Libarchive: libarchive: use-after-free via aliased mac metadata copy
CVE-2026-17591
Libarchive: libarchive: use-after-free via aliased mac metadata copy
#windows
共收录 2159 条相关情报。
← 返回所有主题Cifs-utils: mount.cifs credential-file option injection allows local privilege boundary bypass
CVE-2026-104715
Cifs-utils: mount.cifs credential-file option injection allows local privilege boundary bypass
Busybox: busybox: http request smuggling via pipelined requests in httpd reverse proxy
CVE-2026-88829
Busybox: busybox: http request smuggling via pipelined requests in httpd reverse proxy
Busybox: busybox: dpkg-deb extraction-root escape via per-ar-member deferred symlink flush
CVE-2026-90954
Busybox: busybox: dpkg-deb extraction-root escape via per-ar-member deferred symlink flush
Busybox: busybox: dpkg stale field_start pointer causes out-of-bounds read and status file corruption
CVE-2026-88842
Busybox: busybox: dpkg stale field_start pointer causes out-of-bounds read and status file corruption
RabbitMQ: JWKS Fetch Ignores HTTP Response Status Code - Signing Key Destruction Causes Authentication DoS
CVE-2026-67409
RabbitMQ: JWKS Fetch Ignores HTTP Response Status Code - Signing Key Destruction Causes Authentication DoS
RabbitMQ: OAuth2 silent verify_none fallback for JWKS fetch
CVE-2026-67404
RabbitMQ: OAuth2 silent verify_none fallback for JWKS fetch
RabbitMQ: JMS topic exchange erl_scan atom exhaustion
CVE-2026-67220
RabbitMQ: JMS topic exchange erl_scan atom exhaustion
RabbitMQ: Cross-vhost quorum-queue status and stream tracking disclosure
CVE-2026-66076
RabbitMQ: Cross-vhost quorum-queue status and stream tracking disclosure
An issue was discovered in compare_digest in Lib/hmac.py in Python through 3.9.1. Constant-time-defeating optimisations were possible in the accumulator variable in hmac.compare_digest.
CVE-2022-48566
An issue was discovered in compare_digest in Lib/hmac.py in Python through 3.9.1. Constant-time-defeating optimisations
An XML External Entity (XXE) issue was discovered in Python through 3.9.1. The plistlib module no longer accepts entity declarations in XML plist files to avoid XML vulnerabilities.
CVE-2022-48565
An XML External Entity (XXE) issue was discovered in Python through 3.9.1. The plistlib module no longer accepts entity
read_ints in plistlib.py in Python through 3.9.1 is vulnerable to a potential DoS attack via CPU and RAM exhaustion when processing malformed Apple Property List files in binary format.
CVE-2022-48564
read_ints in plistlib.py in Python through 3.9.1 is vulnerable to a potential DoS attack via CPU and RAM exhaustion when
A use-after-free exists in Python through 3.9 via heappushpop in heapq.
CVE-2022-48560
A use-after-free exists in Python through 3.9 via heappushpop in heapq.
Wheels through 4.1.2 allows SQL injection on MySQL/MariaDB with backslash escaping enabled (NO_BACKSLASH_ESCAPES absent) when an application supplies request data to inline-literal paths. These include opt-in parameterize=false queries and IN lists, and positions in developer-written where strings that the parser does not bind, such as BETWEEN bounds, function arguments and LIKE ESCAPE literals. Doubling single quotes without accounting for backslash escapes allows a value to alter the query. Bound paths are not affected; whereBetween() is bound from 4.1.2. This is fixed in 4.2.0.
CVE-2026-111444
Wheels through 4.1.2 allows SQL injection on MySQL/MariaDB with backslash escaping enabled (NO_BACKSLASH_ESCAPES absent)
Wheels through 4.1.1 derives its default production error-email address from the Host header of the request that starts the application. If no explicit error-email recipient is configured, a mail server is configured, and the server accepts an attacker-chosen Host, an attacker whose request triggers a cold start can direct later error emails to an address under their control for that application's lifetime. Emails disclose error and request metadata; on engines/versions where scope dumps render, they may also disclose configuration secrets and other users' session/cookie data. On the Lucee 7 engine, scope dumps fail to render, limiting disclosure to header fields. This is fixed in 4.1.2.
CVE-2026-111450
Wheels through 4.1.1 derives its default production error-email address from the Host header of the request that starts
YAML::Syck versions before 1.47 for Perl allow a use-after-free and double-free via an anchor node freed while still on the parser value stack
CVE-2026-13713
YAML::Syck versions before 1.47 for Perl allow a use-after-free and double-free via an anchor node freed while still on
YAML::Syck versions before 1.47 for Perl allow an out-of-bounds read via a signed-char lookup-table index in syck_base64dec
CVE-2026-57075
YAML::Syck versions before 1.47 for Perl allow an out-of-bounds read via a signed-char lookup-table index in syck_base64
YAML::Syck versions before 1.36 for Perl has missing Null-Terminators which causes Out-of-Bounds Read and potential Information Disclosure
CVE-2025-11683
YAML::Syck versions before 1.36 for Perl has missing Null-Terminators which causes Out-of-Bounds Read and potential Info
YAML::Syck versions before 1.38 for Perl has an out-of-bounds read
CVE-2026-5089
YAML::Syck versions before 1.38 for Perl has an out-of-bounds read
YAML::Syck versions through 1.36 for Perl has several potential security vulnerabilities including a high-severity heap buffer overflow in the YAML emitter
CVE-2026-4177
YAML::Syck versions through 1.36 for Perl has several potential security vulnerabilities including a high-severity heap