SUSE CVE-2022-24836

Nokogiri is an open source XML and HTML library for Ruby. Nokogiri = 1.13.4. There are no known workarounds for this issue...

CVE-2022-29557

LexisNexis Firco Compliance Link 3.7 allows CSRF...

CVE-2023-21778

Microsoft Dynamics Unified Service Desk Remote Code Execution Vulnerability...

CVE-2023-21567

Visual Studio Denial of Service Vulnerability...

CVE-2023-23378

Print 3D Remote Code Execution Vulnerability...

CVE-2023-23377

3D Builder Remote Code Execution Vulnerability...

CVE-2023-21813

Windows Secure Channel Denial of Service Vulnerability...

CVE-2023-21819

Windows Secure Channel Denial of Service Vulnerability...

CVE-2023-21802

Windows Media Remote Code Execution Vulnerability...

CVE-2023-21807

Microsoft Dynamics 365 on-premises Cross-site Scripting Vulnerability...

CVE-2023-21722

.NET Framework Denial of Service Vulnerability...

CVE-2023-21714

Microsoft Office Information Disclosure Vulnerability...

CVE-2023-21721

Microsoft OneNote Elevation of Privilege Vulnerability...

CVE-2023-21718

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability...

CVE-2023-21704

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability...

CVE-2023-21690

Microsoft Protected Extensible Authentication Protocol PEAP Remote Code Execution Vulnerability...

CVE-2023-21688

NT OS Kernel Elevation of Privilege Vulnerability...

CVE-2023-21691

Microsoft Protected Extensible Authentication Protocol PEAP Information Disclosure Vulnerability...

CVE-2023-25564 GSS-NTLMSSP vulnerable to memory corruption when decoding UTF16 strings

GSS-NTLMSSP is a mechglue plugin for the GSSAPI library that implements NTLM authentication. Prior to version 1.2.0, memory corruption can be triggered when decoding UTF16 strings. The variable outlen was not initialized and could cause writing a zero to an arbitrary place in memory if...

GHSA-8H3G-HCWP-6HXQ semver-tags is vulnerable to Command Injection via the getGitTagsRemote function

All versions of the package semver-tags are vulnerable to Command Injection via the getGitTagsRemote function due to improper input sanitization...