Security
Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.
Advisory catalog
Public source statements across vendors. Explicit aliases connect records; each publisher keeps its own state, severity and affected-version evidence.
Collected statements
695612 source statements · aliases may refer to the same vulnerabilityAn issue in SKYWORTH DIGITAL CO.,LTD SK-WR6640X Wi-Fi 6 Dual-Band Fiber Router (AX1800M) V1.0.3 allows a remote attacker to execute arbitrary code.
cve-program ·
Vendor product: n/a
X.400 address type confusion in X.509 GeneralName
cve-program ·
Vendor product: OpenSSL
ProPhoenix Law RMS v2022.2403.3.101 was discovered to contain an incorrect access control issue in sensitive API endpoints.
cve-program ·
Vendor product: n/a
Mobile Security Framework (MobSF) v4.5.2 is vulnerable to Command Injection in /download_data/, /api/v1/scan, Dynamic Analyzer ADB integration module.
cve-program ·
Vendor product: n/a
GNU Aspell 0.60.8.2 (first vulnerable version is not known) contains a heap-based buffer overflow write (CWE-122) in its read-only dictionary loader. String::reserve() in common/string.hpp computes its capacity check with a signed int ((int…
cve-program ·
Vendor product: Aspell
Server-Side Request Forgery (SSRF) in GitLab
cve-program ·
Vendor product: GitLab
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
cve-program ·
Vendor product: GitLab
Insufficient Granularity of Access Control in GitLab
cve-program ·
Vendor product: GitLab
URL Redirection to Untrusted Site ('Open Redirect') in GitLab
cve-program ·
Vendor product: GitLab
Junos OS and Junos OS Evolved: Insufficient validation of VXLAN overlay ping causes information disclosure when EVPN-VXLAN is configured
cve-program ·
Vendor product: Junos OS · Vendor product: Junos OS Evolved
Junos OS and Junos OS Evolved: An attacker causes a bfdd denial of service when BFD is enabled
cve-program ·
Vendor product: Junos OS · Vendor product: Junos OS Evolved
Junos OS and Junos OS Evolved: An attacker causes an rpd crash when BGP RIB streaming telemetry is in use
cve-program ·
Vendor product: Junos OS · Vendor product: Junos OS Evolved
Junos OS and Junos OS Evolved: If in a BGP EVPN scenario a malformed NLRI is received rpd crashes
cve-program ·
Vendor product: Junos OS · Vendor product: Junos OS Evolved
Junos OS and Junos OS Evolved: A malformed EVPN SRv6 route causes an rpd crash
cve-program ·
Vendor product: Junos OS · Vendor product: Junos OS Evolved
Junos OS and Junos OS Evolved: An attacker causes an rpd denial of service when EVPN multihoming preference-based DF election is used
cve-program ·
Vendor product: Junos OS · Vendor product: Junos OS Evolved
Junos OS and Junos OS Evolved: An attacker causes a routing-daemon crash when BGP Prefix-SID routes are re-advertised
cve-program ·
Vendor product: Junos OS · Vendor product: Junos OS Evolved
Junos OS and Junos OS Evolved: In a non-4byte-AS scenario a specific BGP update causes an rpd crash
cve-program ·
Vendor product: Junos OS · Vendor product: Junos OS Evolved
Acceptance of Extraneous Untrusted Data With Trusted Data in GitLab
cve-program ·
Vendor product: GitLab
Insertion of Sensitive Information into Log File in GitLab
cve-program ·
Vendor product: GitLab
The macOS version of the DigiD app is not signed with Hardened Runtime
cve-program ·
Vendor product: DigiD for macOS
Teltonika Command Injection in Backup function
cve-program ·
Vendor product: RUT · Vendor product: RUTX · Vendor product: RUTM
HCL Connections is vulnerable to cross-site scripting (XSS)
cve-program ·
Vendor product: Connections
A catalog match establishes published evidence, not applicability to your environment. Check resolved package dependencies, or open a Microsoft CVE for fixing KBs, releases and planning.