#cwe-770

共收录 1181 条相关情报。

← 返回所有主题
漏洞预警2026-08-05 发布INFO

Nuxt is an open-source web development framework for Vue.js. From 3.1.0 until 3.21.10 and 4.5.1, the internal island renderer endpoint `/__nuxt_island/...` decodes and hashes at...

CVE-2026-71321

Nuxt is an open-source web development framework for Vue.js. From 3.1.0 until 3.21.10 and 4.5.1, the internal island ren

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-05 发布INFO

Nuxt is an open-source web development framework for Vue.js. From 3.1.0 until 3.21.10 and 4.5.1, an unauthenticated attacker can use a server island v-for prop, including vforTo...

CVE-2026-71314

Nuxt is an open-source web development framework for Vue.js. From 3.1.0 until 3.21.10 and 4.5.1, an unauthenticated atta

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-05 发布INFO

rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to 1.75.0, the shared HTTP CONNECT helper in lib/proxy/http.g...

CVE-2026-71310

rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to 1

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-03 发布INFO

The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to 1.1.18, 2.1.4, 3.0.6, and 5.0.9, expand() does not apply maxLength while ...

CVE-2026-69152

The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to 1.1.18, 2.1.4, 3

历史摘要 · 未重新核验 · NVD

安全公告2026-08-03 发布INFO

brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation

CVE-2026-69152

### Summary The `maxLength` mitigation added in `5.0.8` for GHSA-mh99-v99m-4gvg / CVE-2026-14257 is incomplete. It boun

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-03 发布INFO

CTI-Transmute contains an uncontrolled resource-consumption vulnerability in the unauthenticated /activity_timeline endpoint. The endpoint accepts a user-controlled days query p...

CVE-2026-69079

CTI-Transmute contains an uncontrolled resource-consumption vulnerability in the unauthenticated /activity_timeline endp

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-03 发布INFO

In Bouncy Castle for Java before 1.85, PKCS#12 MAC and bag-decryption KDF iteration-count bound (DoS). This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bou...

CVE-2026-13586

In Bouncy Castle for Java before 1.85, PKCS#12 MAC and bag-decryption KDF iteration-count bound (DoS). This issue also a

历史摘要 · 未重新核验 · NVD

安全公告2026-08-03 发布INFO

In Bouncy Castle for Java before 1.85, BCFKS keystore load honours unbounded KDF cost from...

CVE-2026-58063

In Bouncy Castle for Java before 1.85, BCFKS keystore load honours unbounded KDF cost from untrusted file. This issue al

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-03 发布INFO

In wlan STA FW, there is a possible system becoming unresponsive due to logging. This could lead...

CVE-2026-20482

In wlan STA FW, there is a possible system becoming unresponsive due to logging. This could lead to remote (proximal/adj

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-03 发布INFO

In Bouncy Castle for Java before 1.85, OpenPGP Argon2 S2K honours attacker-chosen memory and...

CVE-2026-59648

In Bouncy Castle for Java before 1.85, OpenPGP Argon2 S2K honours attacker-chosen memory and passes. This issue also aff

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-03 发布INFO

In Bouncy Castle for Java before 1.85, CRMF/CMP password-MAC honours unbounded iteration count....

CVE-2026-59647

In Bouncy Castle for Java before 1.85, CRMF/CMP password-MAC honours unbounded iteration count. This issue also affects

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-03 发布INFO

In Bouncy Castle for Java before 1.85, PKCS#8 / PBES2 decryptors honour unbounded KDF cost from...

CVE-2026-15055

In Bouncy Castle for Java before 1.85, PKCS#8 / PBES2 decryptors honour unbounded KDF cost from input. This issue also a

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-03 发布INFO

In Bouncy Castle for Java before 1.85, BCFKS keystore load honours unbounded KDF cost from untrusted file. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and...

CVE-2026-58063

In Bouncy Castle for Java before 1.85, BCFKS keystore load honours unbounded KDF cost from untrusted file. This issue al

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-03 发布INFO

In wlan STA FW, there is a possible system becoming unresponsive due to logging. This could lead to remote (proximal/adjacent) denial of service with no additional execution pri...

CVE-2026-20482

In wlan STA FW, there is a possible system becoming unresponsive due to logging. This could lead to remote (proximal/adj

历史摘要 · 未重新核验 · NVD

安全公告2026-08-03 发布INFO

BCFKS keystore load honours unbounded KDF cost from untrusted file

CVE-2026-58063

In Bouncy Castle for Java before 1.85, BCFKS keystore load honours unbounded KDF cost from untrusted file. This issue al

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-08-03 发布INFO

In Bouncy Castle for Java before 1.85, OpenPGP Argon2 S2K honours attacker-chosen memory and passes. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bounc...

CVE-2026-59648

In Bouncy Castle for Java before 1.85, OpenPGP Argon2 S2K honours attacker-chosen memory and passes. This issue also aff

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-03 发布INFO

In Bouncy Castle for Java before 1.85, CRMF/CMP password-MAC honours unbounded iteration count. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Cas...

CVE-2026-59647

In Bouncy Castle for Java before 1.85, CRMF/CMP password-MAC honours unbounded iteration count. This issue also affects

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-03 发布INFO

In Bouncy Castle for Java before 1.85, PKCS#8 / PBES2 decryptors honour unbounded KDF cost from input. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bou...

CVE-2026-15055

In Bouncy Castle for Java before 1.85, PKCS#8 / PBES2 decryptors honour unbounded KDF cost from input. This issue also a

历史摘要 · 未重新核验 · NVD

安全公告2026-08-03 发布INFO

CRMF/CMP password-MAC honours unbounded iteration count

CVE-2026-59647

In Bouncy Castle for Java before 1.85, CRMF/CMP password-MAC honours unbounded iteration count. This issue also affects

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-08-03 发布INFO

OpenPGP Argon2 S2K honours attacker-chosen memory and passes

CVE-2026-59648

In Bouncy Castle for Java before 1.85, OpenPGP Argon2 S2K honours attacker-chosen memory and passes. This issue also aff

历史摘要 · 未重新核验 · OSV.dev