#cwe-770

共收录 1181 条相关情报。

← 返回所有主题
漏洞预警2026-06-01 发布INFO

A flaw was found in OpenShift Container Platform. Completed pods with restartPolicy: Never do not count toward ResourceQuota pod limits, and Kubernetes events are not quota-scop...

CVE-2026-10533

A flaw was found in OpenShift Container Platform. Completed pods with restartPolicy: Never do not count toward ResourceQ

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-01 发布INFO

Apache Fluss versions prior to 0.9.1 configure the Netty LengthFieldBasedFrameDecoder with Integer.MAX_VALUE as the maximum frame length, allowing unauthenticated remote attacke...

CVE-2026-49361

Apache Fluss versions prior to 0.9.1 configure the Netty LengthFieldBasedFrameDecoder with Integer.MAX_VALUE as the maxi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-01 发布INFO

An uncontrolled allocation of resources without limits or throttling in the e-mail handling in OTRS allows excessive allocation which may lead to the abortion of the webserver.T...

CVE-2026-48187

An uncontrolled allocation of resources without limits or throttling in the e-mail handling in OTRS allows excessive all

历史摘要 · 未重新核验 · NVD

安全公告2026-05-29 发布INFO

zeroconf has unbounded DNS record cache that allows LAN-local memory exhaustion via multicast flood

CVE-2026-47184

### Impact `DNSCache._async_add` inserted every response record into `cache`, `_expirations`, `_expire_heap`, and `serv

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-29 发布MEDIUM

cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to 0.43.4, negative chunk-size in chunked Transfer-Encoding causes unbounded memory alloc...

CVE-2026-45352

CVE-2026-45352 影响 cpp-httplib(一个 C++11 单文件头跨平台 HTTP/HTTPS 库)0.43.4 之前的版本。漏洞存在于分块传输编码的解析过程中:函数 ChunkedDecoder::read_paylo

历史摘要 · 未重新核验 · NVD

安全公告2026-05-29 发布INFO

russh: Post-decompression SSH packet size was not bounded, allowing remote oversized compressed packets

CVE-2026-46702

### Summary When SSH compression is enabled, `russh` accepted compressed packets whose on-wire size passed the normal t

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-29 发布INFO

Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.17, a remote, unauthenticated denial-of-service vulnerability in Batch.Decompress (data/batch/...

CVE-2026-44697

Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.17, a remote, unauthenticated denial-

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-29 发布INFO

Uncontrolled resource consumption in the Wireless Control Module (WCM) of the Indian Motorcycle Scout Bobber + Tech 2025 model year allows an adjacent-network attacker with writ...

CVE-2026-49324

Uncontrolled resource consumption in the Wireless Control Module (WCM) of the Indian Motorcycle Scout Bobber + Tech 2025

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-28 发布INFO

AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents. Prior to 0.6.59, POST /api/blocks/{block_id}/execute e...

CVE-2026-45023

AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agent

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-28 发布INFO

opentelemetry-java is the Java implementation of the OpenTelemetry API for recording telemetry, and SDK for managing telemetry recorded by the API. Prior to 1.62.0, a vulnerabil...

CVE-2026-45292

opentelemetry-java is the Java implementation of the OpenTelemetry API for recording telemetry, and SDK for managing tel

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-27 发布INFO

Volcano is a Kubernetes-native batch scheduling system. Prior to v1.14.2, v1.13.3, and v1.12.4, the Volcano webhook server does not enforce a size limit on incoming HTTP request...

CVE-2026-44247

Volcano is a Kubernetes-native batch scheduling system. Prior to v1.14.2, v1.13.3, and v1.12.4, the Volcano webhook serv

历史摘要 · 未重新核验 · NVD

安全公告2026-05-27 发布INFO

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.1 before 18.10.7,...

CVE-2026-1402

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.1 before 18.10.7, 18.11 before 18.11.4, an

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-27 发布INFO

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.1 before 18.10.7, 18.11 before 18.11.4, and 19.0 before 19.0.1 that under certain conditions could ...

CVE-2026-1402

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.1 before 18.10.7, 18.11 before 18.11.4, an

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-27 发布INFO

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to a denial of service when a specially crafted query is run with range partitioned tables.

CVE-2026-6053

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to a denial of service when a specially crafted q

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-27 发布INFO

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to a denial of service with a specially crafted query when autonomous transactions are enabled.

CVE-2026-1718

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to a denial of service with a specially crafted q

历史摘要 · 未重新核验 · NVD

安全公告2026-05-26 发布INFO

Pterodactyl has a database resource limit bypass via race condition in Client API

CVE-2026-35202

### Summary The Pterodactyl Client API has a logic flaw that lets users bypass their assigned limits for database alloc

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-26 发布INFO

An Allocation of Resources Without Limits or Throttling vulnerability in the OPC-UA Server used in PPT30 Operating System versions before 1.8.0 may be used by an unauthenticate...

CVE-2025-11482

An Allocation of Resources Without Limits or Throttling vulnerability in the OPC-UA Server used in PPT30 Operating Syst

历史摘要 · 未重新核验 · NVD

安全公告2026-05-21 发布INFO

twig/intl-extra: Unbounded formatter memoisation in keyed on template-controlled arguments

CVE-2026-46629

### Description `IntlExtension` memoises every `\IntlDateFormatter` and `\NumberFormatter` it creates in instance-level

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-21 发布INFO

Russh: Unchecked CryptoVec allocation and growth handling is reachable

CVE-2026-46673

### Title Unchecked `CryptoVec` allocation and growth handling was reachable from local agent inputs in current `russh`

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-21 发布INFO

NocoDB: Attachment Size Limit Bypass via Upload-by-URL

CVE-2026-46553

### Summary The upload-by-URL path did not enforce `NC_ATTACHMENT_FIELD_SIZE` against either the remote file's advertise

历史摘要 · 未重新核验 · GitHub Advisory