CVE-2025-29923 go-redis allows potential out of order responses when `CLIENT SETINFO` times out during connection establishment
Information published.
EPSS 0.01 CVE-2025-29923 US
Výsledky hledání
1
1
CVE-2025-0665 eventfd double close
Information published.
EPSS 0.01 CVE-2025-0665 US
1
CVE-2025-1178 GNU Binutils ld libbfd.c bfd_putl64 memory corruption
Information published.
EPSS 0.01 CVE-2025-1178 GNU US
1
CVE-2025-1176 GNU Binutils ld elflink.c _bfd_elf_gc_mark_rsec heap-based overflow
Information published.
EPSS 0.01 CVE-2025-1176 GNU US
1
CVE-2023-27043 The email module of Python through 3.11.3 incorrectly parses e-mail addresses that contain a special character. The wrong portion of an RFC2822 header is identified as the value of the addr-spec. In some applications, an attacker can bypass a protection mechanism in which application access is granted only after verifying receipt of e-mail to a specific domain (e.g., only @company.example.com addresses may be used for signup). This occurs in email/_parseaddr.py in recent versions of Python.
Information published.
EPSS 0.03 CVE-2023-27043 Python US
1
CVE-2025-21330 Windows Remote Desktop Services Denial of Service Vulnerability
To comprehensively address this vulnerability Windows 11 Version 26H1 for ARM64-based Systems and Windows 11 Version 26H1 for64-based Systems have been added to the Security Updates table. Microsoft recommend updating to the June 2026 version of your Windows operating systems.
EPSS 0.02 CVE-2025-21330 Microsoft US
3
CVE-2024-49123 Windows Remote Desktop Services Remote Code Execution Vulnerability
To comprehensively address this vulnerability Windows 11 Version 26H1 for ARM64-based Systems and Windows 11 Version 26H1 for64-based Systems have been added to the Security Updates table. Microsoft recommend updating to the June 2026 version of your Windows operating systems.
EPSS 0.01 CVE-2024-49123 Microsoft US
CVE-2024-49075 Windows Remote Desktop Services Denial of Service Vulnerability
To comprehensively address this vulnerability Windows 11 Version 26H1 for ARM64-based Systems and Windows 11 Version 26H1 for64-based Systems have been added to the Security Updates table. Microsoft recommend updating to the June 2026 version of your Windows operating systems.
EPSS 0.03 CVE-2024-49075 Microsoft US
CVE-2024-49132 Windows Remote Desktop Services Remote Code Execution Vulnerability
To comprehensively address this vulnerability Windows 11 Version 26H1 for ARM64-based Systems and Windows 11 Version 26H1 for64-based Systems have been added to the Security Updates table. Microsoft recommend updating to the June 2026 version of your Windows operating systems.
EPSS 0.01 CVE-2024-49132 Microsoft US
3
CVE-2024-43481 Power BI Report Server Spoofing Vulnerability
Corrected the Power BI Report Server version in the Security Updates table to use the public release version instead of the internal build number. This is an informational change only.
CVE-2024-43612 Power BI Report Server Spoofing Vulnerability
Corrected the Power BI Report Server version in the Security Updates table to use the public release version instead of the internal build number. This is an informational change only.
CVE-2024-43582 Remote Desktop Protocol Server Remote Code Execution Vulnerability
To comprehensively address this vulnerability Windows 11 Version 26H1 for ARM64-based Systems and Windows 11 Version 26H1 for64-based Systems have been added to the Security Updates table. Microsoft recommend updating to the June 2026 version of your Windows operating systems.
EPSS 0.03 CVE-2024-43582 Microsoft US
1
CVE-2024-38225 Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability
Updated the build numbers. This is an informational update only.
EPSS 0.01 CVE-2024-38225 Microsoft US
1
CVE-2024-35248 Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability
Updated the build numbers. This is an informational update only.
EPSS 0.01 CVE-2024-35248 Microsoft US
1
CVE-2024-21380 Microsoft Dynamics Business Central/NAV Information Disclosure Vulnerability
Updated the build numbers. This is an informational update only.
EPSS 0.02 CVE-2024-21380 Microsoft US
1
CVE-2023-5678 Excessive time spent in DH check / generation with large Q parameter value
Information published.
EPSS 0.04 CVE-2023-5678 US
1
CVE-2023-21806 Power BI Report Server Spoofing Vulnerability
Corrected the Power BI Report Server version in the Security Updates table to use the public release version instead of the internal build number. This is an informational change only.
1
CVE-2022-41127 Microsoft Dynamics NAV and Microsoft Dynamics 365 Business Central (On Premises) Remote Code Execution Vulnerability
Updated the build numbers. This is an informational update only.
1
CVE-2021-41372 Power BI Report Server Spoofing Vulnerability
A Cross-Site Scripting (XSS) and Cross-Site Request Forgery (CSRF) vulnerability exists when Power BI Report Server Template file (pbix) containing HTML files is uploaded to the server and HTML files are accessed directly by the victim. Combining these 2 vulnerabilities together, an attacker is able to upload malicious Power BI templates files to the server using the victim's session and run scripts in the security context of the user and perform privilege escalation in case the victim has…
CVSS 7.6 CVE-2021-41372 US
1
CVE-2021-40440 Microsoft Dynamics Business Central Cross-site Scripting Vulnerability
Updated the build numbers. This is an informational update only.
EPSS 0.01 CVE-2021-40440 Microsoft US
1
CVE-2021-36946 Microsoft Dynamics Business Central Cross-site Scripting Vulnerability
Updated the build numbers. This is an informational update only.
EPSS 0.01 CVE-2021-36946 Microsoft US
1
CVE-2021-34474 Microsoft Dynamics 365 Business Central Remote Code Execution Vulnerability
Updated the build numbers. This is an informational update only.
EPSS 0.02 CVE-2021-34474 Microsoft US
1
CVE-2021-26859 Microsoft Power BI Information Disclosure Vulnerability
Corrected the Power BI Report Server version in the Security Updates table to use the public release version instead of the internal build number. This is an informational change only.
1
CVE-2020-17103 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
To comprehensively address the vulnerability identified by CVE-2020-17103, Microsoft recommends installing the June 2026 updates for your Windows operating systems.
EPSS 0.27 CVE-2020-17103 Microsoft US
1
CVE-2019-6706 Lua 5.3.5 has a use-after-free in lua_upvaluejoin in lapi.c. For example a crash outcome might be achieved by an attacker who is able to trigger a debug.upvaluejoin call in which the arguments have certain relationships.
Information published.
EPSS 0.17 CVE-2019-6706 Lua US
1
CVE-2020-1173 Microsoft Power BI Report Server Spoofing Vulnerability
A spoofing vulnerability exists in Microsoft Power BI Report Server in the way it validates the content-type of uploaded attachments. An authenticated attacker could exploit the vulnerability by uploading a specially crafted payload and sending it to the user. The attacker who successfully exploited this vulnerability could then perform actions and run scripts in the security context of the user. This security update addresses the vulnerability by ensuring Power BI Report Server properly…