151873 matches found
Microsoft.OpenAPI: Circular schema references may terminate OpenAPI parsing
Impact A small OpenAPI document containing a circular schema reference can cause process termination through stack overflow in Microsoft.OpenApi. The issue affects OpenAPI document parsing through public OpenAPI.NET reader APIs and has been confirmed across both JSON and YAML reader paths. Affect...
CVE-2026-13316
Foreman (HTTP proxies: http_proxies_controller, http_proxy) is affected by a flaw that allows SSRF, enabling access to cloud metadata services in AWS/GCP/Azure environments via modified HTTP parameters. Root cause involves unvalidated/test_url parameters in Foreman’s configuration paths. Impact i...
EUVD-2026-40281
A flaw has been found in foreman when HTTP parameters are modified in httpproxiescontroller and httpproxy files. Attackers can perform an SSRF attack and steal cloud metadata service on AWS/GCP/Azure environment through foreman component...
CVE-2026-13316
A flaw has been found in foreman when HTTP parameters are modified in httpproxiescontroller and httpproxy files. Attackers can perform an SSRF attack and steal cloud metadata service on AWS/GCP/Azure environment through foreman component. Mitigation Mitigation for this issue is either not availab...
ROS-20260630-73-0027
The vulnerability of the vmbusdisconnect function in the drivers/hv/connection.c module of the Microsoft HyperV Linux operating system kernel is related to the dereferencing of the NULL pointer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, an...
PT-2026-53837
A flaw has been found in foreman when HTTP parameters are modified in http proxies controller and http proxy files. Attackers can perform an SSRF attack and steal cloud metadata service on AWS/GCP/Azure environment through foreman component...
CVE-2026-13316
A flaw has been found in foreman when HTTP parameters are modified in httpproxiescontroller and httpproxy files. Attackers can perform an SSRF attack and steal cloud metadata service on AWS/GCP/Azure environment through foreman component...
Nmap - Integer Underflow in IPv6 Extension Header Parsing
...
bpf: Free reuseport cBPF prog after RCU grace period.
...
Vulnerabilities handled in the n8n workflow automation platform
n8n has identified several vulnerabilities in the n8n workflow automation platform, particularly in versions 1.123.55, 2.24.0, 2.25.7, 2.26.1, and 2.26.2. These vulnerabilities affect various components of the n8n platform. Authorized users with workflow processing rights can exploit...
The vulnerability of the Business Chat function in Microsoft 365 Copilot allows attackers to escalate their privileges.
The vulnerability of the Business Chat function in Microsoft 365 Copilot relates to the redirection of URLs to unreliable websites. Exploiting this vulnerability could allow a malicious actor to gain increased privileges remotely...
The vulnerability of Microsoft Exchange Online for corporate email services, related to the lack of authentication, allows attackers to escalate their privileges.
The vulnerability of Microsoft Exchange Online corporate email service is related to the lack of authentication. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...
The vulnerability of Microsoft 365 Copilot’s intelligent virtual assistant, related to the lack of authentication for a critical function, allows a perpetrator to disclose confidential information.
The vulnerability of Microsoft 365 Copilot’s intelligent virtual assistant is related to the lack of authentication for a critical function. Exploiting this vulnerability could allow a malicious actor to disclose confidential information remotely...
The vulnerability of Microsoft 365 Copilot’s intelligent virtual assistant, related to the lack of data cleaning at the management level, allows a perpetrator to gain access to read and modify data.
The vulnerability of Microsoft 365 Copilot’s intelligent virtual assistant is related to the lack of measures taken at the control level to protect data. Exploiting this vulnerability could allow a malicious actor to gain read and edit access to data...
The vulnerability of the Microsoft Dynamics 365 resource planning software relates to deficiencies in access control, allowing an intruder to increase their privileges.
The vulnerability of the Microsoft Dynamics 365 resource planning software is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to increase their privileges remotely...
The vulnerability of Microsoft Edge browsers relates to the lack of protection for website structure, allowing attackers to perform data substitution attacks.
The vulnerability of Microsoft Edge relates to the lack of measures taken to protect the structure of a web page. Exploiting this vulnerability can allow a malicious actor to perform data substitution remotely...
WebOb: Location header normalization during redirect leads to open redirect
...
padata: Put CPU offline callback in ONLINE section to allow failure
...