32226 matches found
RabbitMQ: list_to_atom on auth_mechanism URI tokens in amqp_client
...
RabbitMQ: CSWSH on Web-STOMP / Web-MQTT (no Origin validation)
...
RabbitMQ: Pre-auth AMQP 1.0 array32 zero-width element DoS
...
RabbitMQ: Shovel Management Atom Exhaustion Allows Persistent Broker-Wide Denial of Service
...
RabbitMQ: AMQP 1.0 shovel status exposes plaintext URI passwords
...
Out-of-bounds write in Das U-Boot
...
U-Boot through 2026.10-rc5 Out-of-Bounds Write in BMP RLE8 Decoder
...
U-Boot before 2026.10-rc4 Integer Overflow in SquashFS Directory Table Allocation
...
U-Boot before 2026.10-rc3 Out-of-Bounds Write in IP Fragment Reassembly
...
U-Boot before 2026.10-rc5 Buffer Overflow via NFS READLINK
...
U-Boot before 2026.10-rc5 Buffer Overflow via NFS READ Reply
...
Use-after-free of a server-side SSLContext when sni_callback switches contexts
...
SSLContext.wrap_bio() missing validation of server_hostname parameter
...
Race condition in tempfile.TemporaryDirectory cleanup allows deleting files outside the temporary directory
...
virtualenv bash and fish activation scripts execute commands embedded in paths
...
virtualenv writes prompt values into pyvenv.cfg without sanitizing line boundaries, allowing configuration injection
...
virtualenv: Downloaded seed wheels (pip/setuptools) are not integrity-checked before use
...
urllib3: HTTPResponse.stream()/read_chunked() buffers an unbounded chunk-size line into memory
...
piscina: Prototype-pollution gadget in ThreadPool.options allows RCE via execArgv / loadBalancer / env
...
Werkzeug safe_join() allows Windows special device names
...
urllib3: HTTPS proxy TLS configuration may be ignored or overridden
...
virtualenv: Command injection via --prompt in activate.bat (batch activator)
...
Mako: Path traversal via drive-letter URI on Windows in TemplateLookup
...
PyJWT.decode() reintroduces options-dict mutation, enabling silent claim-verification bypass on dict reuse
...
In Mbed TLS 3.2.0 though 3.6.6 and 4.0.0 through 4.1.0, an attacker who can cause an entropy source to fail can remove or inject bytes into the start of the TLS stream. This only affects TLS 1.3 servers.
...
Libsoup: libsoup: heap buffer overflow during websocket client-frame masking
...
Libsoup: libsoup: heap buffer overflow from websocket pong signal type confusion
...
Libsoup: libsoup: heap buffer overflow via uninitialized length in data-uri base64 decoding
...
Libsoup: libsoup: heap buffer overflow during websocket receive-buffer growth
...
Libsoup: libsoup: heap buffer overflow during websocket message reassembly
...
Libsoup: soupserver: http/1 request smuggling via undrained expect: 100-continue body
...
Libsoup: libsoup: heap buffer overflow during outgoing permessage-deflate buffer growth
...
Kubevirt: kubevirt: virt-controller nil-pointer dereference via malformed ephemeral volume
...
Integer Overflow or Wraparound and Out-of-bounds Write in compress
...
iperf3 3.21 (esnet/iperf) contains a remote, unauthenticated heap use-after-free: the server's per-test watchdog server_timer_proc() frees streams without cancelling/joining their worker threads, so a blocked worker dereferences a freed iperf_stream; fixed in 3.22.
...
Out-of-Bounds Access After SSL_set_SSL_CTX() During a Handshake
...
QUIC: Unbounded RETIRE_CONNECTION_ID Backlog
...
Timing Side-Channel in SM2 Signature Generation
...
QUIC Unvalidated Amplification Credit may be Over Accounted
...
QUIC Connection-Level Flow Control is Not Enforced for Streams
...
Potential CPU DoS via O(n^2) Fragment Reassembly in QUIC
...
Non-Constant-Time SM2 Scalar Multiplication on ARM64 and RISC-V
...
Timing Side-Channel in Scalar Multiplication for Non-NIST EC Curves
...
Excessive Memory Allocation in Relative CRLDP Processing
...
DTLS Retransmits Handshake Messages From a Stale Buffer Offset
...
Unauthenticated and Undersized DTLS 1.2 AEAD Record Causes DoS
...
NULL Pointer Dereference in CMP Client Revocation Response Handling
...
QUIC STREAM Fragment Metadata DoS
...