Fast, deterministic intelligence across 396,747 official Common Vulnerabilities and Exposures (CVEs) with CVSS v3.1 vector breakdowns, threat severity scores, and verified remediation links.
Symfony is a PHP framework for web and console applications and a set of reusable PHP components. From 5.4.46 until 5.4.52, 6.4.40, 7.4.12, and 8.0.12, the CVE-2024-50340 fix gated runtime argv parsin...
Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 6.4.40, 7.4.12, and 8.0.12, OidcTokenHandler::verifyClaims() registered audience (aud), issue...
Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 5.4.52, 6.4.40, 7.4.12, and 8.0.12, X509Authenticator extracts the user identifier from $_SER...
Use after free in Windows VMSwitch allows an authorized attacker to elevate privileges over a network....
Use of uninitialized resource in Windows RDP allows an unauthorized attacker to execute code over a network....
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Server Network driver allows an unauthorized attacker to execute code over a network....
Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network....
Deserialization of untrusted data in Microsoft Dynamics NAV allows an unauthorized attacker to execute code over a network....
Weak authentication in Microsoft Office SharePoint allows an unauthorized attacker to bypass a security feature over a network....
Heap-based buffer overflow in Minecraft Bedrock Dedicated Server allows an unauthorized attacker to execute code over a network....
Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network....
Heap-based buffer overflow in Windows Message Queuing allows an unauthorized attacker to execute code over a network....
Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network....
Mojolicious versions from 4.59 before 9.48 for Perl expose a stable representation of the session CSRF token to a BREACH compression oracle. _csrf_token generates and caches one token per session and...
sigstore-js provides JavaScript libraries for interacting with Sigstore services. Prior to 0.7.1, getRegistryCredentials() reads credentials from the Docker config file and selects an entry by checkin...
Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network....
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network....
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network....
Pillow is a Python imaging library. Prior to 12.3.0, when Pillow loads an uncompressed McIdas AREA image from a filename through the mmap raw codec path, attacker-controlled header words can set a row...
Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network....
Use after free in Windows Kernel allows an unauthorized attacker to elevate privileges locally....
Heap-based buffer overflow in Windows FTP Service allows an unauthorized attacker to execute code over a network....
Improper neutralization of special elements used in a command ('command injection') in Copilot Chat (Microsoft Edge) allows an unauthorized attacker to execute code over a network....
Heap-based buffer overflow in SQL Server ODBC driver allows an unauthorized attacker to execute code over a network....