CVE Vulnerability Catalog

Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

Improper neutralization of input during web page generation (cross-site scripting) in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.

Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

Inconsistent interpretation of HTTP requests (HTTP request/response smuggling) in ASP.NET Core allows an unauthorized attacker to bypass a security feature over a network.

Heap-based buffer overflow in Windows System Information Console allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Windows Rich Text Edit Control allows an unauthorized attacker to execute code over a network.

Stack-based buffer overflow in Windows Internet Information Services allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.

Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network.

Out-of-bounds write in Windows iSCSI allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Windows Libarchive allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to execute code over a network.

Dockhand before 1.0.45 contains an authentication bypass in which the global auth hook skips authentication for any path ending in a static-asset extension such as .js, including /api/* routes, and the user-mutation handlers fail open for unauthenticated callers. Unauthenticated remote attackers can send a PUT request to /api/users/<id>.js to reset the admin's or any user's password and take over the account.

Heap-based buffer overflow in Microsoft QUIC allows an unauthorized attacker to execute code over a network.

Use after free in Microsoft Windows Search Component allows an unauthorized attacker to elevate privileges over a network.

No cwe for this issue in Windows Schannel allows an unauthorized attacker to perform spoofing over a network.

Adobe Commerce is affected by an Improper Neutralization of Special Elements Used in a Template Engine vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue does not require user interaction. Scope is changed.