Threats affecting pkg:generic/radare2

217,631 threats

Severity	CVSS	Threat	Source	Published
High	–	CVE-2026-120651Microsoft · CGI versions before 5.00 for Perl allow an infinite loop on a short request body when $DISABLE_UPLOADS is set High2026-11-07GCVE DatabaseCVE-2026-120651 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle Report on CVE-2026-120651 Vulnerability Microsoft Security Response Center CWE-835 #microsoft-security-response-ce	GCVE Database	2026-11-07
High	–	CVE-2026-120650Microsoft · CGI versions before 5.00 for Perl allow memory, CPU and disk exhaustion via missing or unenforced request size High2026-11-07GCVE DatabaseCVE-2026-120650 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle Report on CVE-2026-120650 Vulnerability Microsoft Security Response Center CWE-770 #microsoft-security-response-ce	GCVE Database	2026-11-07
High	–	CVE-2026-120648Microsoft · CGI versions before 5.00 for Perl allow HTML injection via text containing --> in comment High2026-11-07GCVE DatabaseCVE-2026-120648 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle Report on CVE-2026-120648 Vulnerability Microsoft Security Response Center CWE-79 #microsoft-security-response-ce	GCVE Database	2026-11-07
Medium	–	CVE-2026-120647Microsoft · CGI versions before 5.00 for Perl allow Content-Disposition parameter injection via unescaped double quotes in the Medium2026-11-07GCVE DatabaseCVE-2026-120647 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle Report on CVE-2026-120647 Vulnerability Microsoft Security Response Center CWE-116 #microsoft-security-response-ce	GCVE Database	2026-11-07
High	–	CVE-2026-120641Microsoft · CGI versions before 5.00 for Perl return upload filenames with any client-supplied path, including ../ and Windows paths High2026-11-07GCVE DatabaseCVE-2026-120641 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle Report on CVE-2026-120641 Vulnerability Microsoft Security Response Center CWE-22 #microsoft-security-response-ce	GCVE Database	2026-11-07
High	–	CVE-2026-120644Microsoft · CGI::Cookie versions before 5.00 for Perl allow cookie attribute injection via unvalidated path, domain and expires High2026-11-07GCVE DatabaseCVE-2026-120644 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle Report on CVE-2026-120644 Vulnerability Microsoft Security Response Center CWE-116 #microsoft-security-response-ce	GCVE Database	2026-11-07
Medium	–	CVE-2026-120642Microsoft · CGI versions before 5.00 for Perl return request-derived values untainted under taint mode Medium2026-11-07GCVE DatabaseCVE-2026-120642 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle Report on CVE-2026-120642 Vulnerability Microsoft Security Response Center CWE-1173 #microsoft-security-response-ce	GCVE Database	2026-11-07
High	–	CVE-2026-120639Microsoft · CGI versions before 5.00 for Perl allow HTTP header injection via entity decoding after the newline check in header High2026-11-07GCVE DatabaseCVE-2026-120639 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle Report on CVE-2026-120639 Vulnerability Microsoft Security Response Center CWE-113 #microsoft-security-response-ce	GCVE Database	2026-11-07
High	–	CVE-2026-120636Microsoft · CGI versions before 5.00 for Perl allow open redirects and script injection via URLs built from REQUEST_URI in url and High2026-11-07GCVE DatabaseCVE-2026-120636 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle Report on CVE-2026-120636 Vulnerability Microsoft Security Response Center CWE-601 #microsoft-security-response-ce	GCVE Database	2026-11-07
High	–	CVE-2026-120635Microsoft · CGI versions before 5.00 for Perl allow form fields to be smuggled past proxies and WAFs via multipart parsing that High2026-11-07GCVE DatabaseCVE-2026-120635 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle Report on CVE-2026-120635 Vulnerability Microsoft Security Response Center CWE-436 #microsoft-security-response-ce	GCVE Database	2026-11-07
High	–	CVE-2026-120645Microsoft · CGI versions before 5.00 for Perl allow denial of service via submitted values used as a regex for optgroup selection High2026-11-07GCVE DatabaseCVE-2026-120645 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle Report on CVE-2026-120645 Vulnerability Microsoft Security Response Center CWE-1333 #microsoft-security-response-ce	GCVE Database	2026-11-07
Medium	6.2	CVE-2026-92824Microsoft · Libmodulemd: libmodulemd: out-of-bounds read when emitting rpm-map artifacts Medium6.22026-11-07GCVE DatabaseCVE-2026-92824 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle Report on CVE-2026-92824 Vulnerability Microsoft Security Response Center CWE-125 #microsoft-security-response-ce	GCVE Database	2026-11-07
High	7.5	CVE-2026-120194json_path_query() with negative jsonpath slice step · Json-glib: json-glib: infinite loop High7.52026-11-07GCVE DatabaseCVE-2026-120194 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle Report on CVE-2026-120194 Vulnerability Microsoft Security Response Center CWE-835 #microsoft-security-response-ce	GCVE Database	2026-11-07
Medium	6.5	CVE-2026-114456Microsoft · Missing origin validation for the externalbrowser authenticator callback in multiple Snowflake client drivers Medium6.52026-11-07GCVE DatabaseCVE-2026-114456 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle Report on CVE-2026-114456 Vulnerability Microsoft Security Response Center CWE-346 #microsoft-security-response-ce	GCVE Database	2026-11-07
Low	2.0	CVE-2026-120740Microsoft · Hivex: hivex: denial of service via out-of-bounds read in big-data block processing Low2.02026-11-07GCVE DatabaseCVE-2026-120740 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle Report on CVE-2026-120740 Vulnerability Microsoft Security Response Center CWE-125 #microsoft-security-response-ce	GCVE Database	2026-11-07
Medium	4.4	CVE-2026-100407Microsoft · Git for Windows: git-credential-wincred OAuth Store Heap Overflow Medium4.42026-11-07GCVE DatabaseCVE-2026-100407 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle Report on CVE-2026-100407 Vulnerability Microsoft Security Response Center CWE-787 #microsoft-security-response-ce	GCVE Database	2026-11-07
Medium	4.4	CVE-2026-100408Microsoft · Git for Windows: git-credential-wincred Erase Path Heap Overflow Medium4.42026-11-07GCVE DatabaseCVE-2026-100408 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle Report on CVE-2026-100408 Vulnerability Microsoft Security Response Center CWE-787 #microsoft-security-response-ce	GCVE Database	2026-11-07
Medium	6.1	CVE-2026-119776Microsoft · frr: ospf6d fails to enforce all OSPFv3 packets use IPv6 link-local addresses Medium6.12026-11-07GCVE DatabaseCVE-2026-119776 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle Report on CVE-2026-119776 Vulnerability Microsoft Security Response Center CWE-304 #microsoft-security-response-ce	GCVE Database	2026-11-07
Medium	4.5	CVE-2026-121520Microsoft · Malicious client could set xattr value outside of BuildKit state directory Medium4.52026-11-07GCVE DatabaseCVE-2026-121520 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle Report on CVE-2026-121520 Vulnerability Microsoft Security Response Center CWE-61 #microsoft-security-response-ce	GCVE Database	2026-11-07
Medium	5.3	CVE-2026-112910Microsoft · filelock: WindowsFileLock ignores mode: a 0o600 lock file and the ReadWriteLock database inherit the directory ACL Medium5.32026-11-07GCVE DatabaseCVE-2026-112910 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle Report on CVE-2026-112910 Vulnerability Microsoft Security Response Center CWE-732 #microsoft-security-response-ce	GCVE Database	2026-11-07

Page 45 of 10,882