#cwe-770

共收录 1195 条相关情报。

← 返回所有主题
漏洞预警2026-04-30 发布INFO

CryptPad 2025.3.1 allows unbounded WebSocket frame flood. A remote, unauthenticated attacker can significantly degrade or deny service for all users of a CryptPad instance. Fixe...

CVE-2025-51846

CryptPad 2025.3.1 allows unbounded WebSocket frame flood. A remote, unauthenticated attacker can significantly degrade o

历史摘要 · 未重新核验 · NVD

安全公告2026-04-29 发布INFO

n8n Vulnerable to Unauthenticated Denial of Service via MCP Client Registration

CVE-2026-42236

## Impact The MCP OAuth client registration endpoint accepted unauthenticated requests and stored client data without ad

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-04-29 发布INFO

pgjdbc is an open source postgresql JDBC Driver. From version 42.2.0 to before version 42.7.11, pgjdbc is vulnerable to a client-side denial of service during SCRAM-SHA-256 auth...

CVE-2026-42198

pgjdbc is an open source postgresql JDBC Driver. From version 42.2.0 to before version 42.7.11, pgjdbc is vulnerable to

历史摘要 · 未重新核验 · NVD

安全公告2026-04-28 发布INFO

OpenTelemetry's Zipkin remote endpoint cache could grow without bounds and increase memory pressure

CVE-2026-41310

### Summary The Zipkin exporter remote endpoint cache accepted unbounded key growth derived from span attributes. In hi

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-04-28 发布INFO

CoreDNS' DoQ worker pool does not bound stream backlog

CVE-2026-32934

### Summary CoreDNS' DNS-over-QUIC (DoQ) server can be driven into large goroutine and memory growth by a remote client

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-04-27 发布INFO

Allocation of Resources Without Limits or Throttling vulnerability in elixir-plug plug_cowboy allows unauthenticated remote denial of service via atom table exhaustion. Plug.Co...

CVE-2026-32688

Allocation of Resources Without Limits or Throttling vulnerability in elixir-plug plug_cowboy allows unauthenticated rem

历史摘要 · 未重新核验 · NVD

漏洞预警2026-03-10 发布MEDIUM

pypdf is a free and open-source pure-python PDF library. Prior to 6.8.0, an attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires...

CVE-2026-31826

pypdf is a free and open-source pure-python PDF library. Prior to 6.8.0, an attacker who uses this vulnerability can cra

来源摘录 · NVD

漏洞预警2026-02-20 发布MEDIUM

pypdf is a free and open-source pure-python PDF library. Prior to 6.7.1, an attacker who uses this vulnerability can craft a PDF which leads to long runtimes. This requires a ma...

CVE-2026-27026

pypdf is a free and open-source pure-python PDF library. Prior to 6.7.1, an attacker who uses this vulnerability can cra

来源摘录 · NVD

漏洞预警2025-08-13 发布HIGH

pypdf is a free and open-source pure-python PDF library. Prior to version 6.0.0, an attacker can craft a PDF which leads to the RAM being exhausted. This requires just reading t...

CVE-2025-55197

pypdf is a free and open-source pure-python PDF library. Prior to version 6.0.0, an attacker can craft a PDF which leads

来源摘录 · NVD

漏洞预警2025-05-21 发布HIGH

Allocation of Resources Without Limits or Throttling vulnerability in Drupal Events Log Track allows Excessive Allocation.This issue affects Events Log Track: from 0.0.0 before ...

CVE-2025-4416

Allocation of Resources Without Limits or Throttling vulnerability in Drupal Events Log Track allows Excessive Allocatio

来源摘录 · NVD

漏洞预警2025-04-03 发布HIGH

A flaw was found in libsoup. The SoupWebsocketConnection may accept a large WebSocket message, which may cause libsoup to allocate memory and lead to a denial of service (DoS).

CVE-2025-32049

A flaw was found in libsoup. The SoupWebsocketConnection may accept a large WebSocket message, which may cause libsoup t

来源摘录 · NVD

漏洞预警2024-11-19 发布MEDIUM

In the Linux kernel, the following vulnerability has been resolved: ksmbd: check outstanding simultaneous SMB operations If Client send simultaneous SMB operations to ksmbd, I...

CVE-2024-50285

In the Linux kernel, the following vulnerability has been resolved: ksmbd: check outstanding simultaneous SMB operation

来源摘录 · NVD

漏洞预警2024-08-07 发布MEDIUM

In the Linux kernel, the following vulnerability has been resolved: mm/shmem: disable PMD-sized page cache if needed For shmem files, it's possible that PMD-sized page cache c...

CVE-2024-42241

In the Linux kernel, the following vulnerability has been resolved: mm/shmem: disable PMD-sized page cache if needed F

来源摘录 · NVD

漏洞预警2023-10-14 发布MEDIUM

An issue was discovered in drivers/usb/storage/ene_ub6250.c for the ENE UB6250 reader driver in the Linux kernel before 6.2.5. An object could potentially extend beyond the end ...

CVE-2023-45862

An issue was discovered in drivers/usb/storage/ene_ub6250.c for the ENE UB6250 reader driver in the Linux kernel before

来源摘录 · NVD

漏洞预警2020-07-15 发布HIGH

Prototype pollution attack when using _.zipObjectDeep in lodash before 4.17.20.

CVE-2020-8203

Prototype pollution attack when using _.zipObjectDeep in lodash before 4.17.20.

来源摘录 · NVD