#cwe-835

共收录 281 条相关情报。

漏洞预警2026-08-12 发布INFO

A flaw was found in open-iscsi. This vulnerability allows a remote attacker on the same local network segment to cause a Denial of Service (DoS) in the iscsiuio daemon. By sendi...

CVE-2026-18726

A flaw was found in open-iscsi. This vulnerability allows a remote attacker on the same local network segment to cause a

历史摘要 · 未重新核验 · NVD

#cve #cwe-835

安全公告2026-08-12 发布INFO

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0...

CVE-2026-11932

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 and IBM Verify Ident

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-835 #severity:medium

漏洞预警2026-08-12 发布INFO

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 and IBM Verify Identity Access Container 11.0 through 11.0.3 is vulnerable t...

CVE-2026-11932

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 and IBM Verify Ident

历史摘要 · 未重新核验 · NVD

#cve #cwe-835

漏洞预警2026-08-12 发布INFO

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to improper handling of zero-length TCP options.

CVE-2026-16931

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to improper handling of zero

历史摘要 · 未重新核验 · NVD

#cve #cwe-835

漏洞预警2026-08-11 发布INFO

Nmap versions up to and including 7.99 contains a denial of service vulnerability that allows remote attackers to crash the application by sending a crafted packet containing a ...

CVE-2026-72712

Nmap versions up to and including 7.99 contains a denial of service vulnerability that allows remote attackers to crash

历史摘要 · 未重新核验 · NVD

#cve #cwe-835

安全公告2026-08-08 发布INFO

In Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 2.1.3, the native entropy source used on...

CVE-2026-8798

In Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 2.1.3, the native entropy source used on Intel platforms retried

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-835 #severity:high

漏洞预警2026-08-08 发布MEDIUM

In Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 2.1.3, the native entropy source used on Intel platforms retried the CPU entropy instructions without any bound. RDSEED an...

CVE-2026-8798

CVE-2026-8798 是 Bouncy Castle for Java FIPS（BC-FJA）在 bc-fips 2.1.3 之前版本中存在的一个拒绝服务（DoS）漏洞。该漏洞影响 Intel 平台上的原生熵源实现。具体而言，JNI

历史摘要 · 未重新核验 · NVD

#cve #cwe-835

漏洞预警2026-08-06 发布INFO

Mermaid is a JavaScript tool that uses Markdown-inspired text to create and modify diagrams and charts. From version 10.6.0 until 10.9.8 and 11.16.1, Mermaid XY Charts are vulne...

CVE-2026-71436

Mermaid is a JavaScript tool that uses Markdown-inspired text to create and modify diagrams and charts. From version 10.

历史摘要 · 未重新核验 · NVD

#cve #cwe-835 #cwe-1325

安全公告2026-07-31 发布INFO

re2: Global `String.prototype.match` with an empty-matchable pattern never advances → infinite loop with unbounded native memory growth (DoS)

CVE-2026-68499

## Summary `String.prototype.match` with a **global** `RE2` collects all matches in a native loop that advances the cur

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #npm #cwe-835 #severity:medium

漏洞预警2026-07-31 发布INFO

Zephyr's IPv6 forwarding path re-sent routed unicast packets without ever decrementing the IPv6 hop limit. Both routing branches of ipv6_route_packet() (subsys/net/ip) were affe...

CVE-2026-10686

Zephyr's IPv6 forwarding path re-sent routed unicast packets without ever decrementing the IPv6 hop limit. Both routing

历史摘要 · 未重新核验 · NVD

#cve #cwe-835

安全公告2026-07-31 发布INFO

Missing hop-limit decrement on IPv6 forwarding path allows unbounded packet looping (DoS) in Zephyr routers

CVE-2026-10686

Zephyr's IPv6 forwarding path re-sent routed unicast packets without ever decrementing the IPv6 hop limit. Both routing

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-835

漏洞预警2026-07-30 发布INFO

re2 provides Node.js bindings for Google's RE2 regular expression engine. Prior to 1.25.2, re2's String.prototype.match implementation with a global RE2 pattern that can match t...

CVE-2026-68499

re2 provides Node.js bindings for Google's RE2 regular expression engine. Prior to 1.25.2, re2's String.prototype.match

历史摘要 · 未重新核验 · NVD

#cve #cwe-835

安全公告2026-07-30 发布INFO

re2: Global `String.prototype.match` with an empty-matchable pattern never advances → infinite loop with unbounded native memory growth (DoS)

CVE-2026-68499

re2 provides Node.js bindings for Google's RE2 regular expression engine. Prior to 1.25.2, re2's String.prototype.match

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-835

漏洞预警2026-07-29 发布INFO

Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.136.Final and 4.2.16.Final, the `Bzip2Decoder` handler in Netty's compression codec p...

CVE-2026-59901

Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.136.Final and 4.2.16.Final,

历史摘要 · 未重新核验 · NVD

#cve #cwe-835

漏洞预警2026-07-29 发布HIGH

nanoid (Nano ID) before 3.3.16 and 5.1.16 contains an infinite loop in the customAlphabet and nanoid functions of its non-secure module (nanoid/non-secure). When these functions...

CVE-2026-67214

nanoid (Nano ID) before 3.3.16 and 5.1.16 contains an infinite loop in the customAlphabet and nanoid functions of its no

来源摘录 · NVD

#cve #cwe-835

漏洞预警2026-07-29 发布INFO

nanoid (Nano ID) before 5.1.6 contains an infinite loop in the customAlphabet and customRandom functions. When these functions are configured with a size of 0, the internal gene...

CVE-2026-67213

nanoid (Nano ID) before 5.1.6 contains an infinite loop in the customAlphabet and customRandom functions. When these fun

历史摘要 · 未重新核验 · NVD

#cve #cwe-835

漏洞预警2026-07-28 发布INFO

PhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files. In versions 4.0.0 through 5.8.0, 3.3.0 through 3.10.6, 2.2.0 through 2.4.6, 2.0.0 through 2.1.17,...

CVE-2026-59933

PhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files. In versions 4.0.0 through 5.8.0, 3.3.0 t

历史摘要 · 未重新核验 · NVD

#cve #cwe-400 #cwe-835

安全公告2026-07-28 发布INFO

PhpSpreadsheet: XLS/OLE sector-chain self-loop causes memory exhaustion

CVE-2026-59933

PhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files. In versions 4.0.0 through 5.8.0, 3.3.0 t

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-400 #cwe-835

漏洞预警2026-07-27 发布INFO

In the Synopsys DesignWare I2C driver (drivers/i2c/i2c_dw.c) operating in target/slave mode, the rx_full interrupt handler gates the write_requested() callback on dw->state != C...

CVE-2026-10683

In the Synopsys DesignWare I2C driver (drivers/i2c/i2c_dw.c) operating in target/slave mode, the rx_full interrupt handl

历史摘要 · 未重新核验 · NVD

#cve #cwe-835

漏洞预警2026-07-27 发布INFO

facil.io 0.6.0 through 0.7.6 contains a denial-of-service vulnerability in the multipart body parser that allows an unauthenticated remote attacker to permanently freeze worker ...

CVE-2026-66730

facil.io 0.6.0 through 0.7.6 contains a denial-of-service vulnerability in the multipart body parser that allows an unau

历史摘要 · 未重新核验 · NVD

#cve #cwe-835