Connected evidence
Follow a shared identifier, source page or planning group across source records. Dates show chronology; a connection does not establish cause, a shared rollout or applicability to your environment.
Saved searches 0
Keep up to eight named searches. Saved in this browser. Filters are also shareable in the page address.
Threads
Related changes across sources- Node.js is vulnerable to a remote HTTP/2 denial of service via a reachable assertion in Http2Session teardown Newly collected advisory2 linked entries across history · in Security Follow evidence and connection reasons
- Node.js is vulnerable to cross-connection memory disclosure via TLS write re-entrancy in the HTTPS request parser Newly collected advisory2 linked entries across history · in Security Follow evidence and connection reasons
- Node.js is vulnerable to an HTTP/2 memory and file-descriptor leak via a protocol error during session shutdown Newly collected advisory2 linked entries across history · in Security Follow evidence and connection reasons
- Node.js is vulnerable to HTTP/2 response memory disclosure via a use-after-free during stream teardown Newly collected advisory2 linked entries across history · in Security Follow evidence and connection reasons
- Node.js is vulnerable to an HTTP/2 memory exhaustion denial of service via unaccounted inbound DATA on an undrained stream Newly collected advisory2 linked entries across history · in Security Follow evidence and connection reasons
- Node.js is vulnerable to proxy credential disclosure via ERR_PROXY_INVALID_CONFIG error messages Newly collected advisory2 linked entries across history · in Security Follow evidence and connection reasons
- Node.js is vulnerable to a client certificate authentication bypass via TLS 1.2 renegotiation servername change Newly collected advisory2 linked entries across history · in Security Follow evidence and connection reasons
- Node.js is vulnerable to an HTTP/2 use-after-free via respondWithFile() stream reset during a pending write Newly collected advisory2 linked entries across history · in Security Follow evidence and connection reasons
- Node.js is vulnerable to an HTTP/2 denial of service via a NULL pointer dereference when a respondWithFile() download is cancelled Newly collected advisory2 linked entries across history · in Security Follow evidence and connection reasons
- Node.js is vulnerable to a certificate validation bypass in https.Agent via cross-policy TLS session reuse Newly collected advisory2 linked entries across history · in Security Follow evidence and connection reasons
- Node.js is vulnerable to a remotely triggerable uncaught exception in TLS servers via deferred handshake callbacks Newly collected advisory2 linked entries across history · in Security Follow evidence and connection reasons
- Org.wildfly.core/wildfly-server: wildfly: rbac bypass in wildfly deployment-operation handlers leads to privilege escalation Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
- Soupwebsocketextensiondeflate: libsoup: libsoup: websocket permessage-deflate unbounded decompression remote denial of service Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
- Libsoup: soupwebsocketconnection: libsoup: websocket remote denial of service via oversized control frame protocol violation Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
- Networkmanager: networkmanager: 802-1x ca-path and phase2-ca-path bypass private_user restriction, allowing wpa-enterprise server validation bypass (incomplete fix for cve-2025-9615) Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
- Improper input validation for some Intel(R) TDX Workload Attestation software within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a high complexity attack … Newly collected advisory: Panic on a GCP launch endorsement without TDX measurements2 linked entries across history · in Security Follow evidence and connection reasons
- Improper certificate validation for some Intel(R) TDX Workload Attestation software within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an unauthenticated user combined with a low comp… Newly collected advisory: `verify_x509_cert` does not check the certificate validity period2 linked entries across history · in Security Follow evidence and connection reasons
- .NET Security Feature Bypass Vulnerability Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
- Thursday, June 18, 2026 Security Releases Security advisory: Wednesday, November 11, 2026 Security Releases2 linked entries across history · in Security Follow evidence and connection reasons
- Thursday, June 18, 2026 Security Releases Security advisory: Wednesday, November 11, 2026 Security Releases2 linked entries across history · in Security Follow evidence and connection reasons
- Polkit: polkit: denial of service via unbounded input processing through standard input Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
- Windows Media Photo Codec Information Disclosure Vulnerability Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
- Windows File Explorer Information Disclosure Vulnerability Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
- Gimp: gimp: file-pvr plug-in pvr file parsing integer overflow heap-based buffer overflow vulnerability Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
- Emacs: emacs: command injection via crafted filenames in tramp Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
- Jwcrypto: jwcrypto: denial of service via malformed jwe tokens Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
- Libsoup: libsoup: heap use-after-free in libsoup http/2 client on_data_read() via goaway during body upload Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
- Eupago Gateway For Woocommerce 4.5.0 - 4.7.5 - Unauthenticated Payment Confirmation Bypass Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
- Cockpit-files: cockpit-files: arbitrary file ownership and permission modification via symlink race condition Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
- Cockpit-machines: cockpit-machines: information disclosure of rhsm offline token via process arguments Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons