Microsoft Security Advisory CVE-2026-50524 – .NET Denial of Service Vulnerability
CVE-2026-50524
## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET
#severity:high
共收录 5441 条相关情报。
← 返回所有主题Microsoft Security Advisory CVE-2026-47304 – .NET Security Feature Bypass Vulnerability
CVE-2026-47304
## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET
Microsoft Security Advisory CVE-2026-47302 – .NET Denial of Service Vulnerability
CVE-2026-47302
## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET
Microsoft Security Advisory CVE-2026-57108 – .NET Denial of Service Vulnerability
CVE-2026-57108
## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in the
Axios Node HTTP adapter can use an inherited proxy after interceptor config cloning
## Summary Axios’ Node.js HTTP adapter can route requests through an attacker-controlled proxy when `Object.prototype.p
File Browser: Colliding username normalization gives two users the same home directory
CVE-2026-62685
## Summary FileBrowser confines each user to a *scope*: a home directory that acts as the boundary for everything they
Astro: Authorization Bypass via Decode Iteration Limit and Rewrite Path Canonicalization Mismatch
CVE-2026-59731
# Astro 6.4.7 Authorization Bypass via Decode Iteration Limit and Rewrite Path Canonicalization Mismatch ## Summary As
node-tar: Negative tar entry size causes infinite loop in archive replace
CVE-2026-59874
### Summary A checksum-valid tar archive with a negative base-256 encoded entry size can make `tar.replace()` loop fore
Socket.IO: Engine.IO Polling Transport Connection Exhaustion
CVE-2026-59725
### Impact An unauthenticated remote attacker can cause a denial of service in affected versions of **engine.io** by op
shell-quote: Quadratic-complexity Denial of Service in `parse()` (CWE-407)
CVE-2026-13311
### Summary `shell-quote`'s `parse()` finalizes its token list with a `reduce` that uses `Array.prototype.concat` as the
Directus: Authorization-dependent response served from unsegmented cache key
CVE-2026-61836
## Summary When response caching is enabled (`CACHE_ENABLED=true`), the cache-key derivation in `api/src/utils/get-cach
Directus: SSRF Protection Bypass via 0.0.0.0 in File Import
CVE-2026-61835
### Summary The SSRF protection on Directus's file-import-from-URL feature can be bypassed using the address `0.0.0.0`.
Mistune plugins/formatting: quadratic-time parsing on long runs of `~~x~~`, `==x==`, and `^^x^^` markers (strikethrough / mark / insert)
CVE-2026-59922
## Summary **Type:** Algorithmic-complexity denial of service. A run of N closed pairs `~~x~~~~x~~...` (or the analogou
Mistune inline_parser: quadratic-time parsing on long runs of `**x**` and `***x***` emphasis pairs
CVE-2026-59925
## Summary **Type:** Algorithmic-complexity DoS in core emphasis parsing. A long sequence of well-formed `**x**` (stron
Path traversal on Windows in Apache MINA SSHD component sshd-git. Apache MINA SSHD is a Java...
CVE-2026-56623
Path traversal on Windows in Apache MINA SSHD component sshd-git. Apache MINA SSHD is a Java library for client-side and
Improper certificate validation in Apache MINA SSHD (server-side). Apache MINA SSHD is a Java...
CVE-2026-56624
Improper certificate validation in Apache MINA SSHD (server-side). Apache MINA SSHD is a Java library for client-side an
Path traversal in the sshd-scp component of Apache MINA SSHD. Apache MINA SSHD is a Java library...
CVE-2026-56452
Path traversal in the sshd-scp component of Apache MINA SSHD. Apache MINA SSHD is a Java library for client-side and ser
FileCodeBox before 2.4 contains a rate-limit bypass vulnerability in the IPRateLimit class that...
CVE-2026-64619
FileCodeBox before 2.4 contains a rate-limit bypass vulnerability in the IPRateLimit class that allows unauthenticated a
VSee Clinic 7.1.26 and API 1.3.0 contain an Insecure Direct Object Reference (IDOR) vulnerability...
CVE-2026-13381
VSee Clinic 7.1.26 and API 1.3.0 contain an Insecure Direct Object Reference (IDOR) vulnerability in the /v1.3.0/api/fil
A vulnerability in keras-team/keras version 3.15.0 allows unsafe deserialization of attacker...
CVE-2026-12484
A vulnerability in keras-team/keras version 3.15.0 allows unsafe deserialization of attacker-controlled PyTorch pickle d