this size,...

CVE-2026-54225

Apache CXF allows to control the maximum attachment size via the "attachment-max-size". Prior to Apache CXF 4.2.3 and 4.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-06 发布INFO

A flaw was found in the GStreamer gst-plugins-good package. The rtph264depay and rtph265depay RTP depayloader elements do not enforce a maximum size limit on the reassembly buff...

CVE-2026-18649

A flaw was found in the GStreamer gst-plugins-good package. The rtph264depay and rtph265depay RTP depayloader elements d

历史摘要 · 未重新核验 · NVD