An Improper Validation of Specified Quantity in Input vulnerability in the Packet Forwarding...
CVE-2026-57019
An Improper Validation of Specified Quantity in Input vulnerability in the Packet Forwarding Engine (pfe) of Juniper Net
#severity:high
共收录 5441 条相关情报。
← 返回所有主题An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding...
CVE-2026-57022
An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine (PFE) of Juniper N
An Improper Validation of Syntactic Correctness of Input vulnerability in the SIP plugin of...
CVE-2026-57026
An Improper Validation of Syntactic Correctness of Input vulnerability in the SIP plugin of Juniper Networks Junos OS on
An Improper Validation of Specified Quantity in Input vulnerability in the TCP proxy plugin of...
CVE-2026-57023
An Improper Validation of Specified Quantity in Input vulnerability in the TCP proxy plugin of Juniper Networks Junos OS
A Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')...
CVE-2026-57030
A Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in the packe
A Missing Release of Memory after Effective Lifetime vulnerability in the packet forwarding...
CVE-2026-57027
A Missing Release of Memory after Effective Lifetime vulnerability in the packet forwarding engine (pfe) of Juniper Netw
A security vulnerability has been detected in TOTOLINK A3000RU, A3100R, A950RG, AC1200T10, CP450,...
CVE-2026-15271
A security vulnerability has been detected in TOTOLINK A3000RU, A3100R, A950RG, AC1200T10, CP450, CS185R_T10 and EX200 u
Tesla vulnerable to atom exhaustion via untrusted URL scheme
CVE-2026-48597
### Summary In the Mint adapter for the Tesla HTTP client library, `Tesla.Adapter.Mint.open_conn/2` passes the URL sche
Tesla: Authorization header leaks on cross-origin redirect via case-sensitive filtering
CVE-2026-48595
### Summary `Tesla.Middleware.FollowRedirects` is meant to strip the `Authorization` header when following a cross-orig
Tesla has decompression bomb on response body
CVE-2026-48594
### Summary Any Tesla client pipeline that includes `Tesla.Middleware.DecompressResponse` or `Tesla.Middleware.Compress
Mistune: Potential DoS via quadratic-time parsing in parse_link_text
CVE-2026-49851
### Summary Mistune is vulnerable to a CPU exhaustion DoS due to superlinear (approximately O(n²)) behavior in parse_lin
mint: Unbounded streams map growth via PUSH_PROMISE without follow-up HEADERS
CVE-2026-48862
### Summary Mint's HTTP/2 client accepts `PUSH_PROMISE` frames from any server it connects to and inserts every promise
mint: Unbounded CONTINUATION/HEADERS frame accumulation (CONTINUATION flood)
CVE-2026-49754
### Summary Mint's HTTP/2 client accumulates `CONTINUATION` header-block fragments into a per-connection buffer with no
An Improper Check for Unusual or Exceptional Conditions vulnerability in the advanced...
CVE-2026-33794
An Improper Check for Unusual or Exceptional Conditions vulnerability in the advanced forwarding toolkit (evo-aftmand)
An Unchecked Input for Loop Condition vulnerability in the Packet Forwarding Engine (pfe) of...
CVE-2026-33800
An Unchecked Input for Loop Condition vulnerability in the Packet Forwarding Engine (pfe) of Juniper Networks Junos OS o
An Improper Check for Unusual or Exceptional Conditions vulnerability in the routing protocol...
CVE-2026-33801
An Improper Check for Unusual or Exceptional Conditions vulnerability in the routing protocol daemon (RPD) of Juniper Ne
The UsersWP plugin for WordPress is vulnerable to Arbitrary File Deletion in versions up to, and...
CVE-2026-13492
The UsersWP plugin for WordPress is vulnerable to Arbitrary File Deletion in versions up to, and including, 1.2.65. This
Unauthorized use of Kyocera printers, allows all information stored in the Kyocera address book...
CVE-2025-63579
Unauthorized use of Kyocera printers, allows all information stored in the Kyocera address book to be exported. The secu
YesWiki has Authenticated SQL Injection via ReactionManager
CVE-2026-52775
## Summary YesWiki through the latest development branch contains a SQL injection vulnerability in `ReactionManager::de
YesWiki: Second-Order SQL Injection in Page Delete API via Unescaped Page Tag (`ApiController::deletePage`)
CVE-2026-52771
## Summary `ApiController::deletePage()` interpolates a page tag retrieved from the database into a `DELETE FROM …_links