Werkzeug safe_join() allows Windows special device names
CVE-2026-102598
Werkzeug safe_join() allows Windows special device names
#msrc
共收录 2151 条相关情报。
← 返回所有主题urllib3: HTTPS proxy TLS configuration may be ignored or overridden
CVE-2026-97687
urllib3: HTTPS proxy TLS configuration may be ignored or overridden
virtualenv: Command injection via --prompt in activate.bat (batch activator)
CVE-2026-102937
virtualenv: Command injection via --prompt in activate.bat (batch activator)
In Mbed TLS 3.2.0 though 3.6.6 and 4.0.0 through 4.1.0, an attacker who can cause an entropy source to fail can remove or inject bytes into the start of the TLS stream. This only affects TLS 1.3 servers.
CVE-2026-73064
In Mbed TLS 3.2.0 though 3.6.6 and 4.0.0 through 4.1.0, an attacker who can cause an entropy source to fail can remove o
Libsoup: libsoup: heap buffer overflow during websocket client-frame masking
CVE-2026-102559
Libsoup: libsoup: heap buffer overflow during websocket client-frame masking
Libsoup: libsoup: heap buffer overflow from websocket pong signal type confusion
CVE-2026-102556
Libsoup: libsoup: heap buffer overflow from websocket pong signal type confusion
Libsoup: libsoup: heap buffer overflow via uninitialized length in data-uri base64 decoding
CVE-2026-102555
Libsoup: libsoup: heap buffer overflow via uninitialized length in data-uri base64 decoding
Libsoup: libsoup: heap buffer overflow during websocket receive-buffer growth
CVE-2026-102558
Libsoup: libsoup: heap buffer overflow during websocket receive-buffer growth
Libsoup: libsoup: heap buffer overflow during websocket message reassembly
CVE-2026-102557
Libsoup: libsoup: heap buffer overflow during websocket message reassembly
Libsoup: libsoup: heap buffer overflow during outgoing permessage-deflate buffer growth
CVE-2026-102560
Libsoup: libsoup: heap buffer overflow during outgoing permessage-deflate buffer growth
Integer Overflow or Wraparound and Out-of-bounds Write in compress
CVE-2026-63209
Integer Overflow or Wraparound and Out-of-bounds Write in compress
iperf3 3.21 (esnet/iperf) contains a remote, unauthenticated heap use-after-free: the server's per-test watchdog server_timer_proc() frees streams without cancelling/joining their worker threads, so a blocked worker dereferences a freed iperf_stream; fixed in 3.22.
CVE-2026-101276
iperf3 3.21 (esnet/iperf) contains a remote, unauthenticated heap use-after-free: the server's per-test watchdog server_
Out-of-Bounds Access After SSL_set_SSL_CTX() During a Handshake
CVE-2026-72897
Out-of-Bounds Access After SSL_set_SSL_CTX() During a Handshake
QUIC: Unbounded RETIRE_CONNECTION_ID Backlog
CVE-2026-84784
QUIC: Unbounded RETIRE_CONNECTION_ID Backlog
Timing Side-Channel in SM2 Signature Generation
CVE-2026-77696
Timing Side-Channel in SM2 Signature Generation
QUIC Unvalidated Amplification Credit may be Over Accounted
CVE-2026-35191
QUIC Unvalidated Amplification Credit may be Over Accounted
QUIC Connection-Level Flow Control is Not Enforced for Streams
CVE-2026-75804
QUIC Connection-Level Flow Control is Not Enforced for Streams
Potential CPU DoS via O(n^2) Fragment Reassembly in QUIC
CVE-2026-42772
Potential CPU DoS via O(n^2) Fragment Reassembly in QUIC
Non-Constant-Time SM2 Scalar Multiplication on ARM64 and RISC-V
CVE-2026-54875
Non-Constant-Time SM2 Scalar Multiplication on ARM64 and RISC-V
Timing Side-Channel in Scalar Multiplication for Non-NIST EC Curves
CVE-2026-54872
Timing Side-Channel in Scalar Multiplication for Non-NIST EC Curves