23530 matches found
DHCP Client Service Remote Code Execution Vulnerability
...
Microsoft Digest Authentication Remote Code Execution Vulnerability
...
Internet Connection Sharing (ICS) Denial of Service Vulnerability
...
Microsoft Office Remote Code Execution Vulnerability
...
Microsoft Office Remote Code Execution Vulnerability
...
Microsoft Excel Remote Code Execution Vulnerability
...
Windows Kernel Security Feature Bypass Vulnerability
...
Windows Telephony Service Remote Code Execution Vulnerability
...
Microsoft SharePoint Server Remote Code Execution Vulnerability
...
NTLM Hash Disclosure Spoofing Vulnerability
...
Microsoft Excel Remote Code Execution Vulnerability
...
Windows Remote Desktop Configuration Service Tampering Vulnerability
...
Windows Deployment Services Denial of Service Vulnerability
...
Windows Kerberos Denial of Service Vulnerability
...
Windows Telephony Server Remote Code Execution Vulnerability
...
Windows Telephony Service Remote Code Execution Vulnerability
...
Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability
...
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
...
Microsoft Excel Information Disclosure Vulnerability
...
Windows Core Messaging Elevation of Privileges Vulnerability
...
DHCP Client Service Denial of Service Vulnerability
...
Visual Studio Code JS Debug Extension Elevation of Privilege Vulnerability
...
Internet Connection Sharing (ICS) Denial of Service Vulnerability
...
Internet Connection Sharing (ICS) Denial of Service Vulnerability
...
Internet Connection Sharing (ICS) Denial of Service Vulnerability
...
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
...
The puppetlabs-stdlib module 2.1 through 3.0 and 4.1.0 through 4.5.x before 4.5.1 for Puppet 2.8.8 and earlier allows remote authenticated users to gain privileges or obtain sensitive information by prepopulating the fact cache.
...
Chromium: CVE-2025-0451 Inappropriate implementation in Extensions API
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2025-0445 Use after free in V8
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2025-0444 Use after free in Skia
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
...
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
...
Microsoft Edge for IOS and Android Spoofing Vulnerability
...
Microsoft Edge (Chromium-based) Spoofing Vulnerability
...
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
...
Microsoft Dynamics 365 Sales Elevation of Privilege Vulnerability
Server-side request forgery ssrf in Microsoft Dynamics 365 Sales allows an authorized attacker to elevate privileges over a network...
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
...
Microsoft Edge (Chromium-based) Spoofing Vulnerability
...
btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
...
Git LFS permits exfiltration of credentials via crafted HTTP URLs
...
xmlXIncludeAddNode in xinclude.c in libxml2 before 2.11.0 has a use-after-free.
...
With the aid of the diagnostics_channel utility, an event can be hooked into whenever a worker thread is created. This is not limited only to workers but also exposes internal workers, where an instance of them can be fetched, and its constructor can be grabbed and reinstated for malicious usage. This vulnerability affects Permission Model users (--permission) on Node.js v20, v22, and v23.
...
The email module of Python through 3.11.3 incorrectly parses e-mail addresses that contain a special character. The wrong portion of an RFC2822 header is identified as the value of the addr-spec. In some applications, an attacker can bypass a protection mechanism in which application access is granted only after verifying receipt of e-mail to a specific domain (e.g., only @company.example.com addresses may be used for signup). This occurs in email/_parseaddr.py in recent versions of Python.
...
Chromium: CVE-2025-0762 Use after free in DevTools
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Recursive repository cloning can leak authentication tokens to non-GitHub submodule hosts in the gh cli
...
go-gh `auth.TokenForHost` violates GitHub host security boundary within a codespace
...
Bad documentation of error handling in ParseWithClaims can lead to potentially dangerous situations in golang-jwt
...
drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check
...