A use-after-free exists in Python through 3.9 via heappushpop in heapq.
CVE-2022-48560
A use-after-free exists in Python through 3.9 via heappushpop in heapq.
#microsoft
共收录 2274 条相关情报。
← 返回所有主题Wheels through 4.1.2 allows SQL injection on MySQL/MariaDB with backslash escaping enabled (NO_BACKSLASH_ESCAPES absent) when an application supplies request data to inline-literal paths. These include opt-in parameterize=false queries and IN lists, and positions in developer-written where strings that the parser does not bind, such as BETWEEN bounds, function arguments and LIKE ESCAPE literals. Doubling single quotes without accounting for backslash escapes allows a value to alter the query. Bound paths are not affected; whereBetween() is bound from 4.1.2. This is fixed in 4.2.0.
CVE-2026-111444
Wheels through 4.1.2 allows SQL injection on MySQL/MariaDB with backslash escaping enabled (NO_BACKSLASH_ESCAPES absent)
Wheels through 4.1.1 derives its default production error-email address from the Host header of the request that starts the application. If no explicit error-email recipient is configured, a mail server is configured, and the server accepts an attacker-chosen Host, an attacker whose request triggers a cold start can direct later error emails to an address under their control for that application's lifetime. Emails disclose error and request metadata; on engines/versions where scope dumps render, they may also disclose configuration secrets and other users' session/cookie data. On the Lucee 7 engine, scope dumps fail to render, limiting disclosure to header fields. This is fixed in 4.1.2.
CVE-2026-111450
Wheels through 4.1.1 derives its default production error-email address from the Host header of the request that starts
YAML::Syck versions before 1.47 for Perl allow a use-after-free and double-free via an anchor node freed while still on the parser value stack
CVE-2026-13713
YAML::Syck versions before 1.47 for Perl allow a use-after-free and double-free via an anchor node freed while still on
YAML::Syck versions before 1.47 for Perl allow an out-of-bounds read via a signed-char lookup-table index in syck_base64dec
CVE-2026-57075
YAML::Syck versions before 1.47 for Perl allow an out-of-bounds read via a signed-char lookup-table index in syck_base64
YAML::Syck versions before 1.36 for Perl has missing Null-Terminators which causes Out-of-Bounds Read and potential Information Disclosure
CVE-2025-11683
YAML::Syck versions before 1.36 for Perl has missing Null-Terminators which causes Out-of-Bounds Read and potential Info
YAML::Syck versions before 1.38 for Perl has an out-of-bounds read
CVE-2026-5089
YAML::Syck versions before 1.38 for Perl has an out-of-bounds read
YAML::Syck versions through 1.36 for Perl has several potential security vulnerabilities including a high-severity heap buffer overflow in the YAML emitter
CVE-2026-4177
YAML::Syck versions through 1.36 for Perl has several potential security vulnerabilities including a high-severity heap
YAML::Syck versions before 1.47 for Perl allow an out-of-bounds read via an unbounded newline scan in newline_len
CVE-2026-57077
YAML::Syck versions before 1.47 for Perl allow an out-of-bounds read via an unbounded newline scan in newline_len
YAML::Syck versions before 1.47 for Perl allow a heap use-after-free via an anchor name reused as an anchors-table key in syck_hdlr_add_anchor
CVE-2026-57076
YAML::Syck versions before 1.47 for Perl allow a heap use-after-free via an anchor name reused as an anchors-table key i
tty: fix saved termios reset race
CVE-2026-98750
tty: fix saved termios reset race
tipc: reject invalid and unexpected GRP_ACK_MSG to prevent bc_ackers underflow
CVE-2026-98550
tipc: reject invalid and unexpected GRP_ACK_MSG to prevent bc_ackers underflow
smb: client: split cifsFileInfo bitfields to avoid shared-byte RMW races
CVE-2026-98681
smb: client: split cifsFileInfo bitfields to avoid shared-byte RMW races
iio: buffer: Ensure bounce buffer used for unaligned case is zeroed.
CVE-2026-98668
iio: buffer: Ensure bounce buffer used for unaligned case is zeroed.
bpf: Fix overflow of jump offset in constant blinding
CVE-2026-98816
bpf: Fix overflow of jump offset in constant blinding
seg6: ensure packet data is writable before modifying SRH and IPv6 DA
CVE-2026-98802
seg6: ensure packet data is writable before modifying SRH and IPv6 DA
Bluetooth: hci_core: Serialize SCO and ISO scheduling with teardown
CVE-2026-98734
Bluetooth: hci_core: Serialize SCO and ISO scheduling with teardown
bpf: Fix out-of-bounds read of rtt_min in sock_ops
CVE-2026-98643
bpf: Fix out-of-bounds read of rtt_min in sock_ops
serial: core: fix NULL pointer dereference in serial_core_unregister_port()
CVE-2026-98747
serial: core: fix NULL pointer dereference in serial_core_unregister_port()
wifi: iwlegacy: 3945: free EEPROM data on remove
CVE-2026-98710
wifi: iwlegacy: 3945: free EEPROM data on remove