28400 matches found
HDF5 out-of-bounds heap read in N-Bit filter decompression
...
KVM: x86: Check for invalid/obsolete root *after* making MMU pages available
...
HDF5 h5dump Untrusted Pointer Dereference in Binary Output of Variable-Length String Datasets
...
An incomplete fix has been identified in Node.js: HTTPS Agent TLS session reuse skips hostname verification across identity policies (incomplete fix of CVE-2026-48934). This vulnerability affects Node.js **22.x**, **24.x**, and **26.x**.
...
HDF5 divide-by-zero (SIGFPE) via mismatched chunk-layout dimensionality and dataspace rank on dataset open
...
A flaw in Node.js Permission Model enforcement can over-grant filesystem access across radix-tree prefix boundaries. Under `--permission`, an attacker who is granted access to one path can abuse boundary handling to read from or write to paths outside the intended filesystem allowlist. This vulnerability affects Node.js **main**, **22.x**, **24.x**, and **26.x**.
...
A flaw in Node.js Permission Model enforcement allows process.report writes (and overwrites) files outside --allow-fs-write paths. This can lead to confidentiality impact or bypass of the intended security boundary under affected configurations. This vulnerability affects Node.js **22.x**, **24.x**, and **26.x**.
...
A flaw in Node.js Permission Model enforcement allows `trace_events.createTracing().enable()` Writes Trace Logs Outside `--allow-fs-write`. This can lead to confidentiality impact or bypass of the intended security boundary under affected configurations. This vulnerability affects Node.js **22.x**, **24.x**, and **26.x**.
...
A flaw in Node.js HTTPS Agent connection reuse can cause PFX object-array key collisions, allowing mutual TLS (mTLS) client identities to be reused across requests configured with different client certificates. This vulnerability affects Node.js **26.x**, **24.x**, and **22.x**.
...
pip absolute path traversal during download from malicious package indexes
...
GoPacket's sFlow ExtendedGatewayFlow decoder: unbounded attacker-controlled allocation (104-byte UDP datagram -> up to 16 GiB make) -> unauthenticated remote DoS
...
Sg3_utils: sg3_utils: arbitrary command execution via udev property injection in sg_inq --export
...
Cowboy HTTP/1.1 max_headers Bypass via Duplicate Header Names Enables Memory Exhaustion
...
Unbounded HPACK/QPACK prefixed-integer decoding in Cowlib causes memory-exhaustion DoS
...
Quadratic Behavior in xml.etree.ElementPath Index Predicates
...
Double-free When Checking OCSP Stapled Response
...
NULL Dereference in Certificate Verification with OCSP Checking
...
Heap pointer corruption via signed/unsigned mismatch in LARGE_TUPLE_EXT decoding in erts external term format decoder
...
TLS/DTLS denial of service via unbounded recursion on cross-signed peer certificate chain
...
Denial of service via exponential certificate policy tree growth in path validation
...
epmd permanent DoS via EMFILE on accept(2) in erts
...
TLS 1.2 and DTLS client accepts unoffered anonymous cipher suite, bypassing server authentication
...
Virt-cdi-operator: containerized-data-importer: cdi.kubevirt.io:view aggregated clusterrole grants create on datavolumes/source, allowing unauthorized pvc clone
...
Binutils: gnu binutils: heap-buffer-overflow in linker leads to information disclosure and denial of service
...
Integer Overflow Leading to Heap Buffer Overflow in cJSON
...
Stack overflow in phar with circular symlinks
...
SQL injection in ext-pgsql via E'...' backslash breakout
...
posix-cpu-timers: Prevent UAF caused by non-leader exec() race
...
Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb()
...
perf/core: Detach event groups during remove_on_exec
...
Arbitrary Output Location Change in GNU Bison
...
Arbitrary Command Execution in GNU Bison
...
XML injection vulnerability in QDom comment, CDATA and processing-instruction serialization
...
Libsoup: libsoup: heap buffer over-read via integer underflow in soup_filter_input_stream_read_until()
...
Libsoup: libsoup: proxy credentials leak to destination server via proxy-authorization header in connect tunnels
...
Libsoup: libsoup: http request smuggling via permissive chunk-size parsing in soup_body_input_stream_read_chunked()
...
Apache Thrift: c_glib heap out-of-bounds read in transport leftover-bytes path
...
Apache Thrift: c_glib TLS Client Missing Hostname Verification
...
Bluetooth: bpa10x: avoid OOB read of revision string in bpa10x_setup()
...
crypto: asymmetric_keys - fix OOB read in pefile_digest_pe_contents
...
drm/edid: fix OOB read in drm_parse_tiled_block()
...
net: usb: net1080: validate packet_len before pad-byte access in rx_fixup
...
Apache Thrift: C++ ZLIB heap buffer overflow (write) in THeaderTransport::untransform()
...
Azure SQL Database Elevation of Privilege Vulnerability
Incorrect permission assignment for critical resource in Azure SQL Database allows an authorized attacker to elevate privileges locally...
Copilot Cowork Elevation of Privilege Vulnerability
Improper authorization in Copilot Cowork allows an unauthorized attacker to elevate privileges over a network...
Microsoft Purview eDiscovery Elevation of Privilege Vulnerability
Improper access control in Microsoft Purview eDiscovery allows an authorized attacker to elevate privileges over a network...
Microsoft Teams Spoofing Vulnerability
Improper verification of cryptographic signature in Microsoft Teams allows an unauthorized attacker to perform spoofing over a network...
Azure SQL Database Elevation of Privilege Vulnerability
Improper authentication in Azure SQL Database allows an unauthorized attacker to elevate privileges over a network...