Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium4.3Improper resource exposure in Extensions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a crafted HTML page.Oct 6, 2026
- Medium6.5Microsoft Word Information Disclosure VulnerabilityKEVEPSS 19.6%Sep 12, 2023
- Critical9.8When doing HTTP(S) transfers, libcurl might erroneously use the read callback ( ) to ask for data to send, even when the option has been set, if the same handle previo…Dec 5, 2022
- Critical9.8xmlparse.c in Expat (aka libexpat) before 2.4.5 allows attackers to insert namespace-separator characters into namespace URIs.Feb 16, 2022
- Medium5.3curl 7.61.0 through 7.76.1 suffers from exposure of data element to wrong session due to a mistake in the code for CURLOPT_SSL_CIPHER_LIST when libcurl is built to use…Jun 11, 2021
- Medium5.9In Libgcrypt 1.8.4, the C implementation of AES is vulnerable to a flush-and-reload side-channel attack because physical addresses are available to other processes.Jun 20, 2019
6 records · page 1 of 1
PreviousNext