CVE Vulnerability Catalog

Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

A use-after-free vulnerability in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally.

Stack-based buffer overflow in Active Directory Federation Services (ADFS) allows an unauthorized attacker to perform a DoS attack over the network.

A heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. The issue stems from improper memory management when processing specially crafted data.

A buffer overflow vulnerability in the entry handler of the TraceEvent() system call could allow a local attacker to cause information disclosure, data tampering, or a crash of the QNX Neutrino kernel.

Audition is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation requires user interaction to open a malicious file.

An out-of-bounds write vulnerability in Audition could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction, as a victim must open a malicious file.

Audition is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

An out-of-bounds write vulnerability in Audition could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction, as a victim must open a malicious file.

Audition is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

A Use-After-Free vulnerability in Microsoft Office Excel allows an unauthorized attacker to execute code locally. The issue stems from improper memory management when processing specially crafted Excel files.

An SQL injection vulnerability in SQL Server. Improper neutralization of special elements used in an SQL command allows an authorized attacker to elevate privileges over a network.

A Use-After-Free vulnerability in Microsoft Office allows an unauthorized attacker to execute code locally. The issue stems from improper memory management when processing specially crafted files.

A vulnerability in the JsonPath component of the Symfony framework allows an attacker to perform a DoS attack by sending a specially crafted pattern to the match() and search() methods. The pattern is compiled directly into preg_match() without length limits, enabling catastrophic backtracking expressions to exhaust CPU resources.

A vulnerability in Symfony ServerLogCommand allows remote attackers to execute PHP code via deserialization of unchecked data. The server listens on port 9911 and deserializes received frames without authentication or class validation.

A vulnerability in Symfony (versions 7.1.0 to 7.4.12 and 8.0.12) allows an attacker to hijack a victim's authentication session by manipulating the Host header when framework.trusted_hosts is not configured. An attacker controlling another application registered with the same CAS server can replay the victim's ticket and authenticate as the victim.

In pyasn1 prior to 0.6.4, the univ.Real type converts its mantissa, base, and exponent to a Python float using exact big-integer exponentiation. A short BER/CER/DER encoded REAL value can carry a very large exponent, causing excessive CPU and memory consumption and application hangs when prettyPrint(), str(), comparison, arithmetic, int(), or explicit float() is called on untrusted ASN.1 data.

The pyasn1 library before version 0.6.4 has a quadratic time complexity in BER, CER, and DER decoders when processing OBJECT IDENTIFIER and RELATIVE-OID values with many arcs. A small crafted payload with many OID arcs causes excessive CPU consumption per decode() call, potentially leading to denial of service in applications processing untrusted ASN.1 data.

The pyasn1 library before version 0.6.4 has a vulnerability in the BER decoder that does not limit the tag ID size when parsing long-form tags, allowing crafted input to force construction of an arbitrarily large integer with quadratic CPU cost and trigger unhandled ValueError exceptions in Python 3.11+.

In the Pillow Python imaging library, versions 5.1.0 through 12.3.0, the PdfParser.PdfStream.decode() function calls zlib.decompress() with a buffer size set to the PDF stream Length field without bounding the decompressed output size. This allows a crafted FlateDecode PDF stream to exhaust memory from a small file.