CVE-2023-51769Published
Frappe before 14.49.0 allows an XSS attack that is associated with blog pages and exception pages.
cve-program ·
Vendor product: Frappe
Security
Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.
Advisory catalog
Public source statements across vendors. Explicit aliases connect records; each publisher keeps its own state, severity and affected-version evidence.
Collected statements
699691 source statements · aliases may refer to the same vulnerabilityCVE-2023-46273Published
Bonjour Gateway in Extreme Networks IQ Engine before 10.6r1a, and through 10.6r4 before 10.6r5, has an ah_bgd buffer overflow via ah_event_send.
cve-program ·
Vendor product: IQ Engine
CVE-2026-77955Published
Possible ZONEMD verification bypass window
cve-program ·
Vendor product: Unbound
CVE-2023-37366Published
An issue was discovered in Samsung Exynos Mobile Processor, Automotive Processor, and Modem Exynos 9810, Exynos 9610, Exynos 9820, Exynos 980, Exynos 850, Exynos 1080, Exynos 2100, Exynos 2200, Exynos 1280, Exynos 1380, Exynos 1330, Exynos …
cve-program ·
Vendor product: Exynos 850 firmware
CVE-2026-80225Published
Possible degradation of service from continuous queries on the same TCP/DoT connection
cve-program ·
Vendor product: Unbound
CVE-2026-81634Published
Possible heap buffer overflow during DNSSEC canonicalization
cve-program ·
Vendor product: Unbound
CVE-2026-81642Published
Heap buffer overflow and possible Remote Code Execution when digesting DNSKEY
cve-program ·
Vendor product: Unbound
CVE-2023-32778Published
An issue was discovered in ILIAS 6.23, 7 before 7.22, and 8.1. An attacker can execute arbitrary code via ZIP upload.
cve-program ·
Vendor product: ILIAS
CVE-2023-24287Published
Portable Puzzle Collection before 20230116.5782e29 was discovered to contain a buffer overflow via the "M" command.
cve-program ·
Vendor product: Portable Puzzle Collection
CVE-2023-24035Published
An issue was discovered in Nagios XI before 5.9.3. The is_insecure_login_authenticated function uses a insecure timing comparison that leads to an attacker being able to bruteforce the admin password, by measuring timing differences in the …
cve-program ·
Vendor product: Nagios XI
MAL-2026-16231Published
Malicious code in strapi-plugin-honey-meeb (npm)
osv ·
npm: strapi-plugin-honey-meeb
MAL-2026-16226Published
Malicious code in strapi-plugin-ccip-meeb (npm)
osv ·
npm: strapi-plugin-ccip-meeb
MAL-2026-16228Published
Malicious code in strapi-plugin-ccrev-meeb (npm)
osv ·
npm: strapi-plugin-ccrev-meeb
MAL-2026-16232Published
Malicious code in strapi-plugin-listcc-meeb (npm)
osv ·
npm: strapi-plugin-listcc-meeb
MAL-2026-16230Published
Malicious code in strapi-plugin-feedmeeb (npm)
osv ·
npm: strapi-plugin-feedmeeb
MAL-2026-16227Published
Malicious code in strapi-plugin-ccrec-meeb (npm)
osv ·
npm: strapi-plugin-ccrec-meeb
MAL-2026-16229Published
Malicious code in strapi-plugin-conresh-meeb (npm)
osv ·
npm: strapi-plugin-conresh-meeb
MAL-2026-16239Published
Malicious code in strapi-plugin-pysh-meeb (npm)
osv ·
npm: strapi-plugin-pysh-meeb
MAL-2026-16238Published
Malicious code in strapi-plugin-portcc-meeb (npm)
osv ·
npm: strapi-plugin-portcc-meeb
MAL-2026-16237Published
Malicious code in strapi-plugin-persh-meeb (npm)
osv ·
npm: strapi-plugin-persh-meeb
MAL-2026-16236Published
Malicious code in strapi-plugin-perev-meeb (npm)
osv ·
npm: strapi-plugin-perev-meeb
MAL-2026-16233Published
Malicious code in strapi-plugin-maylog-meeb (npm)
osv ·
npm: strapi-plugin-maylog-meeb
MAL-2026-16225Published
Malicious code in strapi-plugin-cccon-meeb (npm)
osv ·
npm: strapi-plugin-cccon-meeb
CVE-2026-33970Published
An issue was discovered in NR RRC and L2 in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 1680, W920, W930, W1000, and Modem 5410. In the 5G baseband, a NULL …
