#cwe-807

共收录 63 条相关情报。

← 返回所有主题

漏洞预警2026-05-08 发布INFO

A vulnerability in Remote Spark SparkView before build 1122 allows an attacker to bypasses the local connection check and achieve arbitrary code execution as root on the server ...

CVE-2026-6213

A vulnerability in Remote Spark SparkView before build 1122 allows an attacker to bypasses the local connection check an

历史摘要 · 未重新核验 · NVD

#cve #cwe-290 #cwe-807

安全公告2026-05-07 发布INFO

Bandit trusts client-supplied URI scheme on plaintext connections

CVE-2026-39807

### Summary Bandit reflects the client-supplied URI scheme into `conn.scheme` without verifying the actual transport. Ov

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #erlang #cwe-807 #severity:medium

漏洞预警2026-05-01 发布HIGH

Reliance on Untrusted Inputs in a Security Decision vulnerability in mtrudel bandit allows unauthenticated transport-state spoofing on plaintext HTTP connections. 'Elixir.Bandi...

CVE-2026-39807

Bandit是一个Elixir HTTP服务器。在1.0.0至1.11.0之前版本中，存在一个安全决策依赖于不可信输入的漏洞。具体而言，函数`Elixir.Bandit.Pipeline.determine_scheme/2`在处理HTTP

历史摘要 · 未重新核验 · NVD