Cyber Security Daily Radar

#cwe-777

共收录 4 条相关情报。

← 返回所有主题
漏洞预警2026-10-31 发布INFO

WebDyne versions from 2.031 before 3.022 for Perl execute files with .psp anywhere in the name as Perl pages. WebDyne decides whether to run a requested file as a page by match...

CVE-2026-78191

WebDyne versions from 2.031 before 3.022 for Perl execute files with .psp anywhere in the name as Perl pages. WebDyne d

来源摘录 · NVD / GitHub Advisory

#advisory#cve#cwe-777
漏洞预警2026-07-29 发布INFO

Regular Expression without Anchors vulnerability in Apache Traffic Server. This issue affects Apache Traffic Server: from 10.0.X through 10.1.3, from 9.0.X through 9.2.14. Use...

CVE-2026-22068

Regular Expression without Anchors vulnerability in Apache Traffic Server. This issue affects Apache Traffic Server: fr

历史摘要 · 未重新核验 · NVD

#cve#cwe-777
漏洞预警2026-06-18 发布INFO

Webmin allows unauthenticated attackers to read the contents of any file ending in .conf within module directories, due to a bypassable regex pattern.

CVE-2026-56021

Webmin allows unauthenticated attackers to read the contents of any file ending in .conf within module directories, due

历史摘要 · 未重新核验 · NVD

#cve#cwe-185#cwe-777
漏洞预警2026-05-05 发布HIGH

Jupyter Server is the backend for Jupyter web applications. In versions 2.17.0 and earlier, the Origin header validation uses Python's re.match() to check incoming origins again...

CVE-2026-40110

Jupyter Server 是 Jupyter 网络应用的后端组件。在 2.17.0 及之前版本中，其 Origin 头部验证逻辑存在安全缺陷：允许通过指定 `allow_origin_pat` 配置项来设置允许的跨域模式，但验证时使用了

历史摘要 · 未重新核验 · NVD

#cve#cwe-777