python-zeroconf: Unbounded TC-deferred queue allows LAN-local memory exhaustion via spoofed-source flood
CVE-2026-48045
### Impact `AsyncListener.handle_query_or_defer` retained every truncated (TC-bit) incoming query in `self._deferred[ad
#severity:medium
共收录 5584 条相关情报。
← 返回所有主题netty-codec-http2: ByteBuf Reference-Count Leak in DelegatingDecompressorFrameListener Leads to Memory Exhaustion
CVE-2026-48043
### Impact The `DelegatingDecompressorFrameListener` class orchestrates HTTP/2 decompression by embedding a per-stream
netty-incubator-codec-ohttp's Incorrect Native Pointer Derivation in Pooled Direct ByteBuf Fallback Leads to Out-of-Bounds Native Memory Access
CVE-2026-48040
The netty-incubator-codec-ohttp library implements Oblivious HTTP (RFC 9458) using BoringSSL's HPKE C library via JNI. W
joi has an uncaught RangeError on deeply nested input through recursive `link()` schemas
CVE-2026-48038
### Impact Denial of service via untrapped exception in services validating user-supplied JSON / object input with recur
@hapi/wreck: Sensitive credential headers leak across cross-port and cross-scheme redirects
CVE-2026-48022
### Impact Wreck strips credential headers (Authorization, Cookie, Proxy-Authorization) before following a cross-origin
free5GC UDR has improper `ueId` validation in EE subscription handlers that allows arbitrary identifier persistence
CVE-2026-47780
### Summary The free5GC UDR accepts arbitrary non-3GPP ueId values in the EE subscription creation and query flows becau
guzzlehttp/guzzle-services' XML Request Serialization Vulnerable to XML Injection via CDATA Terminator
CVE-2026-53723
### Impact `guzzlehttp/guzzle-services` does not safely serialize scalar XML element values containing the CDATA termin
QTS, QuTS hero, QuTScloud are not affected. We have already fixed the vulnerability in the...
CVE-2025-59382
QTS, QuTS hero, QuTScloud are not affected. We have already fixed the vulnerability in the following version:
A cross-site request forgery (CSRF) vulnerability has been reported to affect Notification Center...
CVE-2025-58468
A cross-site request forgery (CSRF) vulnerability has been reported to affect Notification Center. The remote attackers
BuddyPress 14.4.0 contains an insecure direct object reference vulnerability in the friends REST...
CVE-2026-53675
BuddyPress 14.4.0 contains an insecure direct object reference vulnerability in the friends REST API that allows any aut
SubjectDnX509PrincipalExtractor does not correctly handle certain malformed X.509 certificate CN...
CVE-2026-47838
SubjectDnX509PrincipalExtractor does not correctly handle certain malformed X.509 certificate CN values, which can lead
Spring Kafka's retry topic infrastructure did not sufficiently validate user-controlled header...
CVE-2026-41727
Spring Kafka's retry topic infrastructure did not sufficiently validate user-controlled header values before acting on t
When an application opts into DelegatingDeserializer, a producer can grow the consumer's heap...
CVE-2026-41726
When an application opts into DelegatingDeserializer, a producer can grow the consumer's heap without bound by sending r
A SpEL Injection vulnerability exists in the Spring Data KeyValue if unsanitized user input is...
CVE-2026-41719
A SpEL Injection vulnerability exists in the Spring Data KeyValue if unsanitized user input is passed as Sort into a rep
Spring Data REST serializes the full exception cause chain into HTTP error response bodies,...
CVE-2026-41730
Spring Data REST serializes the full exception cause chain into HTTP error response bodies, potentially exposing persist
Spring Data REST's Querydsl integration accepts arbitrary persistent property paths as request...
CVE-2026-41837
Spring Data REST's Querydsl integration accepts arbitrary persistent property paths as request-parameter filter keys and
Spring Data Commons contains a vulnerability that can lead to a Denial of Service (DoS) condition...
CVE-2026-41721
Spring Data Commons contains a vulnerability that can lead to a Denial of Service (DoS) condition if Spring Data Web Sup
Spring Security's CookieRequestCache and CookieServerRequestCache store the pre-authentication...
CVE-2026-41706
Spring Security's CookieRequestCache and CookieServerRequestCache store the pre-authentication request URL in a browser
Applications that configure their broker connection via RabbitConnectionFactoryBean.setUri("amqps...
CVE-2026-41714
Applications that configure their broker connection via RabbitConnectionFactoryBean.setUri("amqps://...") without also c
Correlation IDs for replies in the RabbitTemplate.sendAndReceive() with the fixed reply queue are...
CVE-2026-41701
Correlation IDs for replies in the RabbitTemplate.sendAndReceive() with the fixed reply queue are predictable due to int