Security
Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.
Advisory catalog
Public source statements across vendors. Explicit aliases connect records; each publisher keeps its own state, severity and affected-version evidence.
Collected statements
695275 source statements · aliases may refer to the same vulnerabilityUse-after-free in Linux kernel's netfilter: nf_tables component
cve-program ·
Vendor product: kernel
Use-after-free in Linux kernel's net/sched: cls_u32 component
cve-program ·
Vendor product: kernel
Excessive time spent checking DH keys and parameters
cve-program ·
Vendor product: OpenSSL
Use after free in io_uring in the Linux Kernel
cve-program ·
Vendor product: kernel
Crash due to a null pointer dereference in the dn_nsp_send function
cve-program ·
Vendor product: kernel · https://access.redhat.com/downloads/content/package-browser/: kernel · https://access.redhat.com/downloads/content/package-browser/: kernel
An out of bounds (OOB) memory access flaw was found in the Linux kernel in relay_file_read_start_pos in kernel/relay.c in the relayfs. This flaw could allow a local attacker to crash the system or leak kernel internal information.
cve-program ·
https://git.kernel.org/pub/scm/linux/kernel: kernel
A NULL pointer dereference issue was found in the gfs2 file system in the Linux kernel. It occurs on corrupt gfs2 file systems when the evict code tries to reference the journal descriptor structure after it has been freed and set to NULL. …
cve-program ·
Vendor product: Linux kernel (gfs2 file system)
Junos OS Evolved: A crafted analytics sensor resource causes telemetry dial-out daemon denial of service
cve-program ·
Vendor product: Junos OS Evolved
Junos OS Evolved: Malformed TCP key-chain traffic causes a kernel panic when BGP or LDP key-chain authentication is used
cve-program ·
Vendor product: Junos OS Evolved
Junos OS: Malformed packet causes pkid denial of service when certificate re-enrollment is used
cve-program ·
Vendor product: Junos OS
Junos OS: A remote TWAMP peer causes rmopd service disruption when TWAMP-Control is used
cve-program ·
Vendor product: Junos OS
Junos OS: Malformed Extended Echo requests cause a Routing Engine reboot when Extended Echo is enabled
cve-program ·
Vendor product: Junos OS
Junos OS and Junos OS Evolved: A specific BGP packet causes an rpd crash when ephemeral configuration is used
cve-program ·
Vendor product: Junos OS · Vendor product: Junos OS Evolved
Junos OS and Junos OS Evolved: A specific BGP FlowSpec update causes an rpd crash when BGP FlowSpec import policy is used
cve-program ·
Vendor product: Junos OS · Vendor product: Junos OS Evolved
Junos OS and Junos OS Evolved: Malformed ICCP packets cause l2ald memory disclosure and disruption
cve-program ·
Vendor product: Junos OS · Vendor product: Junos OS Evolved
Junos OS and Junos OS Evolved: A malformed SRv6 service route causes an rpd crash when dynamic tunnels are enabled
cve-program ·
Vendor product: Junos OS · Vendor product: Junos OS Evolved
Junos OS and Junos OS Evolved: A remote BGP peer causes an rpd crash when long-lived graceful restart (LLGR) is used
cve-program ·
Vendor product: Junos OS · Vendor product: Junos OS Evolved
Junos OS and Junos OS Evolved: A BGP peer causes an rpd crash if a malformed MCAST-TREE NLRI is received and readvertised
cve-program ·
Vendor product: Junos OS · Vendor product: Junos OS Evolved
Junos OS and Junos OS Evolved: A BGP-LS peer causes heap data disclosure when traffic-engineering routing is enabled
cve-program ·
Vendor product: Junos OS · Vendor product: Junos OS Evolved
Junos OS Evolved: A port which has been inadvertently exposed can be reached by an attacker
cve-program ·
Vendor product: Junos OS Evolved
xlsxio through 0.2.37 NULL Pointer Dereference via Worksheet Relationship Without Id
cve-program ·
https://github.com: xlsxio
Thumbnail through 1.5 OS Command Injection via generate_thumbnail File Paths
cve-program ·
https://pypi.org: thumbnail
A vulnerability was found in openldap. This security flaw causes a null pointer dereference in ber_memalloc_x() function.
cve-program ·
Vendor product: openldap
Video-stitch before 2.0.0-beta.1 OS Command Injection via concat() and cut()
cve-program ·
https://www.npmjs.com: video-stitch
Sure 0.7.0 through 0.7.6-alpha.6 Missing Authorization via Transaction Bulk Update
cve-program ·
https://github.com/we-promise/sure: sure
Possible DoS translating ASN.1 object identifiers
cve-program ·
Vendor product: OpenSSL
Junos OS and Junos OS Evolved: An EVPN default-gateway route burst causes l2ald denial of service
cve-program ·
Vendor product: Junos OS · Vendor product: Junos OS Evolved
Junos OS and Junos OS Evolved: An attacker causes routing-process denial of service when GMPLS EVPL dynamic transport is used
cve-program ·
Vendor product: Junos OS · Vendor product: Junos OS Evolved
Junos OS and Junos OS Evolved: An attacker crashes the routing daemon when co-routed bidirectional RSVP LSPs are used
cve-program ·
Vendor product: Junos OS · Vendor product: Junos OS Evolved
Junos OS and Junos OS Evolved: An attacker causes a routing daemon crash when RSVP is enabled
cve-program ·
Vendor product: Junos OS · Vendor product: Junos OS Evolved
Junos OS and Junos OS Evolved: An attacker causes rpd to crash when RSVP associated-bidirectional LSP is enabled
cve-program ·
Vendor product: Junos OS · Vendor product: Junos OS Evolved
Junos OS and Junos OS Evolved: An attacker causes a routing-process crash when MPLS-TE fast reroute is enabled
cve-program ·
Vendor product: Junos OS · Vendor product: Junos OS Evolved
Junos OS and Junos OS Evolved: An attacker causes a routing control-plane denial of service when BGP-LS traffic engineering is enabled
cve-program ·
Vendor product: Junos OS · Vendor product: Junos OS Evolved
Junos OS Evolved: An crafted LACP frame causes lacpd to crash when LACP is enabled
cve-program ·
Vendor product: Junos OS Evolved
Junos OS: MX Series: An attacker causes a Routing Engine denial of service when SCTP service is used
cve-program ·
Vendor product: Junos OS
A catalog match establishes published evidence, not applicability to your environment. Check resolved package dependencies, or open a Microsoft CVE for fixing KBs, releases and planning.