#cwe-940

共收录 29 条相关情报。

← 返回所有主题
安全公告2026-06-08 发布INFO

Netty's Default QUIC token handler accepts any client-supplied token

CVE-2026-44894

NoQuicTokenHandler is the tokenHandler used when the application does not set one. Its writeToken() returns false (serve

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-29 发布INFO

Home Assistant is open source home automation software that puts local control and privacy first. Prior to 2026.4.1 for iOS and 2026.4.4 for Android, he Home Assistant Companion...

CVE-2026-44698

Home Assistant is open source home automation software that puts local control and privacy first. Prior to 2026.4.1 for

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-28 发布INFO

electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. From 3.0.6 to 3.8.8, This vulnerability is fixed in 3.9.0.

CVE-2026-45353

electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. From 3.0.6 to 3.8.8, This vul

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-18 发布INFO

Summarize prior to 0.15.1 contains a vulnerability in the hover summary feature that allows malicious pages to dispatch synthetic mouseover events over attacker-controlled links...

CVE-2026-45245

Summarize prior to 0.15.1 contains a vulnerability in the hover summary feature that allows malicious pages to dispatch

历史摘要 · 未重新核验 · NVD

安全公告2026-05-14 发布INFO

Electerm Local code through electerm's single-instance socket

CVE-2026-45353

### Impact _Local code execution without UI interaction: any same-user process can send a JSON payload to electerm's sin

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-11 发布INFO

WWBN AVideo is an open source video platform. In versions up to and including 29.0, objects/sendEmail.json.php exposes two branches depending on whether contactForm=1 is submitt...

CVE-2026-43880

WWBN AVideo is an open source video platform. In versions up to and including 29.0, objects/sendEmail.json.php exposes t

历史摘要 · 未重新核验 · NVD

安全公告2026-05-05 发布INFO

AVideo: Unauthenticated Arbitrary Email Sending via sendEmail.json.php Enables Phishing from the Site’s Legitimate From Address

CVE-2026-43880

## Summary `objects/sendEmail.json.php` exposes two branches depending on whether `contactForm=1` is submitted. When th

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-01 发布INFO

Incomplete validation of AI rich response messages for Instagram Reels in WhatsApp for iOS v2.25...

CVE-2026-23866

Incomplete validation of AI rich response messages for Instagram Reels in WhatsApp for iOS v2.25.8.0 to v2.26.15.72 and

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-01 发布INFO

Incomplete validation of AI rich response messages for Instagram Reels in WhatsApp for iOS v2.25.8.0 to v2.26.15.72 and WhatsApp for Android v2.25.8.0 to v2.26.7.10 could have a...

CVE-2026-23866

Incomplete validation of AI rich response messages for Instagram Reels in WhatsApp for iOS v2.25.8.0 to v2.26.15.72 and

历史摘要 · 未重新核验 · NVD