#cwe-770

共收录 1180 条相关情报。

漏洞预警2026-10-14 发布MEDIUM

Pipecat is an open-source Python framework for building real-time voice and multimodal conversational agents. From 0.0.98 until 1.6.0, the pipecat-ai package's built-in developm...

CVE-2026-102682

Pipecat is an open-source Python framework for building real-time voice and multimodal conversational agents. From 0.0.9

来源摘录 · NVD

#cve #cwe-345 #cwe-770 #cwe-862

漏洞预警2026-10-14 发布INFO

RabbitMQ is a messaging and streaming broker. From 4.0.0 until 4.0.24, 4.1.15, 4.2.10, and 4.3.4, deps/amqp10_common/src/amqp10_binary_parser.erl materializes each element of AM...

CVE-2026-67414

RabbitMQ is a messaging and streaming broker. From 4.0.0 until 4.0.24, 4.1.15, 4.2.10, and 4.3.4, deps/amqp10_common/src

来源摘录 · NVD

#cve #cwe-400 #cwe-770

漏洞预警2026-10-13 发布MEDIUM

Allocation of resources without limits or throttling in SQL Server allows an authorized attacker to deny service over a network.

CVE-2026-88084

Allocation of resources without limits or throttling in SQL Server allows an authorized attacker to deny service over a

来源摘录 · NVD

#cve #cwe-770

安全公告2026-10-13 发布INFO

Microsoft Security Advisory CVE-2026-96959 - .NET and Visual Studio Denial of Service Vulnerability

CVE-2026-96959

## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Syst

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #nuget #cwe-770 #severity:high

安全公告2026-10-13 发布INFO

Microsoft Security Advisory CVE-2026-96236 - ASP.NET Core Denial of Service Vulnerability

CVE-2026-96236

## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Micr

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #nuget #cwe-770 #severity:high

漏洞预警2026-10-13 发布HIGH

Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.

CVE-2026-85321

Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthori

来源摘录 · NVD

#cve #cwe-770

漏洞预警2026-10-13 发布HIGH

Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.

CVE-2026-85319

Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthori

来源摘录 · NVD

#cve #cwe-770

漏洞预警2026-10-13 发布HIGH

Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.

CVE-2026-83645

Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthori

来源摘录 · NVD

#cve #cwe-770

漏洞预警2026-10-13 发布HIGH

Allocation of resources without limits or throttling in Windows SMB Server allows an unauthorized attacker to deny service over a network.

CVE-2026-70133

Allocation of resources without limits or throttling in Windows SMB Server allows an unauthorized attacker to deny servi

来源摘录 · NVD

#cve #cwe-770

漏洞预警2026-10-13 发布MEDIUM

Allocation of resources without limits or throttling in Windows Netlogon allows an authorized attacker to deny service over a network.

CVE-2026-70072

Allocation of resources without limits or throttling in Windows Netlogon allows an authorized attacker to deny service o

来源摘录 · NVD

#cve #cwe-770

漏洞预警2026-10-13 发布INFO

Misskey is an open source, federated social media platform. From 12.112.1 until 2026.7.0, the unauthenticated fetch-rss API lacks rate limiting and response-size restrictions an...

CVE-2026-104817

Misskey is an open source, federated social media platform. From 12.112.1 until 2026.7.0, the unauthenticated fetch-rss

历史摘要 · 未重新核验 · NVD

#cve #cwe-405 #cwe-770 #cwe-918

漏洞预警2026-10-13 发布INFO

A Git server that Grafana's Git Sync (provisioning) is configured to use can exhaust Grafana's memory by returning oversized or highly compressed responses (uncontrolled resourc...

CVE-2026-95502

A Git server that Grafana's Git Sync (provisioning) is configured to use can exhaust Grafana's memory by returning overs

历史摘要 · 未重新核验 · NVD

#cve #cwe-409 #cwe-770

漏洞预警2026-10-13 发布INFO

The Prometheus rule conversion API endpoints in Grafana do not limit request body size, allowing authenticated users to trigger unbounded memory allocations that can crash the s...

CVE-2026-33374

The Prometheus rule conversion API endpoints in Grafana do not limit request body size, allowing authenticated users to

历史摘要 · 未重新核验 · NVD

#cve #cwe-400 #cwe-770 #cwe-789

漏洞预警2026-10-13 发布INFO

A denial-of-service security issue exists in the affected product and version. The security issue stems from improper handling of network storm traffic, which can interrupt comm...

CVE-2026-12656

A denial-of-service security issue exists in the affected product and version. The security issue stems from improper ha

历史摘要 · 未重新核验 · NVD

#cve #cwe-770

漏洞预警2026-10-13 发布INFO

FreeRDP from 3.20.1 before 3.32.0 contains an uncontrolled resource allocation vulnerability that allows malicious RDP servers to exhaust client memory via oversized drive redir...

CVE-2026-109947

FreeRDP from 3.20.1 before 3.32.0 contains an uncontrolled resource allocation vulnerability that allows malicious RDP s

历史摘要 · 未重新核验 · NVD

#cve #cwe-770

安全公告2026-10-13 发布INFO

FreeRDP 3.20.1 before 3.32.0 Unbounded Allocation via drive_process_irp_read

CVE-2026-109947

FreeRDP from 3.20.1 before 3.32.0 contains an uncontrolled resource allocation vulnerability that allows malicious RDP s

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-770

漏洞预警2026-10-12 发布INFO

OWASP Coraza WAF is a golang modsecurity compatible web application firewall library. From 3.0.0 until 3.8.1, Coraza silently drops arguments after SecArgumentsLimit in internal...

CVE-2026-41510

OWASP Coraza WAF is a golang modsecurity compatible web application firewall library. From 3.0.0 until 3.8.1, Coraza sil

历史摘要 · 未重新核验 · NVD

#cve #cwe-693 #cwe-770

漏洞预警2026-10-12 发布INFO

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to a denial of service when inserting into a table with XML columns under specific conditions.

CVE-2026-105466

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to a denial of service when inserting into a tabl

历史摘要 · 未重新核验 · NVD

#cve #cwe-770

漏洞预警2026-10-12 发布INFO

Gitoxide gix-pack before 0.75.0 contains an uncontrolled memory allocation vulnerability that allows remote attackers to abort the process by supplying a huge pack-header object...

CVE-2026-109351

Gitoxide gix-pack before 0.75.0 contains an uncontrolled memory allocation vulnerability that allows remote attackers to

历史摘要 · 未重新核验 · NVD

#cve #cwe-770

漏洞预警2026-10-12 发布INFO

SurrealDB 3.1.0 before 3.3.0 lets Surrealism modules exhaust server memory because module stdout/stderr lines are buffered unbounded in host memory, bypassing the configured mod...

CVE-2026-109339

SurrealDB 3.1.0 before 3.3.0 lets Surrealism modules exhaust server memory because module stdout/stderr lines are buffer

历史摘要 · 未重新核验 · NVD

#cve #cwe-770