3369 matches found
CVE-2025-21358
Windows Core Messaging Elevation of Privileges Vulnerability...
CVE-2025-21352
Internet Connection Sharing ICS Denial of Service Vulnerability...
CVE-2025-21350
Windows Kerberos Denial of Service Vulnerability...
CVE-2025-21259
Microsoft Outlook Spoofing Vulnerability...
CVE-2025-21206
Visual Studio Installer Elevation of Privilege Vulnerability...
CVE-2025-21212
Internet Connection Sharing ICS Denial of Service Vulnerability...
Ubuntu 16.04 LTS : GNU C Library vulnerability (USN-7259-2)
The remote Ubuntu 16.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-7259-2 advisory. USN-7259-1 fixed a vulnerability in GNU C Library. This update provides the corresponding update for Ubuntu 16.04 LTS. Tenable has extracted the preceding...
GHSA-7QGG-VW88-CC99 utils-extend Prototype Pollution
The latest version of utils-extend 1.0.8 is vulnerable to Prototype Pollution through the entry functions lib.extend. An attacker can supply a payload with Object.prototype setter to introduce or modify properties within the global prototype chain, causing denial of service DoS a the minimum...
CVE-2021-26615
ARK library allows attackers to execute remote code via the parameterpath value of ArkNormalizeAndDupPAthNameW function because of an integer overflow...
CVE-2022-24822
Podium is a library for building micro frontends. @podium/layout is a module for building a Podium layout server, and @podium/proxy is a module for proxying HTTP requests from a layout server to a podlet server. In @podium/layout prior to version 4.6.110 and @podium/proxy prior to version 4.2.74,...
USN-7248-1 libndp vulnerability
It was discovered that libndp incorrectly handled certain malformed IPv6 router advertisement packets. A local attacker could possibly use this issue to cause NetworkManager to crash, resulting in a denial of service, or the execution of arbitrary code...
CVE-2024-10395 net: lib: http_server: Buffer Under-read
No proper validation of the length of user input in httpservergetcontenttypefromextension...
Important: Red Hat Security Advisory: redis:6 security update
An update for the redis:6 module is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions, and Red Hat Enterprise Linux 8.4 Telecommunications Update Service. Red Hat Product Security has rated this...
The vulnerability of the Boost library in the Mercedes-Benz MBUX multimedia system allows a intruder to trigger a service failure.
The vulnerability of the Boost library in the Mercedes-Benz MBUX multimedia system is related to integer overflow when processing values of cid. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the Boost library in the Mercedes-Benz MBUX multimedia system, related to the manipulation of the zero pointer, allows a intruder to compromise the accessibility of protected information.
The vulnerability of the Boost library in the Mercedes-Benz MBUX multimedia system is related to a pointer assignment error. Exploiting this vulnerability could allow an attacker to compromise the accessibility of the protected information...
CVE-2024-56277
Improper Encoding or Escaping of Output vulnerability in Poll Maker Team Poll Maker. This issue affects Poll Maker: from n/a through n/a...
ROS-20250121-06
A vulnerability in the Tornado asynchronous network library is related to the fact that the application does not control internal resource consumption properly when analyzing HTTP-cookies. internal resource consumption properly when analyzing HTTP-cookies. Exploitation of the vulnerability could...
CVE-2025-23221
Summary: CVE-2025-23221 affects Fedify’s Webfinger handling, enabling an attacker to abuse lookupWebFinger to trigger an endless redirect loop and potential Blind SSRF, leading to Denial of Service. Multiple sources (Red Hat, NVD/NVD-like entries, OSV, GHSA advisories, Veracode) describe the issu...
Important: Red Hat Security Advisory: redis security update
An update for redis is now available for Red Hat Enterprise Linux 9.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...