CVE-2024-23807 Apache Xerces C++: Use-after-free on external DTD scan
Information published. Continue reading CVE-2024-23807 Apache Xerces C++: Use-after-free on external DTD scan
Month: February 2026
CVE-2023-24538 Backticks not treated as string delimiters in html/template
Information published. Continue reading CVE-2023-24538 Backticks not treated as string delimiters in html/template
CVE-2022-2995 Incorrect handling of the supplementary groups in the CRI-O container engine might lead to sensitive information disclosure or possible data modification if an attacker has direct access to the affected container where supplementary groups are used to set access permissions and is able to execute a binary code in that container.
CVE-2025-54090 Apache HTTP Server: ‘RewriteCond expr’ always evaluates to true in 2.4.64
CVE-2025-50181 urllib3 redirects are not disabled when retries are disabled on PoolManager instantiation
CVE-2024-27050 libbpf: Use OPTS_SET() macro in bpf_xdp_query()
Information published. Continue reading CVE-2024-27050 libbpf: Use OPTS_SET() macro in bpf_xdp_query()
CVE-2025-21999 proc: fix UAF in proc_get_inode()
Information published. Continue reading CVE-2025-21999 proc: fix UAF in proc_get_inode()