28472 matches found
Rpm: rpm: integer overflow in iterreadarchivenext() leads to heap-based buffer overflow when parsing untrusted rpm packages
...
Rpm: heap-based buffer overflow write in hex2binv() via a mistyped rpmtag_filesignatures header tag
...
Rpcbind: unbounded memory allocation in rpcbind statistics tracking allows unauthenticated remote denial of service
...
RabbitMQ: CORS * reflects Origin with Allow-Credentials
...
RabbitMQ: AMQP 0-9-1 body assembly never validates accumulated size
...
RabbitMQ: Web-MQTT decompression bomb
...
RabbitMQ: Stored XSS via TLS peer-certificate DN in management UI
...
RabbitMQ: Stored XSS via TLS peer-certificate DN in stream-management UI
...
RabbitMQ: Pre-auth AMQP 1.0 array32 zero-width element DoS
...
Out-of-bounds write in Das U-Boot
...
U-Boot through 2026.10-rc5 Out-of-Bounds Write in BMP RLE8 Decoder
...
U-Boot before 2026.10-rc4 Integer Overflow in SquashFS Directory Table Allocation
...
U-Boot before 2026.10-rc3 Out-of-Bounds Write in IP Fragment Reassembly
...
U-Boot before 2026.10-rc5 Buffer Overflow via NFS READLINK
...
U-Boot before 2026.10-rc5 Buffer Overflow via NFS READ Reply
...
Use-after-free of a server-side SSLContext when sni_callback switches contexts
...
SSLContext.wrap_bio() missing validation of server_hostname parameter
...
Race condition in tempfile.TemporaryDirectory cleanup allows deleting files outside the temporary directory
...
virtualenv bash and fish activation scripts execute commands embedded in paths
...
virtualenv: Downloaded seed wheels (pip/setuptools) are not integrity-checked before use
...
urllib3: HTTPResponse.stream()/read_chunked() buffers an unbounded chunk-size line into memory
...
piscina: Prototype-pollution gadget in ThreadPool.options allows RCE via execArgv / loadBalancer / env
...
Werkzeug safe_join() allows Windows special device names
...
urllib3: HTTPS proxy TLS configuration may be ignored or overridden
...
virtualenv: Command injection via --prompt in activate.bat (batch activator)
...
In Mbed TLS 3.2.0 though 3.6.6 and 4.0.0 through 4.1.0, an attacker who can cause an entropy source to fail can remove or inject bytes into the start of the TLS stream. This only affects TLS 1.3 servers.
...
Libsoup: libsoup: heap buffer overflow during websocket client-frame masking
...
Libsoup: libsoup: heap buffer overflow from websocket pong signal type confusion
...
Libsoup: libsoup: heap buffer overflow via uninitialized length in data-uri base64 decoding
...
Libsoup: libsoup: heap buffer overflow during websocket receive-buffer growth
...
Libsoup: libsoup: heap buffer overflow during websocket message reassembly
...
Libsoup: libsoup: heap buffer overflow during outgoing permessage-deflate buffer growth
...
Integer Overflow or Wraparound and Out-of-bounds Write in compress
...
iperf3 3.21 (esnet/iperf) contains a remote, unauthenticated heap use-after-free: the server's per-test watchdog server_timer_proc() frees streams without cancelling/joining their worker threads, so a blocked worker dereferences a freed iperf_stream; fixed in 3.22.
...
Out-of-Bounds Access After SSL_set_SSL_CTX() During a Handshake
...
QUIC: Unbounded RETIRE_CONNECTION_ID Backlog
...
Timing Side-Channel in SM2 Signature Generation
...
QUIC Unvalidated Amplification Credit may be Over Accounted
...
QUIC Connection-Level Flow Control is Not Enforced for Streams
...
Potential CPU DoS via O(n^2) Fragment Reassembly in QUIC
...
Non-Constant-Time SM2 Scalar Multiplication on ARM64 and RISC-V
...
Timing Side-Channel in Scalar Multiplication for Non-NIST EC Curves
...
Excessive Memory Allocation in Relative CRLDP Processing
...
DTLS Retransmits Handshake Messages From a Stale Buffer Offset
...
Unauthenticated and Undersized DTLS 1.2 AEAD Record Causes DoS
...
NULL Pointer Dereference in CMP Client Revocation Response Handling
...
QUIC STREAM Fragment Metadata DoS
...
Microsoft Exchange Server Elevation of Privilege Vulnerability
Weak authorization in Microsoft Exchange Server allows an authenticated attacker to elevate privileges over a network...