VulnScope — 以套件為主體的 CVE 查詢工具

搜尋

5,558 筆結果

嚴重程度:CRITICAL HIGH MEDIUM LOW|生態系:npm PyPI Maven Debian Alpine|⚠ 只看 KEV

HIGH7.2CVE-2025-52465GeoServer has an arbitrary file write vulnerability in its Master Password Dump Page2026/6/12
HIGH7.3Vim is an open source, command line text editor.2026/6/11
HIGH7.5Vim is an open source, command line text editor.2026/6/11
HIGH7.2GeoServer DB2 DataStore Extension has a JNDI Vulnerability via Store Connection2026/6/11
HIGH7.1WsgiDAV encoded dot segments can escape filesystem share roots2026/6/11
HIGH8.1Litestar has HTML Injection Through its CSRF Token2026/6/10
HIGH7.5Acknowledgement extension out of memory2026/6/10
HIGH8.0Jenkins: Stored XSS vulnerability in node offline cause description2026/6/10
HIGH8.1In Spring for Apache Kafka, overly broad trusted-package matching in header mappers exposes JDK classes to deserialization2026/6/10
HIGH7.5Issue summary: When an application drives an AES-OCB context through the public EVP_Cipher() one-shot interface, the application-supplied i…2026/6/9
HIGH7.5Issue summary: Parsing a crafted DER-encoded ASN.1 structure with a primitive element whose content exceeds 2 gigabytes in length may cause…2026/6/9
HIGH7.5Issue summary: When CMS password-based decryption (RFC 3211 / PWRI key unwrap) processes attacker-supplied CMS data, an attacker-chosen str…2026/6/9
HIGH7.5Issue summary: Receiving a QUIC initial packet with an invalid token may trigger a NULL pointer dereference in the OpenSSL QUIC server with…2026/6/9
HIGH7.4Issue Summary: The PKCS#12 file processing fails to perform sufficient input validation for files that use Password-Based Message Authentic…2026/6/9
HIGH7.5Issue summary: Remote peer may exhaust heap memory of the QUIC server or client by flooding it with packets containing PATH_CHALLENGE frame…2026/6/9
HIGH8.1Issue summary: A signed integer overflow when sizing the destination buffer for Unicode output in ASN1_mbstring_ncopy() can lead to a heap…2026/6/9
HIGH8.7Netty has Insufficient Bailiwick Validation for NS Records2026/6/8
HIGH7.5Netty: SCTP reassembly nests buffers without bound2026/6/8
HIGH8.7Netty Vulnerable to DNS Cache Poisoning via Missing Bailiwick Checks in CNAME Records2026/6/8
HIGH7.5Netty: SNI handler pre-allocates up to 16 MiB from nine attacker bytes2026/6/8
HIGH7.5Netty's Default QUIC token handler accepts any client-supplied token2026/6/8
HIGH7.5Netty: HAProxy SSL TLV parsing leaks retained slice on invalid TLV length2026/6/8
HIGH7.5Netty has a Vulnerable Default Configuration Which Leads to Denial of Service via Unbounded HTTP/3 Header Size2026/6/8
HIGH7.5Netty has Unbounded Direct Memory Consumption in its RedisDecoder2026/6/8
HIGH7.5Netty: Memory Exhaustion in RedisArrayAggregator due to Deeply Nested Arrays2026/6/8

第 1 / 223 頁下一頁 →