85296 matches found
CVE-2026-70175
Improper authentication in ASP.NET Core allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-58280
Uncontrolled recursion in .NET allows an unauthorized attacker to deny service over a network...
CVE-2026-69651
Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network...
CVE-2026-70183
Concurrent execution using shared resource with improper synchronization 'race condition' in ASP.NET Core allows an authorized attacker to elevate privileges over a network...
CVE-2026-92707
MessagePack for C is a MessagePack serializer for C. Prior to 2.5.303 and 3.1.9, deserializing attacker-controlled MessagePack data as System.Object through PrimitiveObjectFormatter can cause excessive memory allocation. The formatter allocates an object from each declared array length before the...
CVE-2026-96230
Improper neutralization of input during web page generation 'cross-site scripting' in ASP.NET Core allows an unauthorized attacker to execute code over a network...
CVE-2026-70179
Authentication bypass by spoofing in ASP.NET Core allows an authorized attacker to elevate privileges over a network...
CVE-2026-66822
Insertion of sensitive information into sent data in .NET allows an unauthorized attacker to disclose information over a network...
CVE-2026-70159
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network...
CVE-2026-70188
Inconsistent interpretation of http requests 'http request/response smuggling' in ASP.NET Core allows an unauthorized attacker to bypass a security feature over a network...
CVE-2026-96237
Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to execute code over a network...
CVE-2026-108266
Privasys rustls is a maintained fork of the rustls TLS library that adds RA-TLS challenge and channel-binding support. Prior to privasys-v0.8.1, the fork emitted RA-TLS challenge certificates whose quote ReportData was bound to the certificate public key and client nonce but not to the active TLS...
CVE-2026-102870
Improper control of generation of code 'code injection' in ASP.NET Core allows an unauthorized attacker to execute code over a network...
CVE-2026-96957
Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network...
CVE-2026-96222
Improper certificate validation in Active Directory Federation Services AD FS allows an unauthorized attacker to perform spoofing over a network...
CVE-2026-70186
Deadlock in ASP.NET Core allows an unauthorized attacker to deny service over a network...
CVE-2026-96225
Improper link resolution before file access 'link following' in .NET allows an authorized attacker to elevate privileges locally...
CVE-2026-96238
Origin validation error in .NET allows an unauthorized attacker to bypass a security feature over a network...
CVE-2026-70181
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network...
CVE-2026-70196
Inefficient algorithmic complexity in ASP.NET Core allows an unauthorized attacker to deny service over a network...
CVE-2026-96231
Improper link resolution before file access 'link following' in .NET allows an authorized attacker to elevate privileges locally...
CVE-2026-88092
Inconsistent interpretation of http requests 'http request/response smuggling' in ASP.NET Core allows an unauthorized attacker to perform tampering over a network...
CVE-2026-96233
Out-of-bounds write in ASP.NET Core allows an unauthorized attacker to deny service over a network...
CVE-2026-96236
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network...
CVE-2026-105016
Heap-based buffer overflow in Microsoft QUIC allows an unauthorized attacker to execute code over a network...
CVE-2026-85363
Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-70035
Deserialization of untrusted data in .NET Framework allows an unauthorized attacker to execute code over a network...
CVE-2026-70161
Improper limitation of a pathname to a restricted directory 'path traversal' in .NET allows an authorized attacker to elevate privileges locally...
CVE-2026-70007
Out-of-bounds write in .NET Framework allows an unauthorized attacker to execute code over a network...
CVE-2026-87697
Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code over a network...
CVE-2026-83520
Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code over a network...
CVE-2026-70162
A denial of service vulnerability exists when Microsoft Common Object Runtime Library improperly handles web requests. An attacker who successfully exploited this vulnerability could cause a denial of service against a .NET web application. A remote unauthenticated attacker could exploit this...
CVE-2026-85790
Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network...
CVE-2026-70190
Improper link resolution before file access 'link following' in .NET allows an authorized attacker to elevate privileges locally...
CVE-2026-96234
Origin validation error in .NET allows an unauthorized attacker to disclose information over a network...
CVE-2026-70174
Improperly implemented security check for standard in .NET allows an unauthorized attacker to execute code over a network...
CVE-2026-96235
Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network...
CVE-2026-96229
Permissive list of allowed inputs in .NET allows an unauthorized attacker to disclose information over a network...
CVE-2026-70165
Improper link resolution before file access 'link following' in .NET allows an authorized attacker to elevate privileges locally...
CVE-2026-70197
Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network...
CVE-2026-96232
Out-of-bounds read in .NET allows an unauthorized attacker to disclose information over a network...
CVE-2026-96224
Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network...
CVE-2026-109595
Hugo from v0.84.0 before v0.167.0 contains a path traversal vulnerability that allows malicious themes or modules to read files outside the project root via ESBuild's fallback resolver in js.Build, js.Batch, and css.Build. Attackers can ship relative imports or symlinks pointing outside the proje...
CVE-2026-109596
Hugo from v0.162.0 before v0.167.0 contains an improper link resolution vulnerability that lets malicious themes or modules expose files outside their root via nested-mount ancestor directories. Attackers controlling a theme can place a symlink or NTFS junction at a virtual ancestor directory,...
CVE-2026-109597
Hugo from v0.60.0 before v0.167.0 contains a stored cross-site scripting vulnerability that allows Markdown content authors to inject HTML by supplying crafted explicit heading IDs. Attackers can break out of the unescaped href attribute in .TableOfContents or .Fragments.ToHTML output to inject...
CVE-2026-109574
Hugo before v0.167.0 contains a path traversal vulnerability in css.Sass that allows malicious themes or modules to read files outside the project root through the Sass compiler's import fallback. Attackers can ship stylesheets with relative, absolute, or symlinked @import or @use targets to...
CVE-2026-104140
QGIS is a free, open source, cross-platform geographic information system. Prior to 3.44.12 and 4.0.0 through 4.2.3, QGIS Server renders feature data in WFS3 OGC API Features HTML responses without HTML escaping. Attacker-controlled feature.properties values from a published writable vector layer...
CVE-2026-103658
GNU Aspell 0.60.8.2 first vulnerable version is not known contains a heap-based buffer overflow write CWE-122 in its read-only dictionary loader. String::reserve in common/string.hpp computes its capacity check with a signed int ints + 1, so a requested size of 0x7FFFFFFF wraps negative and the...
CVE-2026-109378
SPIP before 4.4.18 contains a server-side request forgery vulnerability in recupererurl in ecrire/inc/distant.php that follows up to 10 redirects without re-validating targets with validerurldistante. Authenticated attackers can supply a remote URL, such as a syndicated site feed or remote...
CVE-2026-109563
N3.js before 2.11.1 contains a regular expression denial of service vulnerability in the N3Lexer number pattern that backtracks quadratically on long digit runs. Attackers can supply untrusted Turtle or N3 input containing long runs of digits that do not end a number, blocking the Node.js event...