Openssh: machine-in-the-middle attack if verifyhostkeydns is enabled

Hercules Augeas fa.c re_case_expand null pointer dereference

list_item_verbose in tar/util.c in libarchive through 3.7.7 does not check an strftime return value, which can lead to a denial of service or unspecified other impact via a crafted TAR archive that is read with a verbose value of 2. For example, the 100-byte buffer may not be sufficient for a custom locale.

DNSSEC validation may accept broken authentication chains

Net::IMAP vulnerable to possible DoS by memory exhaustion

vLLM using built-in hash() from Python 3.12 leads to predictable hash collisions in vLLM prefix cache

Windows Server Elevation of Privilege Vulnerability

Microsoft Exchange Server Spoofing Vulnerability

Microsoft Exchange Server Spoofing Vulnerability

Microsoft Exchange Server Tampering Vulnerability

PowerShell Elevation of Privilege Vulnerability

Visual Studio Elevation of Privilege Vulnerability

Azure Local Cluster Information Disclosure Vulnerability

Microsoft Edge for iOS Spoofing Vulnerability

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

Microsoft SQL Server Elevation of Privilege Vulnerability

Visual Studio Elevation of Privilege Vulnerability