Windows DWM Core Library Information Disclosure Vulnerability

Microsoft Exchange Server Information Disclosure Vulnerability

DHCP Server Service Denial of Service Vulnerability

Gnutls: vulnerability in gnutls certtool template parsing

Gnutls: vulnerability in gnutls sct extension parsing

Gnutls: vulnerability in gnutls othername san export

Libsoup: oob read on libsoup through function "soup_multipart_new_from_message" in soup-multipart.c leads to crash or exit of process

Libsoup: null pointer dereference in soup_message_headers_get_content_disposition when "filename" parameter is present, but has no value in content-disposition header

Libsoup: null pointer dereference in client when server omits the "nonce" parameter in an unauthorized response with digest authentication

Libsoup: double free on soup_message_headers_get_content_disposition() through "soup-message-headers.c" via "params" ghashtable value

Libsoup: null pointer deference on libsoup via /auth/soup-auth-digest.c through "soup_auth_digest_authenticate" on client when server omits the "realm" parameter in an unauthorized response with digest authentication

Libsoup: null pointer dereference on libsoup through function "sniff_mp4" in soup-content-sniffer.c

Libsoup: denial of service on libsoup through http/2 server

Libsoup: denial of service in server when client requests a large amount of overlapping ranges with range header

Libsoup: out of bounds reads in soup_headers_parse_request()

An integer overflow can be triggered in SQLite’s `concat_ws()` function. The resulting, truncated integer is then used to allocate a buffer. When SQLite then writes the resulting string to the buffer, it uses the original, untruncated size and thus a wild Heap Buffer overflow of size ~4GB can be triggered. This can result in arbitrary code execution.

In sshd in OpenSSH before 10.0, the DisableForwarding directive does not adhere to the documentation stating that it disables X11 and agent forwarding.

Visual Studio Code Elevation of Privilege Vulnerability

DHCP Server Service Denial of Service Vulnerability

Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability