netty-incubator-codec-ohttp: Binary HTTP parser infinite loop on known-length field section boundary
CVE-2026-63124
## Summary `io.netty.incubator:netty-incubator-codec-bhttp` can enter a non-terminating parse loop when a known-length
#severity:high
共收录 5383 条相关情报。
← 返回所有主题netty-incubator-codec-ohttp: BoringSSL HPKE private key bytes exposed through toString() and exception messages
CVE-2026-61798
## Summary `io.netty.incubator:netty-incubator-codec-ohttp-hpke-classes-boringssl` exposes raw HPKE private key bytes i
NocoBase: Arbitrary File Write chained with Local file Inclusion leads to Remote code execution
## Executive Summary Two vulnerabilities were identified and chained to achieve authenticated remote code execution Th
An unauthenticated denial-of-service vulnerability was identified in TP-Link TL-MR100 v3.2, TL...
CVE-2026-8619
An unauthenticated denial-of-service vulnerability was identified in TP-Link TL-MR100 v3.2, TL-MR150 v3.2, TL-MR6400 v8.
X.509IF protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
CVE-2026-76928
X.509IF protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
A vulnerability was identified in TRENDnet TEW-755AP up to 20260702. Affected by this issue is...
CVE-2026-76590
A vulnerability was identified in TRENDnet TEW-755AP up to 20260702. Affected by this issue is some unknown functionalit
In OpenStack Aodh before 22.0.1, the alarm list API bypasses project scoping when the...
CVE-2026-76878
In OpenStack Aodh before 22.0.1, the alarm list API bypasses project scoping when the all_projects query parameter is se
C12.22 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
CVE-2026-76886
C12.22 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
C12.22 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
CVE-2026-76879
C12.22 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
Agno's PythonTools in libs/agno/agno/tools/python.py contains a path traversal vulnerability that...
CVE-2026-76832
Agno's PythonTools in libs/agno/agno/tools/python.py contains a path traversal vulnerability that allows attackers to re
RRC protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
CVE-2026-76880
RRC protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
A vulnerability was found in TRENDnet TEW-755AP up to 20260702. Affected is the function...
CVE-2026-76589
A vulnerability was found in TRENDnet TEW-755AP up to 20260702. Affected is the function FUN_401000 of the file /sbin/my
In Splunk AI Toolkit versions below 6.0.0, a user who holds the "power" Splunk role could access...
CVE-2026-76397
In Splunk AI Toolkit versions below 6.0.0, a user who holds the "power" Splunk role could access and delete all relevant
In Splunk Connect for Kafka versions below 2.2.7, an unauthenticated user positioned in the...
CVE-2026-76403
In Splunk Connect for Kafka versions below 2.2.7, an unauthenticated user positioned in the network path could read or a
In Splunk AI Toolkit versions below 6.0.1, a user who holds the "power" Splunk role could modify...
CVE-2026-76399
In Splunk AI Toolkit versions below 6.0.1, a user who holds the "power" Splunk role could modify app-provided scheduled
In Splunk Connect for Kafka versions below 2.2.7, an unauthenticated user who can reach the Kafka...
CVE-2026-76402
In Splunk Connect for Kafka versions below 2.2.7, an unauthenticated user who can reach the Kafka Connect Representation
In Splunk AI Toolkit versions below 6.0.0, a user that holds a role with the schedule_search...
CVE-2026-76396
In Splunk AI Toolkit versions below 6.0.0, a user that holds a role with the schedule_search capability could cause a sc
In Splunk AI Toolkit versions below 6.0.0, a user who holds the "power" Splunk role could execute...
CVE-2026-76395
In Splunk AI Toolkit versions below 6.0.0, a user who holds the "power" Splunk role could execute arbitrary code on the
In Cisco Talos Intelligence for Enterprise Security Cloud versions below 1.0.3, a user that holds...
CVE-2026-76389
In Cisco Talos Intelligence for Enterprise Security Cloud versions below 1.0.3, a user that holds a role with the get_ta
In Splunk AI Toolkit versions below 6.0.0, a low-privileged user who does not hold the "admin" or...
CVE-2026-76394
In Splunk AI Toolkit versions below 6.0.0, a low-privileged user who does not hold the "admin" or "power" Splunk roles c