32226 matches found
The Sleuth Kit through 4.15.0 Heap Out-of-Bounds Read via HFS+ decmpfs Header
...
The Sleuth Kit through 4.15.0 NULL Pointer Dereference via decmpfs LZVN Decompression
...
CGI versions before 5.00 for Perl allow the POSTDATA, PUTDATA, PATCHDATA and XForms:Model parameters to be set from the query string or form fields
...
CGI versions before 5.00 for Perl allow open redirects via HTML entity decoding of the URL after application validation in redirect
...
CGI versions before 5.00 for Perl trust the client X-Forwarded-Host header in url, self_url, virtual_host and virtual_port
...
CGI versions before 5.00 for Perl allow CPU exhaustion via a backtracking regex on the XForms multipart/related Content-Type
...
CGI versions before 5.00 for Perl allow an infinite loop on a short request body when $DISABLE_UPLOADS is set
...
CGI versions before 5.00 for Perl allow memory, CPU and disk exhaustion via missing or unenforced request size, parameter and upload limits
...
CGI versions before 5.00 for Perl allow HTML injection via text containing --> in comment
...
CGI versions before 5.00 for Perl allow Content-Disposition parameter injection via unescaped double quotes in the header attachment filename
...
CGI versions before 5.00 for Perl return upload filenames with any client-supplied path, including ../ and Windows paths
...
CGI::Cookie versions before 5.00 for Perl allow cookie attribute injection via unvalidated path, domain and expires values
...
CGI versions before 5.00 for Perl return request-derived values untainted under taint mode
...
CGI versions before 5.00 for Perl allow HTTP header injection via entity decoding after the newline check in header and unchecked values in multipart_start and do_push
...
CGI versions before 5.00 for Perl allow open redirects and script injection via URLs built from REQUEST_URI in url and start_form
...
CGI versions before 5.00 for Perl allow form fields to be smuggled past proxies and WAFs via multipart parsing that differs from the RFCs
...
CGI versions before 5.00 for Perl allow denial of service via submitted values used as a regex for optgroup selection in scrolling_list
...
Libmodulemd: libmodulemd: out-of-bounds read when emitting rpm-map artifacts
...
Json-glib: json-glib: infinite loop in json_path_query() with negative jsonpath slice step
...
Missing origin validation for the externalbrowser authenticator callback in multiple Snowflake client drivers
...
Git for Windows: git-credential-wincred OAuth Store Heap Overflow
...
Git for Windows: git-credential-wincred Erase Path Heap Overflow
...
frr: ospf6d fails to enforce all OSPFv3 packets use IPv6 link-local addresses
...
Malicious client could set xattr value outside of BuildKit state directory
...
filelock: WindowsFileLock ignores mode: a 0o600 lock file and the ReadWriteLock database inherit the directory ACL
...
ntopng: Stack buffer overflow (write) in nDPI custom category detection allows remote code execution via crafted network packets
...
ntopng: authenticated (non-admin) OS command injection via the vulnerability-scan `scan_ports` parameter (`nmap` argument reaches `popen`)
...
Entra Device Registration Elevation of Privilege Vulnerability
Authorization bypass through user-controlled key in Entra Device Registration allows an unauthorized attacker to elevate privileges over a network...
gopacket: SCTP chunk sub-decoder out-of-bounds panics on crafted segments
...
Prometheus through 3.15.1 Credential Leak via remote_write Cross-Host Redirects
...
NULL pointer dereference vulnerability in QCborValue to JSON conversion impacts Qt
...
Libslirp: libslirp: queue pointer corruption in if_output() leading to denial of service
...
Libslirp: libslirp: out-of-bounds heap read in icmp_forward_error() leading to information disclosure
...
Unsafe Deserialization in keras.layers.TorchModuleWrapper.from_config
...
libmspack through 0.11alpha Uninitialized Memory Disclosure via MS-ZIP Decompressor Window
...
Integer Underflow Leads to Out-of-Bounds Read via Truncated Chunk in HDF5 Szip Filter
...
Uninitialized Heap Memory Disclosure via Truncated Chunk in HDF5 Scale-Offset Filter
...
Allocation of Resources Without Limits or Throttling in Elasticsearch Leading to Denial of Service
...
Use of Cache Containing Sensitive Information in Elasticsearch Leading to Information Disclosure
...
Incorrect Authorization in Elasticsearch Leading to Information Disclosure
...
rsync < 3.5.2 Denial of Service via hash_search() Checksum Collisions
...
tcp: Fix potential UAF in reqsk_timer_handler().
...
NULL Pointer Dereference in H5HL_unprotect via Corrupted File
...
Heap Buffer Over-read via Non-Terminated Link Data in H5L__extern_traverse
...
Heap Buffer Over-read via Malformed Message Size in HDF5's H5O__chunk_deserialize
...
Chromium CVE-2026-76028: Use after free
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium CVE-2026-76024: Memory corruption
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium CVE-2026-76025: Use after free
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium CVE-2026-76029: Memory corruption
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium CVE-2026-119263: Memory corruption
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...