42714 matches found
golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing
A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname for example, xn--example-.com returns example.com instead of an error. Applications that validate the ASCII form then convert to Unicode may grant acce...
net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution
A flaw was found in net/url, a component of golang. This vulnerability arises when resolving relative paths that contain numerous parent directory '..' segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.18.56 security and extras update
Red Hat OpenShift Container Platform release 4.18.56 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.18. Red Hat Product Security has rated this update as having a security impact of...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.17.58 security and extras update
Red Hat OpenShift Container Platform release 4.17.58 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.17. Red Hat Product Security has rated this update as having a security impact of...
BIT-DOTNET-SDK-2026-69806 .NET Elevation of Privilege Vulnerability
Exposure of sensitive information to an unauthorized actor in .NET allows an authorized attacker to elevate privileges locally...
BIT-DOTNET-SDK-2026-69439 .NET and Visual Studio Elevation of Privilege Vulnerability
Heap-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network...
BIT-DOTNET-2026-69806 .NET Elevation of Privilege Vulnerability
Exposure of sensitive information to an unauthorized actor in .NET allows an authorized attacker to elevate privileges locally...
BIT-DOTNET-2026-69439 .NET and Visual Studio Elevation of Privilege Vulnerability
Heap-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network...
CLEANSTART-2025-SP12252 .NET and Visual Studio Denial of Service Vulnerability
CVE-2024-43485 affects multiple packages. . See references for individual vulnerability details...
CLEANSTART-2025-RR05020 .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability
CVE-2024-43484 affects multiple packages. . See references for individual vulnerability details...
CLEANSTART-2025-OA94377 .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability
CVE-2024-43483 affects multiple packages. . See references for individual vulnerability details...
CLEANSTART-2025-GH63258 .NET and Visual Studio Remote Code Execution Vulnerability
Security vulnerability affects the dotnet8-runtime package...
CLEANSTART-2025-KL68323 .NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability
CVE-2024-38081 affects multiple packages. . See references for individual vulnerability details...
CLEANSTART-2025-TK15864 .NET and Visual Studio Information Disclosure Vulnerability
Security vulnerability affects the dotnet8-runtime package...
CLEANSTART-2025-SC05664 .NET and Visual Studio Denial of Service Vulnerability
CVE-2024-38095 affects multiple packages. . See references for individual vulnerability details...
CLEANSTART-2025-BI46878 .NET Denial of Service Vulnerability
CVE-2024-20672 affects multiple packages. . See references for individual vulnerability details...
CLEANSTART-2025-BH85010 .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability
CVE-2024-21409 affects multiple packages. . See references for individual vulnerability details...
CLEANSTART-2025-GF30389 .NET and Visual Studio Remote Code Execution Vulnerability
Security vulnerability affects the dotnet8-runtime package...