Security
Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.
Advisory catalog
Public source statements across vendors. Explicit aliases connect records; each publisher keeps its own state, severity and affected-version evidence.
Collected statements
695613 source statements · aliases may refer to the same vulnerabilitylibexpat before 2.4.9 has a use-after-free in the doContent function in xmlparse.c.
cve-program ·
Vendor product: n/a
An issue was discovered in the Linux kernel through 5.19.8. drivers/firmware/efi/capsule-loader.c has a race condition with a resultant use-after-free.
cve-program ·
Vendor product: n/a
Improper Authentication and Credential Exposure in Multiple TP-Link Kasa Devices
cve-program ·
Vendor product: HS103 v5 · Vendor product: EP10 v1 · Vendor product: EP40 v1
we-mp-rss through 1.5.3 Missing Authorization via Export File Download Endpoint
cve-program ·
Vendor product: we-mp-rss
Bit integrations <= 2.10.6 - Unauthenticated Privilege Escalation via Identity-Confused Log Re-execution to Account Takeover via Log Re-execution of Anonymous-Captured Field Data
cve-program ·
Vendor product: Bit integrations – Form Integration, Webhook, Spreadsheets, CRM, LMS & Email Automation
Directorist: AI-Powered Business Directory, Listings & Classified Ads <= 8.10.2.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Listing Deletion via 'listing_id' Parameter
cve-program ·
Vendor product: Directorist: AI-Powered Business Directory, Listings & Classified Ads
vlife through 2.0.1 Authentication Bypass via Hardcoded JWT Secret in TokenUtil
cve-program ·
Vendor product: vlife
BizSpring Shop through commit cf22d39daaf1 Payment Bypass via test_post_pay Endpoint
cve-program ·
https://github.com/BizSpringSource/bizspring-shop-opensource: BizSpring Shop · https://github.com/bizspring-open/BizSpring-Java-Mall: BizSpring Java Mall
Samsung QA-Board — Unauthenticated OS command injection via output redo/tuning
cve-program ·
Vendor product: QA-Board
OW2 ASM 3.0 before 9.11 Excessive CPU Consumption via ClassWriter COMPUTE_FRAMES
cve-program ·
https://repo1.maven.org/maven2/: ASM
libmspack through 0.11alpha Uninitialized Pointer Free via kwajd_open Error Path
cve-program ·
https://github.com: libmspack
Internal Application Information Exposure Vulnerability in Hitachi Ops Center Administrator
cve-program ·
Vendor product: Hitachi Ops Center Administrator
Tinyexr through 3.2.0 Heap Out-of-Bounds Read via ParseEXRMultipartHeaderFromMemory
cve-program ·
Vendor product: tinyexr
A malicious actor with access to the network and under certain conditions could exploit an Improper Access Control vulnerability found in UniFi Protect AI Key to access internal resources through the device.
