Continuous surveillance of newly registered CVE advisories with CVSS threat scores, attack vector metrics, and impacted software libraries.
Mattermost versions 11.10.x <= 11.10.0, 11.7.x <= 11.7.9, 11.9.x <= 11.9.1, 11.8.x <= 11.8.5 fail to verify the integrity of the SAML RelayState POST parameter which allows an authenticated SAML user ...
A flaw was found in cifs-utils. This flaw allows an unprivileged local user to achieve privilege escalation. When a privileged service mounts a Common Internet File System (CIFS) share using a user-co...
Wheels 1.1 through 4.1.2 resolves nestedProperties() records by posted primary key without checking that they belong to the parent being saved. A user able to submit a nested form for their own parent...
FreeRDP before 3.32.0 contains a client-side heap out-of-bounds write vulnerability in general_LumaToYUV444 and general_ChromaV2ToYUV444 that allows malicious RDP servers to corrupt client memory. Att...
FreeRDP before 3.32.0 contains a heap buffer overflow vulnerability in persistent_cache_read_entry_v2 that allows local attackers to corrupt heap memory via integer wraparound in bitmap size calculati...
FreeRDP from 3.29.0 before 3.32.0 contains an integer overflow in the Apple audin backends (audin_mac.m, audin_ios.m), which compute the audio queue buffer size as FramesPerPacket * 2 * nChannels in U...
FreeRDP before 3.32.0 contains a heap buffer overflow vulnerability in persistent_cache_read_entry_v3 that allows local attackers to corrupt memory by supplying a crafted v3 persistent cache file. Att...
FreeRDP from 3.0.0 before 3.32.0 contains an uncontrolled resource consumption vulnerability in parse_nla_mode_pdu that allows unauthenticated attackers to exhaust server memory. Attackers can complet...
A flaw was found in WildFly. A user with the `Monitor` role, which is the lowest standard Role-Based Access Control (RBAC) role, can exploit a path traversal vulnerability in the `take-snapshot` opera...
CRMEB 5.6.1 through 6.0.0 contains an insecure direct object reference vulnerability that allows authenticated storefront users to read and claim other users' orders via the gift-order API. Attackers ...
Ivanti Connect Secure 22.8R2.4 mishandles the manner in which the dsinvoked broker trusts DSCache configuration data, leading to privilege escalation to root, as exploited in the wild in October 2026....
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network....
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network....
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network....
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network....
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network....
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network....
Reliance on untrusted inputs in a security decision in Microsoft Office Word allows an unauthorized attacker to bypass a security feature locally....
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network....
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network....
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network....
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network....
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network....
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network....