23602 matches found
Possible Denial of Service in resolv gem
A denial of service vulnerability has been discovered in the resolv gem bundled with Ruby. This vulnerability has been assigned the CVE identifier CVE-2025-24294. We recommend upgrading the resolv gem. Details The vulnerability is caused by an insufficient check on the length of a decompressed...
CVE-2025-49527
Illustrator versions 28.7.6, 29.5.1 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
CVE-2025-53547
A chart processing flaw was found in helm. This flaw allows an attacker to execute code locally if they can input a crafted Chart.yaml file along with a specially linked Chart.lock file. It is also possible that dependencies are updated during this code execution. Mitigation Mitigation for this...
CVE-2022-0434
creationtimestamp| type| source ---|---|--- 2025-07-08 21:02:39+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lti75jfurg2k...
CVE-2025-44963
creationtimestamp| type| source ---|---|--- 2025-07-08 19:55:03+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114819367034333588 2025-07-14 06:04:37+00:00| seen| https://vulnerability.circl.lu/bundle/e6381844-1d85-477e-83f0-f85545c99c27 2025-08-05 07:31:38+00:00| seen|...
CVE-2024-36357
A transient execution vulnerability in some AMD processors may allow an attacker to infer data in the L1D cache, potentially resulting in the leakage of sensitive information across privileged boundaries...
CVE-2024-36350
A transient execution vulnerability in some AMD processors may allow an attacker to infer data from previous stores, potentially resulting in the leakage of privileged information...
CVE-2025-49760
External control of file name or path in Windows Storage allows an authorized attacker to perform spoofing over a network...
CVE-2025-49725
Use after free in Windows Notification allows an authorized attacker to elevate privileges locally...
CVE-2025-49717
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...
CVE-2025-49687
Out-of-bounds read in Microsoft Input Method Editor IME allows an authorized attacker to elevate privileges locally...
CVE-2025-49686
Null pointer dereference in Windows TCP/IP allows an authorized attacker to elevate privileges locally...
CVE-2025-49680
Improper link resolution before file access 'link following' in Windows Performance Recorder allows an authorized attacker to deny service locally...
CVE-2025-49672
Heap-based buffer overflow in Windows Routing and Remote Access Service RRAS allows an unauthorized attacker to execute code over a network...
CVE-2025-49671
Exposure of sensitive information to an unauthorized actor in Windows Routing and Remote Access Service RRAS allows an unauthorized attacker to disclose information over a network...
CVE-2025-48815
Access of resource using incompatible type 'type confusion' in Windows SSDP Service allows an authorized attacker to elevate privileges locally...
CVE-2025-48384
Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals. When reading a config value, Git strips any trailing carriage return and line feed CRLF. When writing a config entry, values with ...
CVE-2025-47988
Azure Monitor Agent (Microsoft) is vulnerable to CVE-2025-47988 due to improper control of code generation, enabling remote code execution over an adjacent network. Connected sources confirm affected versions are older than 1.35.1 and describe the issue as remote code execution via code injection...