cve-program ·
Vendor product: UniFi Protect AI Key
Koha authenticated OS command injection in tools/scheduler.pl via the jobid parameter when deleting a scheduled task
cve-program ·
Vendor product: Koha
Printcart Store - Web to Print Product Designer for WooCommerce (PCDesigner) <= 2.9.1 - Unauthenticated Arbitrary File Upload to Remote Code Execution via nbdesigner_copy_image_from_url
cve-program ·
Vendor product: Printcart Store – Web to Print Product Designer for WooCommerce
HestiaCP Low-Privileged User to Root via Config-Field Injection and PATH Hijacking
cve-program ·
Vendor product: hestiacp
Gmedia Photo Gallery <= 1.25.1 - Unauthenticated SQL Injection via 'gmedia__in' Parameter
cve-program ·
Vendor product: Gmedia Photo Gallery
RabbitMQ MQTT 5: inapplicable PUBLISH property disconnects matching subscribers
cve-program ·
Vendor product: rabbitmq-server
Netis WF2409E Wireless Settings cross site scripting
cve-program ·
Vendor product: WF2409E
Verified Reviews (Avis Vérifiés) <= 2.4.6 - Unauthenticated Stored Cross-Site Scripting via 'moderation' Parameter (discussion.commentaire)
cve-program ·
Vendor product: Verified Reviews (Avis Vérifiés)
SGLang through 0.5.21 Resource Budget Bypass via GLM-V Video Parameters
cve-program ·
https://pypi.org/project/sglang: sglang
F´: EventManager asserts on legal oversized LogBuffer values delivered over the standard GenericHub event bridge
cve-program ·
Vendor product: fprime
Tutor LMS <= 4.1.0 - Reflected Cross-Site Scripting via 'tab' Parameter
cve-program ·
Vendor product: Tutor LMS – eLearning and online course solution
Linksys E1700 Static Route addStaticRoute os command injection
cve-program ·
Vendor product: E1700
FV Flowplayer Video Player <= 7.5.54.7212 - Authenticated (Subscriber+) Arbitrary File Upload via 'video_url' Parameter
cve-program ·
Vendor product: FV Flowplayer Video Player
LogicalDOC Community Edition through 9.3 Unauthenticated Upload Disk Exhaustion via UploadServlet
cve-program ·
Vendor product: LogicalDOC Community Edition
GeoDirectory <= 2.8.190 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Image Title
cve-program ·
Vendor product: GeoDirectory – WP Business Directory Plugin and Classified Listings Directory
Kaneo before 2.1.6 Missing Authorization Allows Cross-Workspace Data Access
cve-program ·
https://github.com/usekaneo/kaneo: kaneo
Dokku: Host Command Execution via eval of Unsanitized Docker Options in DOCKER_ARGS
cve-program ·
Vendor product: dokku
jshERP through 3.6 Information Disclosure via /platformConfig/getInfoByKey
cve-program ·
Vendor product: jshERP
jshERP through 3.6 Incorrect Authorization via /supplier/exportExcel
cve-program ·
Vendor product: jshERP
L-SMASH through 2.14.5 Infinite Loop in VC-1 Importer Probe
cve-program ·
https://github.com: l-smash
MoguBlog through 6.2 Broken Access Control via networkDisk moveFile and edit
cve-program ·
Vendor product: MoguBlog
yshop-crm through 2.1.3 Missing Authorization via contract-receivables check endpoint
cve-program ·
Vendor product: yshop-crm
Discourse: Chat MessageBus delivers read-restricted messages to unauthorized users
cve-program ·
Vendor product: discourse
Appointment Booking Plugin <= 5.7.2 - Unauthenticated Authentication Bypass to Customer Account Takeover via Insufficient Verification in create_wp_user_for_customer() username_exists Fallback
cve-program ·
Vendor product: Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress
TDuck survey form through 6.0 Authorization Bypass via User-Controlled Form Key in POST /user/form/item/batch/create
cve-program ·
https://github.com/TDuckCloud/tduck-survey-form: tduck-survey-form
Janus WebRTC Server through 1.4.3 Path Traversal via Record&Play Filename
cve-program ·
https://github.com/meetecho/janus-gateway: janus-gateway
Yungengxin Cloud Billing IOCTL Process Termination LWBilling64.sys sub_14000443C exposed ioctl with insufficient access control
cve-program ·
Vendor product: Cloud Billing
libsmb2 through 6.2 Heap Out-of-Bounds Read via smb2_decode_file_all_info
cve-program ·
https://github.com/sahlberg/libsmb2: libsmb2
Jeg Kit for Elementor <= 3.2.19 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure via 'jeg_find_author' AJAX Action
cve-program ·
Vendor product: Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress
YAML safe_load production fallback to unsafe_load enables RCE via deserialization
cve-program ·
https://github.com/ManageIQ/manageiq: manageiq · Vendor product: manageiq
Khronos NNEF-Tools nnef through 1.0.10 and nnef-tools through 1.0.11 Path Traversal via Variable Label
cve-program ·
https://pypi.org: nnef · https://pypi.org: nnef-tools
A catalog match establishes published evidence, not applicability to your environment. Check resolved package dependencies, or open a Microsoft CVE for fixing KBs, releases and planning.