#cwe-908

共收录 181 条相关情报。

← 返回所有主题
漏洞预警2026-09-18 发布INFO

Imager versions before 1.036 for Perl disclose uninitialised heap memory reading a paletted image with pixel indexes past its colour map in i_gpix_p and i_glin_p. The palette i...

CVE-2026-93018

Imager versions before 1.036 for Perl disclose uninitialised heap memory reading a paletted image with pixel indexes pas

历史摘要 · 未重新核验 · NVD

安全公告2026-09-18 发布INFO

Imager versions before 1.036 for Perl disclose uninitialised heap memory reading a paletted image with pixel indexes past its colour map in i_gpix_p and i_glin_p

CVE-2026-93018

Imager versions before 1.036 for Perl disclose uninitialised heap memory reading a paletted image with pixel indexes pas

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-09-17 发布INFO

Hamlib is a ham radio control library for radios, rotators, and amplifiers. Prior to 4.7.2, the unauthenticated rigctld send_raw command on TCP port 4532 reaches rigctl_send_raw...

CVE-2026-54634

Hamlib is a ham radio control library for radios, rotators, and amplifiers. Prior to 4.7.2, the unauthenticated rigctld

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-17 发布INFO

OpenSlide is a C library for reading whole slide image files. Prior to 4.0.1, a behavior change in libtiff 4.7.1 causes the indirect TIFF tile path in src/openslide-decode-tiff....

CVE-2026-54604

OpenSlide is a C library for reading whole slide image files. Prior to 4.0.1, a behavior change in libtiff 4.7.1 causes

历史摘要 · 未重新核验 · NVD

安全公告2026-09-15 发布INFO

Uninitialized resource in Skia in Google Chrome prior to 153.0.8010.47 allowed a remote attacker...

CVE-2026-91740

Uninitialized resource in Skia in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to obtain cross-origin

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-15 发布INFO

Uninitialized resource in ANGLE in Google Chrome prior to 153.0.8010.47 allowed a remote attacker...

CVE-2026-91720

Uninitialized resource in ANGLE in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to read memory outside

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-15 发布INFO

Uninitialized resource in Skia in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity...

CVE-2026-91740

Uninitialized resource in Skia in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to obtain cross-origin

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

Uninitialized resource in ANGLE in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security ...

CVE-2026-91720

Uninitialized resource in ANGLE in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to read memory outside

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

FreeRDP versions before 3.31.0 contain an information disclosure vulnerability in the RDPGFX server's ResetGraphics PDU serializer that fails to initialize padding bytes in the ...

CVE-2026-91946

FreeRDP versions before 3.31.0 contain an information disclosure vulnerability in the RDPGFX server's ResetGraphics PDU

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-11 发布INFO

An information leakage vulnerability exists in the Endpoint DLP component (epdlpdrv.sys) of Netskope Client for Windows prior to version R141. An internal communication channel ...

CVE-2026-15710

An information leakage vulnerability exists in the Endpoint DLP component (epdlpdrv.sys) of Netskope Client for Windows

历史摘要 · 未重新核验 · NVD

安全公告2026-09-09 发布INFO

Uninitialized resource in GPU in Google Chrome prior to 153.0.8010.36 allowed a remote attacker...

CVE-2026-87647

Uninitialized resource in GPU in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-09 发布INFO

Uninitialized resource in WebGL in Google Chrome prior to 153.0.8010.36 allowed a remote attacker...

CVE-2026-87642

Uninitialized resource in WebGL in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak cross-origin d

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-08 发布INFO

Use of uninitialized resource in Remote Desktop Client allows an authorized attacker to execute code over a network.

CVE-2026-69358

Use of uninitialized resource in Remote Desktop Client allows an authorized attacker to execute code over a network.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-08 发布INFO

Use of uninitialized resource in Windows Management Instrumentation allows an authorized attacker to disclose information over a network.

CVE-2026-69349

Use of uninitialized resource in Windows Management Instrumentation allows an authorized attacker to disclose informatio

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-08 发布INFO

Use of uninitialized resource in Windows GDI+ allows an authorized attacker to disclose information locally.

CVE-2026-69288

Use of uninitialized resource in Windows GDI+ allows an authorized attacker to disclose information locally.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-08 发布INFO

Insertion of sensitive information into log file in Windows Program Compatibility Assistant Service allows an authorized attacker to disclose information locally.

CVE-2026-68873

Insertion of sensitive information into log file in Windows Program Compatibility Assistant Service allows an authorized

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-08 发布INFO

Use of uninitialized resource in Microsoft Account allows an authorized attacker to disclose information locally.

CVE-2026-68852

Use of uninitialized resource in Microsoft Account allows an authorized attacker to disclose information locally.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-08 发布INFO

Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network.

CVE-2026-68776

Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-08 发布INFO

Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network.

CVE-2026-67648

Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-08 发布INFO

Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network.

CVE-2026-67386

Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network.

历史摘要 · 未重新核验 · NVD