An issue was discovered in OpenSBI 1.3 allowing attackers to cause a denial of service via crafted request to the SBI function #2 or the 'Find and configure a matching counter' function of SBI PMU extension.

Local Path Provisioner vulnerable to Path Traversal via parameters.pathPattern

LZ4 through 1.10.0 allows attackers to cause a denial of service (application crash) or possibly have unspecified other impact when the application processes untrusted LZ4 frames. For example, LZ4F_createCDict_advanced in lib/lz4frame.c mishandles NULL checks.

Docker Compose Vulnerable to Path Traversal via OCI Artifact Layer Annotations

Axios has a NO_PROXY Hostname Normalization Bypass Leads to SSRF

HDF5 H5FSsection.c H5FS__sect_find_node heap-based overflow

HDF5 H5Cimage.c H5C__reconstruct_cache_entry heap-based overflow

NULL pointer dereference vulnerability exists in GNU libmicrohttpd v1.0.2 and earlier. The vulnerability was fixed in commit ff13abc on the master branch of the libmicrohttpd Git repository, after the v1.0.2 tag. A specially crafted packet sent by an attacker could cause a denial-of-service (DoS) condition.

DirectX Graphics Kernel Elevation of Privilege Vulnerability

Application Information Service Elevation of Privilege Vulnerability

Windows Installer Elevation of Privilege Vulnerability

Windows Camera Frame Server Monitor Information Disclosure Vulnerability

Microsoft Brokering File System Elevation of Privilege Vulnerability

Windows Hyper-V Denial of Service Vulnerability

Windows File Explorer Elevation of Privilege Vulnerability

Microsoft Excel Remote Code Execution Vulnerability

Microsoft Excel Remote Code Execution Vulnerability

Microsoft Outlook Remote Code Execution Vulnerability

Microsoft Excel Remote Code Execution Vulnerability

Microsoft Excel Remote Code Execution Vulnerability