28400 matches found
NATS Server: Subscribe Authz Bypass via Wildcard-Overlap
...
NATS Server: Pre-auth server crash via double INFO in leafnode handshake
...
NATS Server: MQTT-over-WebSocket Path Can Crash WebSocket-Only JetStream Servers Before MQTT Is Enabled
...
NATS Server: Queue Subscribe Authz Bypass
...
NATS Server: Remote crash via integer overflow in Connz pagination
...
setuptools: MANIFEST.in exclusion bypass in sdist via Unicode normalization collision (NFC/NFD) on macOS APFS/HFS+
...
DBI versions before 1.650 for Perl read one byte out-of-bounds in preparse when deleting an initial SQL comment
...
DBI versions before 1.650 for Perl are vulnerable to code injection via caller-influenced Profile
...
DBI versions before 1.650 for Perl have a heap overflow when preparsing SQL statements with an extreme number of placeholders
...
Out-of-bound read in mtr
...
sshd in OpenSSH before 10.4 has an undocumented security-relevant behavior: GSSAPIStrictAcceptorCheck has no value if the server is in Windows Active Directory.
...
ClamAV DMG File Processing Denial of Service Vulnerability
...
ClamAV ALZ Archive Processing Denial of Service Vulnerability
...
ClamAV PESpin File Format Processing Out-of-Bounds Memory Corruption Vulnerability
...
ClamAV InstallShield File Format Processing Resource Exhaustion Vulnerability
...
ClamAV 7Zip File Format Processing Out-of-Bounds Memory Corruption Vulnerability
...
ClamAV FSG File Format Processing Out-of-Bounds Memory Corruption Vulnerability
...
ClamAV PE File Format Processing Out-of-Bounds Memory Corruption Vulnerability
...
Vim: Arbitrary Code Execution via PHP Omni-Completion
...
NULL Pointer Dereference in GNU patch
...
Loop with Unreachable Exit Condition in GNU patch
...
etcd: gRPC client listener does not enforce `--client-crl-file` certificate revocation
...
Pion DTLS: Denial of service via panic while parsing a crafted ECDHE_PSK ServerKeyExchange message
...
ruby webrick through v1.9.2 WEBrick reparses trailer Content-Length into canonical request state, enabling request smuggling.
...
ntopng through 6.6 is vulnerable to Predictable Session Identifier which can lead to Session Hijacking. HTTP session identifiers in src/HTTPserver.cpp use weak time-seeded pseudo-randomness during session creation. As a result, fresh authenticated logins can receive deterministic or colliding session cookies under attacker-controlled timing.
...
netfilter: synproxy: add mutex to guard hook reference counting
...
xorg-x11-server / xwayland GLX contextTags Use-After-Free in CommonMakeCurrent()
...
libXfont2 PCF Font Parsing Heap Buffer Overflow
...
libXfont2 computeProps Property Buffer Heap Buffer Overflow
...
libXfont2 BitmapScaleBitmaps Integer Overflow Heap Buffer Overflow
...
ssh in OpenSSH before 10.4 can have a use-after-free when a server changes its host key during a key re-exchange. (This outcome occurs only on the client side.)
...
In sshd in OpenSSH before 10.4, DisableForwarding=yes was supposed to take precedence over PermitTunnel=yes, but did not.
...
sshd in OpenSSH before 10.4 allows remote attackers to cause a denial of service (resource consumption from excessive authentication attempts) because MaxAuthTries was mishandled for GSSAPIAuthentication.
...
sshd in OpenSSH before 10.4 does not always honor the minimum authentication delay.
...
sftp in OpenSSH before 10.4 does not properly constrain the location of downloaded files when "sftp server:/path ." is used with an attacker-controlled server.
...
scp in OpenSSH before 10.4 may place a file in the parent directory of an intended directory when the copy occurs between two remote destinations.
...
internal-sftp in sshd in OpenSSH before 10.4 recognizes only the first 9 command-line arguments, which can be important if a later command-line argument would have helped to ensure the intended security properties of an SFTP connection.
...
Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
Improper access control in Microsoft Edge Chromium-based allows an unauthorized attacker to bypass a security feature over a network...
wifi: mt76: mt7921: Place upper limit on station AID
...
onnx onnxruntime old.cc convPoolShapeInference_opset19 out-of-bounds
...
Arbitrary HDF5 File Read via Virtual Dataset Bypass in keras-team/keras
...
SSH SFTP server denial of service via extended channel data infinite loop
...
KVM: x86: Fix shadow paging use-after-free due to unexpected role
...
ipv6: account for fraggap on the paged allocation path
...
af_unix: Set gc_in_progress to true in unix_gc().
...
ext/openssl: Memory corruption in openssl_encrypt with AES-WRAP-PAD
...
password leak with netrc and user in URL
...
HTTP/2 stream-dependency tree UAF
...