#cwe-770

共收录 1181 条相关情报。

漏洞预警2026-07-06 发布INFO

OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology. Starting in ver...

CVE-2026-42546

OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linux kernel running on Arm; Corte

历史摘要 · 未重新核验 · NVD

#cve #cwe-770

漏洞预警2026-07-06 发布INFO

A memory leak in OpenVPN version 2.5.0 through 2.5.11, 2.6.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows remote attackers with a valid tls-crypt-v2 client key to potentia...

CVE-2026-13698

A memory leak in OpenVPN version 2.5.0 through 2.5.11, 2.6.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows remote a

历史摘要 · 未重新核验 · NVD

#cve #cwe-401 #cwe-770

漏洞预警2026-07-06 发布INFO

Allocation of Resources Without Limits or Throttling vulnerability in elixir-mint mint (Mint.HTTP1 module) allows a denial of service via an oversized chunked transfer-encoded r...

CVE-2026-56810

Allocation of Resources Without Limits or Throttling vulnerability in elixir-mint mint (Mint.HTTP1 module) allows a deni

历史摘要 · 未重新核验 · NVD

#cve #cwe-770

安全公告2026-07-02 发布INFO

golang.org/x/image/tiff has excessive resource consumption in PackBits decompression

CVE-2026-46599

The TIFF decoder does not place a limit on the size of PackBits-compressed data. A maliciously-crafted image can exploit

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #go #cwe-770 #severity:high

安全公告2026-07-01 发布INFO

Mailpit: Sibling-endpoint memory-exhaustion DoS via unbounded JSON body on /api/v1/messages, /api/v1/tags, and /api/v1/message/{id}/release (incomplete fix of GHSA-fpxj-m5q8-fphw)

CVE-2026-48824

### Summary The fix for GHSA-fpxj-m5q8-fphw (CVE-2026-45710, "Mailpit: Set a default 50MB p/m limit to prevent DoS via

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #go #cwe-770 #severity:medium

漏洞预警2026-07-01 发布INFO

Allocation of resources without limits or throttling in the HTTP/2 HPACK decoder in Apache HttpComponents Core (5.4.2 and earlier, 5.5-beta1 and earlier) allows an remote attack...

CVE-2026-54428

Allocation of resources without limits or throttling in the HTTP/2 HPACK decoder in Apache HttpComponents Core (5.4.2 an

历史摘要 · 未重新核验 · NVD

#cve #cwe-400 #cwe-770

漏洞预警2026-07-01 发布INFO

Allocation of Resources Without Limits or Throttling (CWE-770) in Fleet Server can lead to a denial of service via Excessive Allocation (CAPEC-130). An attacker can submit a spe...

CVE-2026-56150

Allocation of Resources Without Limits or Throttling (CWE-770) in Fleet Server can lead to a denial of service via Exces

历史摘要 · 未重新核验 · NVD

#cve #cwe-770

漏洞预警2026-07-01 发布INFO

Allocation of Resources Without Limits or Throttling (CWE-770) in Elasticsearch can lead to a denial of service via Excessive Allocation (CAPEC-130). A user with elevated privil...

CVE-2026-56149

Allocation of Resources Without Limits or Throttling (CWE-770) in Elasticsearch can lead to a denial of service via Exce

历史摘要 · 未重新核验 · NVD

#cve #cwe-770

漏洞预警2026-07-01 发布INFO

Allocation of Resources Without Limits or Throttling (CWE-770) in Kibana can lead to a denial of service via Excessive Allocation (CAPEC-130). An authenticated user can submit a...

CVE-2026-49087

Allocation of Resources Without Limits or Throttling (CWE-770) in Kibana can lead to a denial of service via Excessive A

历史摘要 · 未重新核验 · NVD

#cve #cwe-770

漏洞预警2026-07-01 发布INFO

A vulnerability in the InstallShield file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition on an affected device. This vulnera...

CVE-2026-20216

A vulnerability in the InstallShield file format parser of ClamAV could allow an unauthenticated, remote attacker to cau

历史摘要 · 未重新核验 · NVD

#cve #cwe-770

漏洞预警2026-07-01 发布MEDIUM

Multiple unbounded alloca() calls in the PulseAudio protocol server.

CVE-2026-14330

Multiple unbounded alloca() calls in the PulseAudio protocol server.

来源摘录 · NVD

#cve #cwe-770

漏洞预警2026-06-30 发布INFO

IBM watsonx.data intelligence 5.2.0, 5.2.1, 5.2.2, 5.3.0 could allow an authenticated user to cause a temporary denial using a specially crafted HTTP request due to improper all...

CVE-2025-36319

IBM watsonx.data intelligence 5.2.0, 5.2.1, 5.2.2, 5.3.0 could allow an authenticated user to cause a temporary denial u

历史摘要 · 未重新核验 · NVD

#cve #cwe-770

安全公告2026-06-30 发布INFO

Sigstore Timestamp Authority has OOM due to unbounded metric label cardinality

CVE-2026-49835

### Impact An unauthenticated remote attacker can trigger unbounded memory growth on the timestamp authority server. T

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #go #cwe-770 #severity:medium

漏洞预警2026-06-30 发布INFO

Net::BitTorrent versions through 2.0.1 for Perl allow remote memory exhaustion via an uncapped peer-wire message-length prefix. The peer-wire framing in _process_messages trust...

CVE-2026-57080

Net::BitTorrent versions through 2.0.1 for Perl allow remote memory exhaustion via an uncapped peer-wire message-length

历史摘要 · 未重新核验 · NVD

#cve #cwe-400 #cwe-770

漏洞预警2026-06-30 发布INFO

Delta Electronics DVP12SE PLCs are susceptible to a resource allocation vulnerability without limits or throttling (CWE-770) within their Modbus TCP service.

CVE-2026-12818

Delta Electronics DVP12SE PLCs are susceptible to a resource allocation vulnerability without limits or throttling (CWE-

历史摘要 · 未重新核验 · NVD

#cve #cwe-770

漏洞预警2026-06-29 发布INFO

Allocation of Resources Without Limits or Throttling vulnerability in leandrocp MDEx allows Excessive Allocation. MDEx.parse_document/2 accepts a {:json, json} source. In lib/m...

CVE-2026-53426

Allocation of Resources Without Limits or Throttling vulnerability in leandrocp MDEx allows Excessive Allocation. MDEx.

历史摘要 · 未重新核验 · NVD

#cve #cwe-770

安全公告2026-06-26 发布INFO

Nezha Monitoring: Unbounded WebSocket Streams — Resource Exhaustion DoS

CVE-2026-53522

## 1. Description The Nezha dashboard exposes two endpoints that create long-lived WebSocket streams to monitored agent

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #go #cwe-770 #severity:medium

安全公告2026-06-26 发布INFO

Hackney vulnerable to atom-table exhaustion via unrecognized URL schemes

CVE-2026-47067

### Summary [CVE-2026-47067](https://nvd.nist.gov/vuln/detail/CVE-2026-47067) is an atom table exhaustion vulnerability

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #erlang #cwe-770 #severity:high

漏洞预警2026-06-26 发布INFO

AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents. Prior to 0.6.32, there is a DoS vulnerability in Extra...

CVE-2025-32423

AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agent

历史摘要 · 未重新核验 · NVD

#cve #cwe-770

漏洞预警2026-06-26 发布INFO

AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents. Prior to 0.6.32, there is a DoS vulnerability in AITex...

CVE-2025-32394

AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agent

历史摘要 · 未重新核验 · NVD

#cve #cwe-405 #cwe-770