共收录 243 条相关情报。
← 返回所有主题CVE-2026-108683
A security vulnerability has been detected in zhayujie CowAgent up to 2.1.9. The impacted element is an unknown function
CVE-2026-108683
A security vulnerability has been detected in zhayujie CowAgent up to 2.1.9. The impacted element is an unknown function
CVE-2026-97853
Memory Allocation with Excessive Size Value vulnerability in ericmj decimal allows Denial of Service. Decimal.round/3 b
CVE-2026-108106
Xerial snappy-java before 1.1.10.9 contains an unbounded memory allocation vulnerability that allows attackers to exhaus
CVE-2026-108106
Xerial snappy-java before 1.1.10.9 contains an unbounded memory allocation vulnerability that allows attackers to exhaus
CVE-2026-107390
music-metadata is a metadata parser for audio and video media files. Prior to 11.16.0, the MP4 parser accepts an attacke
CVE-2026-107389
music-metadata is a metadata parser for audio and video media files. Prior to 11.16.0, the Matroska and WebM EBML parser
CVE-2026-107387
## Summary `music-metadata` 11.15.0 is vulnerable to uncontrolled memory allocation in the APEv2 parser. The parser re
CVE-2026-107388
### Summary The ID3v2 parser in music-metadata trusts the tag size field without validation and allocates the full requ
CVE-2026-107389
## Summary The Matroska/WebM EBML parser decodes attacker-controlled variable-length integer (VINT) element lengths wit
CVE-2026-105749
### Summary The HTML, JATS, ODS (OpenDocument spreadsheet) and BoxNote backends accept table `rowspan` / `colspan` valu
CVE-2026-106453
yawkat LZ4 Java provides LZ4 compression for Java. Prior to 1.11.2, LZ4DecompressorWithLength uses getDecompressedLength
CVE-2026-106452
yawkat LZ4 Java provides LZ4 compression for Java. Prior to 1.11.2, net.jpountz.lz4.LZ4BlockInputStream refill() validat
CVE-2026-103005
Memory Allocation with Excessive Size Value (CWE-789) in Elasticsearch can lead to denial of service via Excessive Alloc
CVE-2026-106114
ImageSharp is a 2D graphics library. From 1.0.0-beta0001 until 4.1.2, ICC CLUT parsing calculates allocation sizes from
CVE-2026-77050
An issue was discovered in Django 6.1 before 6.1.2, 6.0 before 6.0.9, and 5.2 before 5.2.18. `django.utils.translation.g
CVE-2026-105749
Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecos
CVE-2026-78861
An issue in Mercusys AC12 V2 allows a local attacker to execute arbitrary code via a hardcoded 512-bit RSA Private Key
CVE-2026-93323
The Dockerfile frontend loaded the Dockerfile and .dockerignore files of a build context into memory without a size limi
CVE-2026-93323
The Dockerfile frontend loaded the Dockerfile and .dockerignore files of a build context into memory without a size limi