28854 matches found
CR Injection in SSE Encoder Enables Event Splitting via cow_sse:event/1
...
Unbounded chunk-size hex digits in cowlib cause quadratic CPU and memory DoS
...
Cookie Request Header Injection via Unvalidated Encoder in cow_cookie:cookie/1
...
The expat and elementtree parsers use insufficient entropy for XML hash-flooding protection
...
Openvswitch: open vswitch: denial of service via malformed ftp epasv command
...
Gnutls: gnutls: authentication bypass via nul character in username
...
CVE-2026-4890
...
CVE-2026-5172
...
CVE-2026-2291
...
CVE-2026-4893
...
CVE-2026-4891
...
Twisted: Denial of Service (DoS) in twisted.names via Crafted DNS Compression Pointer Chains
...
Microsoft Exchange Server Spoofing Vulnerability
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network...
Microsoft Authenticator Information Disclosure Vulnerability
Exposure of sensitive information to an unauthorized actor in Microsoft Authenticator allows an unauthorized attacker to disclose information over a network...
cross-proxy Digest auth state leak
...
proxy credentials leak over redirect-to proxy
...
wrong reuse of HTTP Negotiate connection
...
netrc credential leak with reused proxy connection
...
connection reuse ignores TLS requirement
...
stale custom cookie host causes cookie leak
...
jq: stack overflow in module loading on mutual `include`
...
XML::LibXML versions through 2.0210 for Perl read out-of-bounds heap memory when parsing XML node names containing truncated UTF-8 byte sequences
...
9p/xen: protect xen_9pfs_front_free against concurrent calls
...
drm/i915/dsi: Don't do DSC horizontal timing adjustments in command mode
...
jq: Embedded NUL truncates top-level jq programs loaded with -f
...
jq: Stack overflow via unbounded recursion in jv_contains
...
jq: Embedded NUL in jq import paths causes local redaction-policy bypass and preserves sensitive fields in published artifacts
...
jq: Stack Overflow in Recursive Object Merge
...
jq: Wild stack write via signed-integer overflow in decNumber D2U() macro
...
jq: Signed-int overflow in `stack_reallocate` (jq VM stack)
...
Microsoft SharePoint Server Remote Code Execution Vulnerability
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...
Secure Boot Security Feature Bypass Vulnerability
Reliance on a component that is not updateable in Windows Secure Boot allows an authorized attacker to bypass a security feature locally...
Windows Admin Center in Azure Portal Elevation of Privilege Vulnerability
Improper access control in Windows Admin Center allows an authorized attacker to elevate privileges over a network...
Windows Common Log File System Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally...
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally...
ASP.NET Core Denial of Service Vulnerability
Loop with unreachable exit condition 'infinite loop' in ASP.NET Core allows an unauthorized attacker to deny service over a network...
Microsoft Office Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally...
Microsoft Teams Spoofing Vulnerability
Files or directories accessible to external parties in Microsoft Teams allows an unauthorized attacker to perform spoofing locally...
Windows TCP/IP Denial of Service Vulnerability
...
Visual Studio Code Remote Code Execution Vulnerability
Improper neutralization of script-related html tags in a web page basic xss in Visual Studio Code allows an unauthorized attacker to execute code locally...
Microsoft Data Formulator Remote Code Execution Vulnerability
Improper control of generation of code 'code injection' in Microsoft Data Formulator allows an unauthorized attacker to execute code over a network...
Microsoft Excel Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally...
Internet Key Exchange (IKE) Protocol Denial of Service Vulnerability
Missing release of memory after effective lifetime in Windows Internet Key Exchange IKE Protocol allows an unauthorized attacker to deny service over a network...
Windows 11 Telnet Client Information Disclosure Vulnerability
Out-of-bounds read in Telnet Client allows an unauthorized attacker to disclose information over a network...
Windows Storport Miniport Driver Denial of Service Vulnerability
Null pointer dereference in Windows Storport Miniport Driver allows an unauthorized attacker to deny service over a network...
Windows Kernel Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally...
.NET Elevation of Privilege Vulnerability
Heap-based buffer overflow in .NET allows an unauthorized attacker to elevate privileges locally...
Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability
Improper control of generation of code 'code injection' in Microsoft Dynamics 365 on-premises allows an authorized attacker to execute code over a network...