5168 matches found
dotnet: .NET Core: Denial of Service via type confusion
A flaw was found in .NET Core. This vulnerability, known as type confusion, allows an unauthorized remote attacker to cause a denial of service DoS over a network. By exploiting this flaw, an attacker can make the affected system unavailable to legitimate users...
dotnet: .NET: Local tampering via improper link resolution
A flaw was found in .NET. This vulnerability, stemming from improper link resolution before file access, allows an authorized local attacker to perform tampering. This could lead to unauthorized modification of data or system files...
dotnet: SocketsHttpHandler Http2Connection - HTTP/2 SETTINGS/PING ACK flood causing OOM
.NET Denial of Service Vulnerability - HTTP/2 SETTINGS/PING ACK flood causing OOM...
dotnet: .NET Framework: Local Code Execution via Protection Mechanism Failure
A flaw was found in .NET Framework. This protection mechanism failure allows an unauthorized attacker to execute arbitrary code locally. Successful exploitation of this vulnerability can lead to a complete compromise of the affected system...
dotnet: SocketsHttpHandler Http2Connection - HTTP/2 SETTINGS/PING ACK flood causing OOM
.NET Denial of Service Vulnerability - HTTP/2 SETTINGS/PING ACK flood causing OOM...
SUSE CVE-2026-15904
Use after free in Ozone in Google Chrome on Linux prior to 150.0.7871.128 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...
CVE-2026-58250 affecting package telegraf for versions less than 1.31.0-24
CVE-2026-58250 affecting package telegraf for versions less than 1.31.0-24. A patched version of the package is available...
CVE-2026-50289
systeminformation is a System and OS information library for node.js. Prior to 5.31.7, networkInterfaces on Linux is vulnerable to OS command injection through the Debian/Ubuntu interfaces5 source directive because lib/network.js checkLinuxDCHPInterfaces reads /etc/network/interfaces, extracts a...
CVE-2026-50185
RustCrypto CMOV provides conditional move CPU intrinsics which are guaranteed on major platforms to execute in constant-time and not be rewritten as branches by the compiler. From 0.1.1 until 0.5.4, the aarch64 implementations of Cmov and CmovEq in cmov/src/backends/aarch64.rs assume high bits ar...
GHSA-25XW-CF43-5CCV vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-53716 vulnerabilities
Vulnerabilities for packages: tigera-operator, datadog-agent...
CVE-2026-43010 affecting package kernel for versions less than 6.6.144.1-1
CVE-2026-43010 affecting package kernel for versions less than 6.6.144.1-1. A patched version of the package is available...
CVE-2026-53361 affecting package kernel for versions less than 6.6.144.1-1
CVE-2026-53361 affecting package kernel for versions less than 6.6.144.1-1. An upgraded version of the package is available that resolves this issue...
CVE-2023-24816 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines-visualization-server...
SUSE CVE-2026-38974
Dulwich through 1.1.0 was found to be missing SSH host key verification in contrib/paramikovendor.py...
ROS-20260716-73-0042
The vulnerability of the didsetspelllang function in the Vim text editor is related to the use of memory after it is freed. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions...
GHSA-RGJC-H3X7-9MWG vulnerabilities
Vulnerabilities for packages: kubeflow-katib...
GHSA-58W9-8G37-X9V5 vulnerabilities
Vulnerabilities for packages: kubeflow-katib...