#cwe-770

共收录 1180 条相关情报。

← 返回所有主题
漏洞预警2026-10-22 发布INFO

Allocation of Resources Without Limits or Throttling vulnerability in esaml in dropbox esaml allows an unauthenticated attacker to exhaust the Erlang VM atom table and crash the...

CVE-2026-86696

Allocation of Resources Without Limits or Throttling vulnerability in esaml in dropbox esaml allows an unauthenticated a

来源摘录 · NVD

漏洞预警2026-10-22 发布INFO

Allocation of Resources Without Limits or Throttling vulnerability in esaml_binding in dropbox esaml allows an unauthenticated attacker to exhaust the Erlang VM atom table and c...

CVE-2026-105270

Allocation of Resources Without Limits or Throttling vulnerability in esaml_binding in dropbox esaml allows an unauthent

来源摘录 · NVD

安全公告2026-10-22 发布INFO

Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by an uncontrolled resource...

CVE-2026-114731

Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by an uncontrolled resource consumption vulnerability

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-22 发布INFO

Allocation of Resources Without Limits or Throttling vulnerability in Drupal Combined image style...

CVE-2026-96377

Allocation of Resources Without Limits or Throttling vulnerability in Drupal Combined image style allows Excessive Alloc

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-22 发布INFO

Allocation of Resources Without Limits or Throttling vulnerability in Drupal Webform allows...

CVE-2026-96365

Allocation of Resources Without Limits or Throttling vulnerability in Drupal Webform allows Excessive Allocation. This i

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-22 发布INFO

Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 allows the ImageMagick resource limits to...

CVE-2026-114723

Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 allows the ImageMagick resource limits to be bypassed during thum

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-22 发布INFO

Allocation of Resources Without Limits or Throttling vulnerability in Drupal Combined image style allows Excessive Allocation. This issue affects Combined image style versions: ...

CVE-2026-96377

Allocation of Resources Without Limits or Throttling vulnerability in Drupal Combined image style allows Excessive Alloc

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-22 发布INFO

Allocation of Resources Without Limits or Throttling vulnerability in Drupal Webform allows Excessive Allocation. This issue affects Webform versions: from 0.0.0 to 6.2.12, from...

CVE-2026-96365

Allocation of Resources Without Limits or Throttling vulnerability in Drupal Webform allows Excessive Allocation. This i

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-22 发布INFO

Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 allows the ImageMagick resource limits to be bypassed during thumbnail generation. When rcube_image falls back to GD, the ...

CVE-2026-114723

Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 allows the ImageMagick resource limits to be bypassed during thum

历史摘要 · 未重新核验 · NVD

安全公告2026-10-22 发布INFO

CVE-2026-114723

CVE-2026-114723

Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 allows the ImageMagick resource limits to be bypassed during thum

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-10-22 发布INFO

Webform - Less critical - Denial of service - SA-CONTRIB-2026-170

CVE-2026-96365

Allocation of Resources Without Limits or Throttling vulnerability in Drupal Webform allows Excessive Allocation. This i

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-10-22 发布INFO

Combined image style - Moderately critical - Improper access control - SA-CONTRIB-2026-188

CVE-2026-96377

Allocation of Resources Without Limits or Throttling vulnerability in Drupal Combined image style allows Excessive Alloc

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-10-21 发布MEDIUM

In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, a user who does not hold the "admin" or "power" Splunk roles could make the Splunk Enterprise instance u...

CVE-2026-76289

In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, a user who does not hold the "admin" or "power"

来源摘录 · NVD

漏洞预警2026-10-21 发布MEDIUM

Pillow is a Python imaging library. From 9.1.0 until 13.0.0, BmpRleDecoder.decode() in src/PIL/BmpImagePlugin.py permits crafted RLE BMP delta escapes and absolute-mode runs to ...

CVE-2026-96638

Pillow is a Python imaging library. From 9.1.0 until 13.0.0, BmpRleDecoder.decode() in src/PIL/BmpImagePlugin.py permits

来源摘录 · NVD

漏洞预警2026-10-21 发布HIGH

toml-node is a TOML parser for Node.js and the browser. Prior to 5.0.1, toml.parse() passes unbounded hexadecimal, octal, binary, and decimal digit sequences from lib/parser.js ...

CVE-2026-114144

toml-node is a TOML parser for Node.js and the browser. Prior to 5.0.1, toml.parse() passes unbounded hexadecimal, octal

来源摘录 · NVD

漏洞预警2026-10-21 发布HIGH

Algorithm::UrataniTakeda versions from 0.1.5 before 0.1.7 for Perl allow memory exhaustion via a never-cleared failure shift cache in search. The failure shift is cached for ea...

CVE-2026-113811

Algorithm::UrataniTakeda versions from 0.1.5 before 0.1.7 for Perl allow memory exhaustion via a never-cleared failure s

来源摘录 · NVD

安全公告2026-10-21 发布INFO

Algorithm::UrataniTakeda versions from 0.1.5 before 0.1.7 for Perl allow memory exhaustion via a never-cleared failure shift cache in search

CVE-2026-113811

Algorithm::UrataniTakeda versions from 0.1.5 before 0.1.7 for Perl allow memory exhaustion via a never-cleared failure s

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-10-21 发布INFO

Pillow: BMP RLE decoder memory-amplification DoS via unbounded delta escape / absolute mode

CVE-2026-96638

Pillow is a Python imaging library. From 9.1.0 until 13.0.0, BmpRleDecoder.decode() in src/PIL/BmpImagePlugin.py permits

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-10-21 发布INFO

toml-node: Uncontrolled resource consumption (CPU DoS) via unbounded-length integer literals in toml.parse()

CVE-2026-114144

toml-node is a TOML parser for Node.js and the browser. Prior to 5.0.1, toml.parse() passes unbounded hexadecimal, octal

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-10-21 发布HIGH

Django REST framework is a toolkit for building Web APIs. From 3.6.4 until 3.18.2, JSONParser.parse in rest_framework/parsers.py uses the client-supplied Content-Type charset va...

CVE-2026-114136

Django REST framework is a toolkit for building Web APIs. From 3.6.4 until 3.18.2, JSONParser.parse in rest_framework/pa

来源摘录 · NVD