#cwe-805

共收录 17 条相关情报。

← 返回所有主题
安全公告2026-10-21 发布INFO

Vyper before 0.2.9 deploys forwarder proxies through the built-in create_forwarder_to function...

CVE-2021-48019

Vyper before 0.2.9 deploys forwarder proxies through the built-in create_forwarder_to function that report a fixed 4096-

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-21 发布INFO

Vyper before 0.2.9 deploys forwarder proxies through the built-in create_forwarder_to function that report a fixed 4096-byte RETURNDATASIZE rather than the actual return data si...

CVE-2021-48019

Vyper before 0.2.9 deploys forwarder proxies through the built-in create_forwarder_to function that report a fixed 4096-

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

AMI APTIOV contains vulnerabilities in BIOS where users may cause “Buffer Access with Incorrect Length Value” by local access. Successful exploitation of this vulnerability coul...

CVE-2025-58774

AMI APTIOV contains vulnerabilities in BIOS where users may cause “Buffer Access with Incorrect Length Value” by local a

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-16 发布INFO

A vulnerability in SSL/TLS certificate parsing in the Snort 2 Detection Engine of Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote atta...

CVE-2026-20290

A vulnerability in SSL/TLS certificate parsing in the Snort 2 Detection Engine of Cisco Secure Firewall Threat Defense (

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-03 发布INFO

A flaw was found in GIMP. A remote attacker could exploit this by tricking a user into opening a specially crafted PAA (Paint Shop Pro Array) image file. This vulnerability, a h...

CVE-2026-6695

A flaw was found in GIMP. A remote attacker could exploit this by tricking a user into opening a specially crafted PAA (

历史摘要 · 未重新核验 · NVD

安全公告2026-07-07 发布INFO

An issue was discovered in Django 6.0 before 6.0.7 and 5.2 before 5.2.16. `django.contrib.gis...

CVE-2026-53877

An issue was discovered in Django 6.0 before 6.0.7 and 5.2 before 5.2.16. `django.contrib.gis.gdal.GDALRaster` over-read

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-07-07 发布INFO

An issue was discovered in Django 6.0 before 6.0.7 and 5.2 before 5.2.16. `django.contrib.gis.gdal.GDALRaster` over-reads its in-memory buffer when constructed from a bytes obje...

CVE-2026-53877

An issue was discovered in Django 6.0 before 6.0.7 and 5.2 before 5.2.16. `django.contrib.gis.gdal.GDALRaster` over-read

历史摘要 · 未重新核验 · NVD

安全公告2026-06-22 发布INFO

The fix for CVE-2026-2443 was regressed by a subsequent rework commit that replaced specific...

CVE-2026-12549

The fix for CVE-2026-2443 was regressed by a subsequent rework commit that replaced specific overflow checks with a gene

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-06-22 发布INFO

The fix for CVE-2026-2443 was regressed by a subsequent rework commit that replaced specific overflow checks with a general signed comparison. When a client sends a Range reques...

CVE-2026-12549

The fix for CVE-2026-2443 was regressed by a subsequent rework commit that replaced specific overflow checks with a gene

历史摘要 · 未重新核验 · NVD

安全公告2026-06-16 发布INFO

A flaw was found in the GNOME localsearch (previously known as tracker-miners) MP3 Extractor ...

CVE-2026-1767

A flaw was found in the GNOME localsearch (previously known as tracker-miners) MP3 Extractor `tracker-extract-mp3` compo

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-16 发布INFO

A flaw was found in GNOME localsearch (previously known as tracker-miners) MP3 Extractor,...

CVE-2026-1766

A flaw was found in GNOME localsearch (previously known as tracker-miners) MP3 Extractor, specifically within the tracke

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-06-16 发布INFO

A flaw was found in the GNOME localsearch (previously known as tracker-miners) MP3 Extractor `tracker-extract-mp3` component. A remote attacker could exploit this heap buffer ov...

CVE-2026-1767

A flaw was found in the GNOME localsearch (previously known as tracker-miners) MP3 Extractor `tracker-extract-mp3` compo

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-16 发布INFO

A flaw was found in GNOME localsearch (previously known as tracker-miners) MP3 Extractor, specifically within the tracker-extract-mp3 component. This heap buffer overflow vulner...

CVE-2026-1766

A flaw was found in GNOME localsearch (previously known as tracker-miners) MP3 Extractor, specifically within the tracke

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-15 发布INFO

Socket versions before 2.041 for Perl have an out-of-bounds heap read. In Socket.xs, pack_ip_mreq_source() checks the length of its source argument before the argument is read,...

CVE-2026-12087

Socket versions before 2.041 for Perl have an out-of-bounds heap read. In Socket.xs, pack_ip_mreq_source() checks the l

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-05 发布INFO

A flaw was found in the X.Org X server. This vulnerability, an out-of-bounds read, affects the XKB (X Keyboard Extension) modifier map handling. An attacker with access to the X...

CVE-2026-34002

A flaw was found in the X.Org X server. This vulnerability, an out-of-bounds read, affects the XKB (X Keyboard Extension

历史摘要 · 未重新核验 · NVD

安全公告2026-05-01 发布INFO

An issue in Eprosima Micro-XREC-DDS Agent v.3.0.1 allows a remote attacker to cause a denial of...

CVE-2025-63547

An issue in Eprosima Micro-XREC-DDS Agent v.3.0.1 allows a remote attacker to cause a denial of service via a crafted pa

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-01 发布INFO

An issue in Eprosima Micro-XREC-DDS Agent v.3.0.1 allows a remote attacker to cause a denial of service via a crafted packet to the MTU length field

CVE-2025-63547

An issue in Eprosima Micro-XREC-DDS Agent v.3.0.1 allows a remote attacker to cause a denial of service via a crafted pa

历史摘要 · 未重新核验 · NVD