共收录 281 条相关情报。
← 返回所有主题CVE-2026-82605
A vulnerability has been found in BareBones BBEdit up to 15.5.5. The affected element is an unknown function of the comp
CVE-2026-82579
Loop with Unreachable Exit Condition (Infinite Loop) vulnerability in ash-project ash_ai allows an attacker who can infl
CVE-2026-82579
Loop with Unreachable Exit Condition (Infinite Loop) vulnerability in ash-project ash_ai allows an attacker who can infl
CVE-2026-47863
In Reactor Core, applications that use the Flux.bufferTimeout operator with fairBackpressure enabled are vulnerable to a
CVE-2026-55588
ORAS (OCI Registry As Storage) is a CLI and library for managing artifacts in OCI registries. In ORAS CLI versions up to
CVE-2026-55373
OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture in
CVE-2026-54623
### Summary The `move_plugin` admin endpoint does not prevent a plugin from being reparented under itself or one of it
CVE-2026-78250
A vulnerability was identified in bytebot-ai bytebot 0.0.1. The affected element is an unknown function of the component
CVE-2026-45271
Picotls is a TLS protocol library that allows users select different crypto backends based on their use case. Picotls im
CVE-2026-63202
# BinaryHttpParser: Unauthenticated CPU-exhaustion DoS via infinite loop in field-section decoding - **ID:** BHTTP-LOOP
CVE-2026-63124
## Summary `io.netty.incubator:netty-incubator-codec-bhttp` can enter a non-terminating parse loop when a known-length
CVE-2026-54623
django CMS is an easy-to-use and developer-friendly enterprise content management system powered by Django. Prior to 5.0
CVE-2026-61556
LiquidJS is a Shopify / GitHub Pages compatible template engine in pure JavaScript. From 10.26.0 until 10.27.1, the stri
CVE-2026-13002
A flow has been identified into dnssec.c library, causing an infinite loop to dnsmasq service. An attacker who controls
CVE-2026-17229
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to an infinite loop.
CVE-2026-17004
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to an infinite loop.
CVE-2026-12236
The Bluetooth host GATT client function parse_read_std_char_desc() in subsys/bluetooth/host/gatt.c parses an ATT Read By
CVE-2026-70462
rsync 3.1.0 before 3.5.0 contains a signed integer overflow vulnerability in the I/O timeout implementation that allows
CVE-2026-19484
@fastify/busboy is a multipart form-data parser. In versions 3.1.0 through 3.2.0, a remote unauthenticated attacker can
CVE-2026-18726
A flaw was found in open-iscsi. This vulnerability allows a remote attacker on the same local network segment to cause a