Microsoft Discovery Studio Information Disclosure Vulnerability
CVE-2026-62906
Improper neutralization of special elements in data query logic in Microsoft Discovery Studio allows an unauthorized att
#windows
共收录 2159 条相关情报。
← 返回所有主题URI versions before 5.36 for Perl encode non-NFC host names to non-standard punycode labels via missing normalization in nameprep
CVE-2026-19953
URI versions before 5.36 for Perl encode non-NFC host names to non-standard punycode labels via missing normalization in
Gdb: gdb: out-of-bounds write in stabs parser read_member_functions() via crafted elf
CVE-2026-13732
Gdb: gdb: out-of-bounds write in stabs parser read_member_functions() via crafted elf
A Signed Length Overflow in Erlang/OTP's inet TCP Driver Overflows the Receive Buffer Into BEAM VM Memory From an Unauthenticated Peer
CVE-2026-75538
A Signed Length Overflow in Erlang/OTP's inet TCP Driver Overflows the Receive Buffer Into BEAM VM Memory From an Unauth
inets, httpd: Authentication Bypass via Directory Namespace Collapse in httpd mod_auth
CVE-2026-74994
inets, httpd: Authentication Bypass via Directory Namespace Collapse in httpd mod_auth
inets,httpd: Memory Exhaustion via Unenforced max_body_size During Chunked Body Reception
CVE-2026-74835
inets,httpd: Memory Exhaustion via Unenforced max_body_size During Chunked Body Reception
inets, httpd: HTTP Request Smuggling via Transfer-Encoding and Content-Length
CVE-2026-73812
inets, httpd: HTTP Request Smuggling via Transfer-Encoding and Content-Length
inets, httpd: HTTP Request Smuggling via Whitespace-Before-Colon Header Dropping i
CVE-2026-73276
inets, httpd: HTTP Request Smuggling via Whitespace-Before-Colon Header Dropping i
httpd mod_auth directory protection bypassed by request path casing on case-insensitive filesystems
CVE-2026-73270
httpd mod_auth directory protection bypassed by request path casing on case-insensitive filesystems
httpc does not bound server-supplied numeric header values before integer conversion
CVE-2026-71562
httpc does not bound server-supplied numeric header values before integer conversion
httpd applies no timeout while receiving a request body, parking a worker on a stalled client
CVE-2026-71380
httpd applies no timeout while receiving a request body, parking a worker on a stalled client
eldap does not bound the port component of a referral URL before integer conversion
CVE-2026-70409
eldap does not bound the port component of a referral URL before integer conversion
httpd parks a request worker indefinitely on a malformed chunk size sent after the headers
CVE-2026-69664
httpd parks a request worker indefinitely on a malformed chunk size sent after the headers
httpd mod_auth directory protection bypassed by a doubled slash in the request path
CVE-2026-66835
httpd mod_auth directory protection bypassed by a doubled slash in the request path
inets,httpd:HTTP Request Smuggling via obs-fold Header Continuation
CVE-2026-66357
inets,httpd:HTTP Request Smuggling via obs-fold Header Continuation
uri_string does not bound the port component of a URI before integer conversion
CVE-2026-59696
uri_string does not bound the port component of a URI before integer conversion
httpc memory exhaustion via unbounded response header accumulation
CVE-2026-55951
httpc memory exhaustion via unbounded response header accumulation
Deserialization of Untrusted Data in Elasticsearch Leading to Remote Code Execution
CVE-2026-72649
Deserialization of Untrusted Data in Elasticsearch Leading to Remote Code Execution
Allocation of Resources Without Limits or Throttling in Elasticsearch Leading to Denial of Service
CVE-2026-56143
Allocation of Resources Without Limits or Throttling in Elasticsearch Leading to Denial of Service
Chromium: CVE-2026-79041 Missing authorization in Browser
CVE-2026-79041
Microsoft MSRC 发布了一则关于 Chromium 项目的安全公告，涉及 CVE-2026-79041。该漏洞被描述为“Browser 中的缺失授权（Missing authorization in Browser）”，表明 C