4462 matches found
Stack overflow in phar with circular symlinks
...
Exploit for Deserialization of Untrusted Data in Microsoft
No d...
Possible NULL Dereference in Password-Based CMS Decryption
...
Exploit for Use of Uninitialized Resource in Microsoft
No d...
CVE-2026-44641 Microsoft APM: plugin.json component paths escape plugin root and copy arbitrary host files during install
Microsoft APM is an open-source, community-driven dependency manager for AI agents. Prior to 0.8.12, Microsoft APM normalizes marketplace plugins by copying plugin components referenced in plugin.json into .apm/. The manifest fields agents, skills, commands, and hooks are attacker-controlled, but...
A NULL pointer dereference vulnerability exists in fio (Flexible I/O Tester) v3.41 when parsing job files containing the fdp_pli option. The callback function str_fdp_pli_cb() does not validate the input pointer and calls strdup() on a NULL value when the option is specified without an argument. This results in a segmentation fault and process crash.
...
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).
...
CVE-2022-26355
Citrix Federated Authentication Service FAS 7.17 - 10.6 causes deployments that have been configured to store a registration authority certificate's private key in a Trusted Platform Module TPM to incorrectly store that key in the Microsoft Software Key Storage Provider MSKSP. This issue only...
node-forge ASN.1 OID Integer Truncation
...
Microsoft .NET Buffer Overflow DoS
The vulnerability of the Microsoft .NET software platform is related to overflow in the dynamic memory buffers. Exploiting this vulnerability can allow an attacker to cause a service failure remotely...
EUVD-2015-0093
Malware in sbrugna...
EUVD-2017-0476
Malware in sbrugna...
EUVD-2018-20141
Malware in sbrugna...
EUVD-2022-30914
Malicious code in bioql PyPI...
Path traversal via Clean on Windows in path/filepath
...
2025-07 Cumulative Update for Windows 10 Version 1507 for x86-based Systems (KB5062561)
A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...
2025-07 Cumulative Update for Windows 10 Version 1607 for x64-based Systems (KB5062560)
A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...
2025-07 Cumulative Update for Windows 10 Version 1607 for x86-based Systems (KB5062560)
A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...
2025-07 Cumulative Update for Windows 10 Version 1809 for x86-based Systems (KB5062557)
A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...
2025-06 Dynamic Cumulative Update for Windows 10 Version 21H2 for ARM64-based Systems (KB5060533)
ComponentUpdate: A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft...