Search Vulnerabilities

Gstreamer: gstreamer: webrtcbin accepts remote sdp without a=fingerprint due to inverted presence check

Capgo - Integrity Issue in Release Routing via Multiple Public Channels

Broken IPv6 Neighbor Discovery input validation allows spoofed RA/NS/NA acceptance in Zephyr net stack

Apache Tomcat: Logged effective web.xml is incomplete

Apache Tomcat: Bad ornext processing in RewriteValve

Cap-go - Broken Cursor Pagination in /private/devices Endpoint

Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7.1 has insecure code evaluation logic in LDAP the autovalues option that could lead to co...

Cisco Nexus 3000 and 9000 Series Border Gateway Protocol Denial of Service Vulnerability

In uriparser before 1.0.2, the function family EqualsUri can misclassify two unequal URIs as equal

uuid before 14.0.0 can make unexpected writes when external output buffers are used, and the UUID version is 3, 5, or 6

uutils coreutils cut Inconsistent Output Suppression with Newline Delimiters

DSF: Inverted Time Comparison in OIDC JWKS and Token Cache

KDE Kleopatra before 26.08.0 on Windows allows local users to obtain the privileges of a Kleopatra user, because there is an error in the mechanism...

lm-sys fastchat Arena Side-by-Side View add_text control flow

Luanti 5 before 5.15.2 sometimes allows unintended access to an insecure environment

Deadwood in MaraDNS 3.5.0036 allows attackers to exhaust connection slots via a zone whose authoritative nameserver address cannot be resolved

Varnish Cache 9 before 9.0.1 allows a "workspace overflow" denial of service (daemon panic) after timeout_linger

Varnish Cache 9 before 9.0.1 and Varnish Enterprise before 6.0.16r11 allows a "workspace overflow" denial of service (daemon panic) for certain amo...

An issue was discovered in musl libc 0.7.10 through 1.2.6

Wasmtime's host panics when Winch compiler executes `table.fill`