Search Vulnerabilities

Tor before 0.4.9.7 has an out-of-bounds read when an END, a TRUNCATE, or a TRUNCATED cell lacks a reason in its payload, aka TROVE-2026-011

In Exim before 4.99.2, on systems using musl libc (not glibc), an attacker can crash the connection instance when malformed DNS data is present in ...

In Exim before 4.99.2, when JSON lookup is enabled, an out-of-bounds heap write can occur when a JSON operator encounters malformed JSON in an untr...

Technitium DNS Server before 15.0 allows DNS traffic amplification via cyclic name server delegation

uutils coreutils cut Local Logic Error and Data Integrity Issue in Output Filtering

uutils coreutils tr Local Logic Error and Data Integrity Issue in Character Class Handling

Apache Log4j Core: Log injection in Rfc5424Layout due to silent configuration incompatibility

RustDesk Client Accepts Pseudo-Encrypted Config Strings Without Cryptographic Validation

RustDesk Server Generates Config Strings Using Reversible Encoding (Base64 + Reverse) Instead of Encryption

app/Controller/EventsController.php in MISP before 2.5.24 has invalid logic in checking for uploaded file validity, related to tmp_name

In KDE Skanpage before 25.08.0, an attempt at file overwrite can result in the contents of the new file at the beginning followed by the partial co...

An Incorrect Provision of Specified Functionality vulnerability [CWE-684] in FortiOS 7.6.0, 7.4.0 through 7.4.5, 7.2.5 through 7.2.10, 7.0.0 throug...

hw/pci/pcie_sriov.c in QEMU through 10.0.3 mishandles the VF Enable bit write mask, a related issue to CVE-2024-26327

Akamai Rate Control alpha before 2025 allows attackers to send requests above the stipulated thresholds because the rate is measured separately for...

In the Production Environment extension in Netmake ScriptCase through 9.12.006 (23), the Administrator password reset mechanism is mishandled

FutureNet NXR series routers provided by Century Systems Co., Ltd

Incorrect Provision of Specified Functionality in GitLab

Incorrect Provision of Specified Functionality in GitLab

Cisco IOS XR Software Layer 2 Services Denial of Service Vulnerability

Incorrect Provision of Specified Functionality in GitLab