Continuous surveillance of newly registered CVE advisories with CVSS threat scores, attack vector metrics, and impacted software libraries.
Symfony is a PHP framework for web and console applications and a set of reusable PHP components. From 6.4.24 until 6.4.40, 7.4.12, and 8.0.12, the development profiler file_excerpt Twig filter escape...
Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 5.4.52, 6.4.40, 7.4.12, and 8.0.12, Symfony\Component\Mime\Header\ParameterizedHeader validat...
Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 6.4.40, 7.4.12, and 8.0.12, OidcTokenHandler::verifyClaims() registered audience (aud), issue...
Symfony is a PHP framework for web and console applications and a set of reusable PHP components. From 6.1.0-BETA1 until 6.4.40, 7.4.12, and 8.0.12, UrlSanitizer::parse() passes Unicode explicit-direc...
Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 5.4.52, 6.4.40, 7.4.12, and 8.0.12, X509Authenticator extracts the user identifier from $_SER...
In Open5GS through version 2.7.7 a pre-authentication heap out-of-bounds read in the AMF NAS 5GS mobile-identity handler may result in subscriber-wide denial of service....
A heap buffer over-read vulnerability was discovered in libsoup's (versions: libsoup 3.0 to 3.7.0) HTTP/2 connection tracking framework. When the library processes an HTTP/2 GOAWAY frame, it improperl...
Improper authorization in the access request status endpoint in Devolutions Server 2026.2.11, 2026.1.22 allows an authenticated low-privileged user to approve their own pending access request via a di...
Improper authorization in the PAM SSH key and certificate retrieval endpoints in Devolutions Server 2026.2.11, 2026.1.22 allows an authenticated low-privileged user to disclose the private key of an...
Improper authorization in the secure messages deletion endpoint in Devolutions Server 2026.2.11, 2026.1.22 allows an authenticated user to delete another user's messages via a direct object reference ...
Uncontrolled resource consumption in Windows DHCP Server allows an unauthorized attacker to deny service over a network....
Use after free in Windows Remote Desktop Services allows an authorized attacker to execute code over a network....
Improper access control in Microsoft 365 Copilot for iOS allows an unauthorized attacker to elevate privileges over a network....
Integer overflow or wraparound in Windows RDP allows an unauthorized attacker to execute code over a network....
Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information over a network....
Out-of-bounds read in Windows RDP allows an unauthorized attacker to disclose information over a network....
Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information over a network....
Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information over a network....
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SMB allows an authorized attacker to elevate privileges over a network....
Out-of-bounds read in Active Directory Federation Services (AD FS) allows an authorized attacker to disclose information over a network....
Improper authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network....
Use of uninitialized resource in Windows RDP allows an authorized attacker to disclose information over a network....
Access of resource using incompatible type ('type confusion') in .NET Core allows an unauthorized attacker to deny service over a network....
Inclusion of functionality from untrusted control sphere in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network....