CVE Vulnerability Catalog

An infinite loop in Active Directory Federation Services (AD FS) allows an unauthorized attacker to cause a denial of service over the network.

Use-after-free vulnerability in the Windows Ancillary Function Driver for WinSock. Allows an authorized attacker to elevate privileges locally.

Integer overflow or wraparound in Windows Devices Human Interface allows an authorized attacker to disclose information locally.

Improper certificate validation in Windows Cryptographic Services allows an unauthorized attacker to bypass a security feature over a network.

A TOCTOU race condition in specific trace commands of the TraceEvent() system call allows an attacker with local access and the PROCMGR_AID_TRACE ability to cause information disclosure, data tampering, or a crash of the QNX Neutrino kernel.

Out-of-bounds read in Windows TCP/IP allows an authorized attacker to disclose information locally.

An untrusted pointer dereference vulnerability in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. This flaw can be exploited to read sensitive data from Excel files.

Audition is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

A vulnerability in the Symfony Address component allows injection of email headers or SMTP commands via a specially crafted email address with a quoted local part containing newline characters. The Address constructor did not reject addresses containing CRLF, enabling an attacker to manipulate message content or the SMTP protocol.

A vulnerability in Symfony HtmlSanitizer allows bypassing the allowed host list due to differences in URL parsing between RFC 3986 and WHATWG, and incorrect checking of the <area href> tag against the media policy instead of the link policy. Affects versions from 6.1.0-BETA1 to 6.4.40, 7.4.12, and 8.0.12.

In Symfony prior to versions 5.4.52, 6.4.40, 7.4.12, and 8.0.12, the UrlGenerator validates route parameters against a pattern built as ^ plus the raw requirement plus $, allowing values like //evil.com to satisfy a locale requirement and generate a protocol-relative off-site URL.

A security vulnerability was discovered in the NETGEAR DGND3700v1 router that allows an attacker on the same local WiFi network to send unauthorized commands to the device. The flaw was identified in a controlled research environment using a simulated firmware version and has not been confirmed on physical production devices.

A cross-site scripting vulnerability was found in SourceCodester Class and Exam Timetabling System 1.0 in the /exam.php file. Manipulation of the 'day' argument allows remote injection of malicious scripts. The exploit is publicly available.

A vulnerability in the SchedGet() system call of the QNX Neutrino kernel is caused by insufficient parameter validation. A local attacker could exploit this flaw to crash the kernel.

A vulnerability in jackson-databind allows bypassing @JsonIgnore in Java Records using PropertyNamingStrategy. Affected versions from 2.15.0 to 2.18.8, 2.21.4, and 3.1.4 register the ignored field under its original name before applying the naming strategy, enabling the renamed JSON key to be assigned to the Record constructor parameter.

Out-of-bounds read in Windows Kernel allows an authorized attacker to bypass a security feature locally.

Azure CycleCloud has a missing authorization vulnerability, allowing an authorized attacker to elevate privileges over a network.

An out-of-bounds read vulnerability exists in Windows RDP. An unauthorized attacker can exploit this to disclose information remotely over the network.

A null pointer dereference in Active Directory Domain Services allows an authorized attacker to cause a denial of service over the network.

In Microsoft XML, there is an untrusted search path vulnerability. An unauthorized attacker can bypass a security feature through a physical attack.