Search Vulnerabilities

DOMPurify through 3.3.3 Cross-Site Scripting via IN_PLACE mode

Libunbound applications configured with 'unwanted-reply-threshold' could eventually be abruptly terminated

SurrealDB before 3.1.0 Denial of Service via LIVE Query

Insufficient Input Validation in DevOps Loop

Posting a malicious markdown image crashes the Mattermost Desktop App

Junos OS: MX Series: For subscribers configured on static interfaces, input filters are not in effect

Junos OS: MX Series with SPC3, SRX Series: Specific packet in response to a TCP connection establishment by the affected device can crash the PFE

Junos OS: QFX10000 Series: IPv6 multicast traffic received on non-IRB interfaces causes a multicast flood

Junos OS and Junos OS Evolved: When a specifically malformed BGP route update is received RPD crashes

Junos OS Evolved: PTX Series: Receipt of repeated ECMP routing updates results in PFE crash

PAN-OS: Denial of Service Vulnerabilities in Network Traffic Processing

CoreWCF: Kafka consume pump halts permanently on a Kafka tombstone (null-value record), causing persistent endpoint denial of service.

Phoenix JavaScript presence client crashes on presence keys colliding with Object.prototype members in Presence.syncState/syncDiff

FOSSBilling: Payment amount not validated in PayPalEmail adapter allows invoice underpayment

ImageMagick: Heap Buffer Overflow in ImageMagick MVG decoder

protobufjs: Schema-derived names can shadow runtime-significant properties

Typesense: Unauthenticated Denial of Service in the Typesense /multi_search Endpoint

PAN-OS: Denial of Service (DoS) in Tunnel Traffic Processing

Nimiq network-libp2p: DHT query poisoning via first-record verification failure

OpenTelemetry eBPF Instrumentation: Postgres BIND parsing can panic on malformed payloads