Continuous surveillance of newly registered CVE advisories with CVSS threat scores, attack vector metrics, and impacted software libraries.
Use of uninitialized resource in Windows RDP allows an unauthorized attacker to execute code over a network....
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Server Network driver allows an unauthorized attacker to execute code over a network....
Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network....
Deserialization of untrusted data in Microsoft Dynamics NAV allows an unauthorized attacker to execute code over a network....
Weak authentication in Microsoft Office SharePoint allows an unauthorized attacker to bypass a security feature over a network....
Heap-based buffer overflow in Minecraft Bedrock Dedicated Server allows an unauthorized attacker to execute code over a network....
Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network....
Heap-based buffer overflow in Windows Message Queuing allows an unauthorized attacker to execute code over a network....
Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network....
Mojolicious versions from 4.59 before 9.48 for Perl expose a stable representation of the session CSRF token to a BREACH compression oracle. _csrf_token generates and caches one token per session and...
sigstore-js provides JavaScript libraries for interacting with Sigstore services. Prior to 0.7.1, getRegistryCredentials() reads credentials from the Docker config file and selects an entry by checkin...
Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network....
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network....
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network....
Pillow is a Python imaging library. Prior to 12.3.0, when Pillow loads an uncompressed McIdas AREA image from a filename through the mmap raw codec path, attacker-controlled header words can set a row...
Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network....
Use after free in Windows Kernel allows an unauthorized attacker to elevate privileges locally....
Heap-based buffer overflow in Windows FTP Service allows an unauthorized attacker to execute code over a network....
Improper neutralization of special elements used in a command ('command injection') in Copilot Chat (Microsoft Edge) allows an unauthorized attacker to execute code over a network....
Heap-based buffer overflow in SQL Server ODBC driver allows an unauthorized attacker to execute code over a network....
A weakness has been identified in Totolink NR1800X 9.1.0u.6279_B20210910. Affected by this issue is the function Form_Logout of the file /formLogout.htm of the component lighttpd. This manipulation of...
DBI versions before 1.651 for Perl do not enforce statement handle consistency with the row. When the statement handle had no fields but the source row was non-empty, the internal row-buffer helper w...
Sustainable Irrigation Platform (SIP) through version 5.2.16 contains a command injection vulnerability in the optional cli_control plugin that allows unauthenticated or cross-site request forgery att...
A path traversal vulnerability in Tenable Agent 11.2.0 and 11.1.3 and lower allows a privileged attacker to write arbitrary files outside the intended plugin directory, potentially leading to remote c...