cve-program ·
Vendor product: Exynos 850 firmware
CVE-2026-33963Published
An issue was discovered in camera in Samsung Mobile Processor Exynos 1330, 1380, 1480, 2400, 1580, 2500, 2600, and 1680. A stack-based buffer overflow occurs when a malformed message is sent to the camera driver, causing a denial of service…
cve-program ·
Vendor product: Exynos 1330 firmware
CVE-2026-31278Published
An issue in the /api/v2/setting/adserversetting endpoint of Suprema BioStar 2 before 2.9.12 and and BioStar X before 1.0.2 allows attackers to obtain Active Directory service account credentials in cleartext by supplying a crafted GET reque…
cve-program ·
Vendor product: BioStar 2
CVE-2026-55991Published
Remote DNS-over-QUIC (DoQ) flow-control assertion failure in libngtcp2
cve-program ·
Vendor product: Unbound
CVE-2026-92073Published
Privilege escalation in the Enterprise Policies component
cve-program ·
Vendor product: Firefox · Vendor product: Thunderbird
CVE-2026-92062Published
Privilege escalation in the Session Restore component
cve-program ·
Vendor product: Firefox · Vendor product: Thunderbird
CVE-2026-92055Published
Privilege escalation in the DevTools component
cve-program ·
Vendor product: Firefox · Vendor product: Thunderbird
CVE-2026-92054Published
Privilege escalation in the Memory component
cve-program ·
Vendor product: Firefox · Vendor product: Thunderbird
CVE-2026-92053Published
Privilege escalation in the Graphics: CanvasWebGL component
cve-program ·
Vendor product: Firefox · Vendor product: Thunderbird
CVE-2026-92052Published
Privilege escalation due to uninitialized memory in the Graphics: CanvasWebGL component
cve-program ·
Vendor product: Firefox · Vendor product: Thunderbird
CVE-2026-92047Published
Privilege escalation in the Crash Reporting component
cve-program ·
Vendor product: Firefox · Vendor product: Thunderbird
CVE-2026-92043Published
Privilege escalation due to incorrect boundary conditions in the Audio/Video component
cve-program ·
Vendor product: Firefox · Vendor product: Thunderbird
CVE-2026-32665Published
Remote DNS-over-QUIC denial of service due to `quic-size` budget bypass
cve-program ·
Vendor product: Unbound
CVE-2026-92020Published
Privilege escalation due to incorrect boundary conditions in the Graphics: WebRender component
cve-program ·
Vendor product: Firefox · Vendor product: Thunderbird
CVE-2026-92017Published
Privilege escalation in the DOM: Service Workers component
cve-program ·
Vendor product: Firefox · Vendor product: Thunderbird
CVE-2026-92015Published
Privilege escalation in the WebExtensions component
cve-program ·
Vendor product: Firefox · Vendor product: Thunderbird
CVE-2026-92013Published
Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component
cve-program ·
Vendor product: Firefox · Vendor product: Thunderbird
CVE-2026-92012Published
Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component
cve-program ·
Vendor product: Firefox · Vendor product: Thunderbird
CVE-2026-92011Published
Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component
cve-program ·
Vendor product: Firefox · Vendor product: Thunderbird
CVE-2026-92010Published
Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component
cve-program ·
Vendor product: Firefox · Vendor product: Thunderbird
CVE-2026-92009Published
Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component
cve-program ·
Vendor product: Firefox · Vendor product: Thunderbird
CVE-2026-92008Published
Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component
cve-program ·
Vendor product: Firefox · Vendor product: Thunderbird
A catalog match establishes published evidence, not applicability to your environment. Check resolved package dependencies, or open a Microsoft CVE for fixing KBs, releases and planning.