28423 matches found
zlib 1.2.11 through 1.3.2 Heap Buffer Overflow via Stale gzwrite Pointer After Failed Write
...
Usbredir: usbredir: unbounded iso_packet_desc[] index in usbredirhost_iso_packet() leads to heap out-of-bounds write
...
gitoxide gix-fs before 0.23.0 Worktree Escape via Symlink
...
Rpm: code execution via macro expansion of manifest entries in `rpmgi` (`-q -p` / verify manifest flows)
...
Rpm: rpm: shell command injection via macro expansion of source/spec file basenames when installing a source rpm
...
RabbitMQ: Incomplete fix for CVE-2026-44838: `escape_regex_char/1` does not escape `-`, leaving room for an MQTT topic permission bypass
...
RabbitMQ: Admin path-traversal write via trace name
...
RabbitMQ: Authenticated RabbitMQ JMS Topic Selector Users Can Consume Broker CPU with an Unbounded LIKE Regular Expression
...
RabbitMQ: OAuth2 Client Secret Exposed via Unauthenticated JavaScript Endpoint
...
RabbitMQ: LDAP DN injection via unescaped substitution
...
RabbitMQ: Atom table exhaustion via management API node field
...
RabbitMQ: Atom exhaustion: OAuth2 JWT tag: scope values
...
RabbitMQ: Web MQTT with PROXY Protocol enabled: a loopback-only user permission bypass
...
RabbitMQ: Atom exhaustion: to_atom on global-parameter :name
...
RabbitMQ: Trust-store whitelist by Issuer+Serial only
...
RabbitMQ: Federation upstream skips vhost authorization allowing cross-vhost message access
...
RabbitMQ: Web-STOMP unbounded pre-auth accumulation
...
Qemu-kvm: 9pfs: use-after-free race in tlcreate/twalk allows vm guest escape
...
Qemu-kvm: vapic writable rom alias can escape the option-rom window and expose locked smram
...
Axios: Header Injection via Inherited headers After Minimal Interceptor
...
sprintf-js through 1.1.3 Denial of Service via Unbounded Precision
...
brace-expansion: Quadratic-time expansion of the `{a},b}` rewrite causes CPU denial of service
...
brace-expansion: DoS via uncontrolled recursion in parseCommaParts causing stack exhaustion
...
Axios: Prototype-Pollution Gadget in the Default Instance Allows Inherited Object.prototype.method to Override HTTP Method
...
brace-expansion: DoS via uncontrolled recursion on nested brace groups causing stack exhaustion
...
PyJWK accepts empty HMAC keys, bypassing PyJWT's empty-key validation
...
PyJWT: Malformed RSA JWK aborts parsing of an entire JWK Set
...
PyJWT accepts inconsistent OKP x/d JWKs, causing public/private key identity confusion
...
PyJWT: Uncaught RecursionError in jwt.decode() on deeply nested token header
...
PyJWT accepts public JWK containers as HMAC secrets
...
PyJWT BOM Bypass
...
PyJWT: Public keys in DER form are accepted as HMAC secrets, bypassing the CVE-2022-29217 guard
...
PyJWT: Unauthenticated RecursionError DoS in pre-verification payload parse (PyJWKClient.get_signing_key_from_jwt / verify_signature=False)
...
DBI versions before 1.654 for Perl incorrectly treat numeric values as strings in FetchHashKeyName
...
DBI versions before 1.654 for Perl incorrectly treat numeric values as strings in sql_type_cast_svpv
...
roxmltree through 0.21.1 Denial of Service via Quadratic Parsing
...
CRL check skipped when OCSP enabled and certificate has no OCSP URL
...
Heap use-after-free on read during bidirectional (D)TLS shutdown
...
(D)TLS 1.2 client accepts early ChangeCipherSpec before ClientKeyExchange
...
Failed X509_verify_cert leaves unverified CA in shared CertManager
...
OCSP stapling v2 multi accepts non-CA chain certificates as issuers
...
Client session cache reference poisoning allows resumption with wrong server
...
Signature failure masked by date error under WOLFSSL_SMALL_CERT_VERIFY
...
Client accepts unsolicited RawPublicKey server certificate type
...
NameConstraints not enforced across unconstrained intermediate CA
...
Kubernetes kubectl cp path traversal on Windows allows arbitrary file writes
...
Sequoia-openpgp: sequoia-openpgp: cryptographic integrity compromise via key flag confusion
...
PHP on Windows: Reserved Device Names Are Not Rejected Before File/Stream I/O which can cause DoS
...