Vulnerabilities
Recent vulnerabilities
Recent vulnerabilities from
Select from 84 available sources using the dropdown above.
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2026-109351 | Gitoxide gix-pack before 0.75.0 Denial of Service via Pack Header Object Count | 2026-10-19T01:01:21.000Z | 2026-10-19T01:01:21.000Z |
| msrc_cve-2026-53612 | util-linux mount hook_owner TOCTOU allows local privilege escalation | 2026-10-17T01:08:44.000Z | 2026-10-17T01:08:44.000Z |
| msrc_cve-2026-53613 | util-linux mount target TOCTOU allows local privilege escalation | 2026-10-17T01:08:38.000Z | 2026-10-17T01:08:38.000Z |
| msrc_cve-2026-61642 | Squid Request Smuggling in HTTP Transfer-Encoding | 2026-10-17T01:08:32.000Z | 2026-10-17T01:08:32.000Z |
| msrc_cve-2026-67418 | RabbitMQ MQTT 5: inapplicable PUBLISH property disconnects matching subscribers | 2026-10-17T01:08:26.000Z | 2026-10-17T01:08:26.000Z |
| msrc_cve-2026-110816 | qs.stringify with arrayFormat comma throws TypeError on array elements that cannot be coerced to a string | 2026-10-17T01:08:21.000Z | 2026-10-17T01:08:21.000Z |
| msrc_cve-2026-93479 | NGINX Map directive and Regex matching vulnerability | 2026-10-17T01:08:05.000Z | 2026-10-17T01:08:05.000Z |
| msrc_cve-2026-97629 | NGINX ngx_http_ssl_module vulnerability | 2026-10-17T01:07:59.000Z | 2026-10-17T01:07:59.000Z |
| msrc_cve-2026-101025 | NGINX ngx_http_js_module vulnerability | 2026-10-17T01:07:54.000Z | 2026-10-17T01:07:54.000Z |
| msrc_cve-2026-101019 | NGINX ngx_http_js_module vulnerability | 2026-10-17T01:07:49.000Z | 2026-10-17T01:07:49.000Z |
| msrc_cve-2026-95101 | NGINX ngx_http_v3_module vulnerability | 2026-10-17T01:07:43.000Z | 2026-10-17T01:07:43.000Z |
| msrc_cve-2026-15176 | NGINX ngx_http_core_module vulnerability | 2026-10-17T01:07:37.000Z | 2026-10-17T01:07:37.000Z |
| msrc_cve-2026-97205 | NGINX ngx_http_core_module vulnerability | 2026-10-17T01:07:32.000Z | 2026-10-17T01:07:32.000Z |
| msrc_cve-2026-110923 | Openssh: openssh: sftp can write outside the destination directory from a server-supplied path | 2026-10-17T01:07:25.000Z | 2026-10-17T01:07:25.000Z |
| msrc_cve-2026-95117 | Buffer Overflow vulnerability in zserge jsmn jsmn HEAD 25647e6 allows a remote attacker to cause a denial of service via the jsmn.h, jsmn_parse(), example/jsondump.c, dump() components | 2026-10-17T01:07:20.000Z | 2026-10-17T01:07:20.000Z |
| msrc_cve-2026-92392 | HTTP/2 upload Use-After-Free | 2026-10-17T01:07:14.000Z | 2026-10-17T01:07:14.000Z |
| msrc_cve-2026-110659 | ELFIO through 3.12 NULL Pointer Dereference via relocation_section_accessor get_entry | 2026-10-17T01:07:00.000Z | 2026-10-17T01:07:00.000Z |
| msrc_cve-2026-94603 | Podman: The `podman run` command can be instructed to disable almost all sandboxing by image annotation | 2026-10-17T01:06:54.000Z | 2026-10-17T01:06:54.000Z |
| msrc_cve-2026-95124 | Buffer Overflow vulnerability in madmurphy libconfini v.1.16.4 allows a remote attacker to cause a denial of service via an allocation-size mismatch between its bundled load_ini_buffer utility and strip_ini_cache() | 2026-10-17T01:06:49.000Z | 2026-10-17T01:06:49.000Z |
| msrc_cve-2026-110258 | OW2 ASM 3.0 before 9.11 Excessive Memory Allocation via Multiple RET Instructions | 2026-10-17T01:06:43.000Z | 2026-10-17T01:06:43.000Z |
| msrc_cve-2026-110270 | OW2 ASM 3.0 before 9.11 Exponential Memory Allocation in JSRInlinerAdapter | 2026-10-17T01:06:32.000Z | 2026-10-17T01:06:32.000Z |
| msrc_cve-2026-110257 | OW2 ASM 5.0 before 9.11 Excessive Memory Allocation via BootstrapMethods Attribute | 2026-10-17T01:06:21.000Z | 2026-10-17T01:06:21.000Z |
| msrc_cve-2026-110263 | OW2 ASM 3.0 before 9.11 Uncontrolled Recursion in SignatureReader | 2026-10-17T01:06:11.000Z | 2026-10-17T01:06:11.000Z |
| msrc_cve-2026-110262 | OW2 ASM 3.1 before 9.11 Excessive Memory Allocation in AdviceAdapter | 2026-10-17T01:05:56.000Z | 2026-10-17T01:05:56.000Z |
| msrc_cve-2026-110260 | OW2 ASM 3.0 before 9.11 Quadratic Memory Allocation via Exception Handlers | 2026-10-17T01:05:46.000Z | 2026-10-17T01:05:46.000Z |
| msrc_cve-2026-110261 | OW2 ASM 3.0 before 9.11 Excessive CPU Consumption via ClassWriter COMPUTE_FRAMES | 2026-10-17T01:05:34.000Z | 2026-10-17T01:05:34.000Z |
| msrc_cve-2026-110591 | OW2 ASM 1.4.3 before 9.11 Excessive Resource Consumption via Analyzer | 2026-10-17T01:05:24.000Z | 2026-10-17T01:05:24.000Z |
| msrc_cve-2026-86562 | Dpdk: dpdk: control-queue descriptor double-fetch overflows host heap in dpdk vhost (vduse) | 2026-10-17T01:04:10.000Z | 2026-10-17T01:04:10.000Z |
| msrc_cve-2026-100236 | Dpdk: dpdk: heap out-of-bounds read/write in gso header copy | 2026-10-17T01:04:04.000Z | 2026-10-17T01:04:04.000Z |
| msrc_cve-2026-86567 | Dpdk: dpdk: vduse handler fails to invalidate vring pointers when iotlb is invalidated, leading to use-after-unmap | 2026-10-17T01:03:58.000Z | 2026-10-17T01:03:58.000Z |