24590 matches found
Vulnerability in the MySQL Server product of Oracle MySQL
...
Vulnerability in the MySQL Server product of Oracle MySQL
...
NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix
...
Vulnerability in the MySQL Server product of Oracle MySQL
...
Vulnerability in the MySQL Server product of Oracle MySQL
...
Vulnerability in the MySQL Server product of Oracle MySQL
...
Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in big requests extension
...
Absolute path traversal in zip:unzip/1,2
...
net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done
...
Prevent GitHub CLI and extensions from executing arbitrary commands from compromised GitHub Enterprise Server
...
Users: `root` appended to group listings
...
smb: client: Fix use-after-free in cifs_fill_dirent
...
dm: fix unconditional IO throttle caused by REQ_PREFLUSH
...
Vulnerability in the MySQL Server product of Oracle MySQL
...
Vulnerability in the MySQL Server product of Oracle MySQL
...
Vulnerability in the MySQL Server product of Oracle MySQL
...
GNU Binutils objcopy.c copy_section heap-based overflow
...
Vulnerability in the MySQL Server product of Oracle MySQL
...
sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue()
...
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).
...
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.0-8.0.25. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).
...
net/mlx5e: Avoid WARN_ON when configuring MQPRIO with HTB offload enabled
...
virtio_ring: Fix data race by tagging event_triggered as racy for KCSAN
...
Chromium: CVE-2025-8292 Use after free in Media Stream
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Libxml2: integer overflow in xmlbuildqname() leads to stack buffer overflow in libxml2
...
Libxml: type confusion leads to denial of service (dos)
...
Libxml: heap use after free (uaf) leads to denial of service (dos)
...
Perl threads have a working directory race condition where file operations may target unintended paths
...
Libxml2: stack buffer overflow in xmllint interactive shell command handling
...
AddressSanitizer: stack-buffer-overflow in jq_fuzz_execute (jv_string_vfmt)
...
Chromium: CVE-2025-8011 Type Confusion in V8
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2025-8010 Type Confusion in V8
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Microsoft SharePoint Server Spoofing Vulnerability
Improper authentication in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network...
Microsoft SharePoint Server Remote Code Execution Vulnerability
Deserialization of untrusted data in on-premises Microsoft SharePoint Server allows an unauthorized attacker to execute code over a network. Microsoft is aware that an exploit for CVE-2025-53770 exists in the wild. Microsoft is preparing and fully testing a comprehensive update to address this...
LuaJIT through 2.1 and OpenRusty luajit2 before v2.1-20240314 have an out-of-bounds read in the stack-overflow handler in lj_state.c.
...
LuaJIT through 2.1 and OpenRusty luajit2 before v2.1-20240626 have a stack-buffer-overflow in lj_strfmt_wfnum in lj_strfmt_num.c.
...
Microsoft Purview Elevation of Privilege Vulnerability
Permissive list of allowed inputs in Microsoft Purview allows an authorized attacker to elevate privileges over a network...
Azure Machine Learning Elevation of Privilege Vulnerability
Missing authorization in Azure Machine Learning allows an authorized attacker to elevate privileges over a network...
Azure DevOps Server Elevation of Privilege Vulnerability
Authentication bypass by assumed-immutable data in Azure DevOps allows an unauthorized attacker to elevate privileges over a network...
Azure Machine Learning Elevation of Privilege Vulnerability
Weak authentication in Azure Machine Learning allows an authorized attacker to elevate privileges over a network...
Azure Machine Learning Elevation of Privilege Vulnerability
Improper authorization in Azure Machine Learning allows an authorized attacker to elevate privileges over a network...
urllib3 redirects are not disabled when retries are disabled on PoolManager instantiation
...
HTMLParser quadratic complexity when processing malformed inputs
...
Apache HTTP Server: mod_ssl error log variable escaping
...
mtr through 0.95, in certain privileged contexts, mishandles execution of a program specified by the MTR_PACKET environment variable. NOTE: mtr on macOS may often have Sudo rules, as an indirect consequence of Homebrew not installing setuid binaries.
...
Gnutls: null pointer dereference in _gnutls_figure_common_ciphersuite()
...
Apache HTTP Server: SSRF with mod_headers setting Content-Type header
...
Apache HTTP Server: HTTP/2 DoS by Memory Increase
...