目標達成 すべての支援者に感謝 — 100%達成しました!

目標: 1000 CNY · 調達済み: 1336 CNY

100%

CoreWCF 厂商漏洞列表 / CVE 中文分析 14

CoreWCF 厂商相关 14 条 CVE 漏洞,含 AI 中文分析、POC、CVSS 评分与受影响产品。

CoreWCF 漏洞聚合页专门收录与 CoreWCF 框架相关的安全缺陷,涵盖远程代码执行、权限绕过及信息泄露等常见漏洞类型。本页面整合了自 CoreWCF 项目启动以来的历史安全公告,提供从早期预览版到最新稳定版本的全周期漏洞数据,确保信息更新及时且完整。读者可通过此页面追踪 CoreWCF 官方发布的安全补丁动态,深入了解特定类型弱点的影响范围与修复方案,或检索特定产品版本的历史漏洞记录,从而有效评估系统风险并制定相应的防护策略,无需浏览分散的文档即可掌握全面的安全态势。

14 件の結果 / 14フィルターをクリア
上位製品 CoreWCF: CoreWCF
CVE IDタイトルCVSS深刻度公開日
CVE-2026-54782 CoreWCF: Authentication bypass in CoreWCF SAML 1.1 / 2.0 token signature validation — CoreWCFCWE-290 10.0 Critical2026-07-08
CVE-2026-54781 CoreWCF: SAML SubjectConfirmation methods and holder-of-key proof keys are not enforced — CoreWCFCWE-287 7.4 High2026-07-08
CVE-2026-54784 CoreWCF: SPNEGO SecurityContextToken proof key wrapped without confidentiality — CoreWCFCWE-311 7.4 High2026-07-08
CVE-2026-54774 CoreWCF: SamlSerializer skips SignatureValue verification when SAML signing token is not an X.509 certificate — CoreWCFCWE-345 7.4 High2026-07-08
CVE-2026-54783 CoreWCF: XML Signature Wrapping in WS-Security endorsing/supporting signature verification allows replay of captured signed messages — CoreWCFCWE-294 7.4 High2026-07-08
CVE-2026-54780 CoreWCF: WS-Security Reference DigestMethod Algorithm-Suite Bypass — CoreWCFCWE-327 3.7 Low2026-07-08
CVE-2026-54775 CoreWCF: Kafka consume pump halts permanently on a Kafka tombstone (null-value record), causing persistent endpoint denial of service. — CoreWCFCWE-248 6.5 Medium2026-07-08
CVE-2026-54778 CoreWCF: UnixDomainSocket Non-Reentrant POSIX Identity Resolution — CoreWCFCWE-362 6.2 Medium2026-07-08
CVE-2026-54773 CoreWCF: WS-Security signature substitution via document-wide Signature lookup — CoreWCFCWE-347 5.9 Medium2026-07-08
CVE-2026-54779 CoreWCF: SAML token replay protection is inoperative — CoreWCFCWE-294 5.9 Medium2026-07-08
CVE-2026-54772 CoreWCF: Pre-authentication infinite-loop CPU exhaustion in CoreWCF net.tcp / net.pipe / net.uds framing handshake — CoreWCFCWE-400 7.5 High2026-07-08
CVE-2026-54776 CoreWCF: Unix Domain Socket PosixIdentity transport accepts connections that skip the security upgrade — CoreWCFCWE-306 4.4 Medium2026-07-08
CVE-2026-54777 CoreWCF NetNamedPipe transport accepts attach to a pre-existing named pipe instance — CoreWCFCWE-367 6.5 Medium2026-07-08
CVE-2024-28252 CoreWCF NetFraming based services can leave connections open when they should be closed — CoreWCFCWE-404 7.5 High2024-03-15

本页汇总了 CoreWCF 厂商截至目前公开的全部 14 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接,并附带 AI 生成的中文分析以便快速判断风险。