UBUNTU-CVE-2022-47111

7-Zip 22.01 does not report an error for certain invalid xz files, involving block flags and reserved bits. Some later versions are unaffected...

UBUNTU-CVE-2022-47112

7-Zip 22.01 does not report an error for certain invalid xz files, involving stream flags and reserved bits. Some later versions are unaffected...

CVE-2022-47111

7-Zip 22.01 does not report an error for certain invalid xz files, involving block flags and reserved bits. Some later versions are unaffected...

CVE-2022-47112

7-Zip 22.01 is affected by CVE-2022-47112: it does not report an error for certain invalid xz files due to issues with stream flags and reserved bits. Some later versions are unaffected. Affected product: 7-Zip 22.01; root cause: inability to report errors for specific malformed xz inputs. Impact...

CVE-2022-47111

CVE-2022-47111 affects 7-Zip, specifically version 22.01, which does not report errors for certain invalid xz files (issues relate to block flags and reserved bits). Some later versions are unaffected. Multiple connected sources corroborate the core description across NVD, OSV, Debian/Ubuntu trac...

CVE-2022-47112

7-Zip 22.01 does not report an error for certain invalid xz files, involving stream flags and reserved bits. Some later versions are unaffected...

CVE-2022-47112

7-Zip 22.01 does not report an error for certain invalid xz files, involving stream flags and reserved bits. Some later versions are unaffected...

CVE-2023-32197

The CVE-2023-32197 issue is an improper privilege management vulnerability in SUSE Rancher involving RoleTemplate objects when external=true is set, enabling privilege escalation in certain scenarios. Affected versions include Rancher 2.7.0–2.7.13 and 2.8.0–2.8.4 (fixed in 2.7.14 and 2.8.5). The ...

CVE-2023-5616

The CVE-2023-5616 issue concerns GNOME Control Center on Ubuntu where SSH remote login status is not correctly reflected when systemd socket activation is used for openssh-server. The underlying problem is that enabling SSH through socket activation can be left enabled without proper visibility, ...

CVE-2024-4877

OpenVPN version 2.4.0 through 2.6.10 on Windows allows an external, lesser privileged process to create a named pipe which the OpenVPN GUI component would connect to allowing it to escalate its privileges...

CVE-2021-24008

CVE-2021-24008 is a vulnerability in multiple Fortinet products where reading a JavaScript file could disclose sensitive software-version information to an unauthenticated remote attacker. Affected are: FortiDDoS (versions up to 5.4.0 and lower branches such as 5.3.2, 5.2.0, 5.1.0, 5.0.0, 4.7.0, ...

CVE-2021-26105

FortiSandbox exposes a stack-based buffer overflow (CWE-121) in the profile parser for versions 3.2.2 and earlier and 3.1.4 and earlier. An authenticated attacker can craft HTTP requests to potentially execute arbitrary code. The issue’s root cause is a buffer overflow in the profile parser; impa...

CVE-2025-2691

Versions of the package nossrf before 1.0.4 are vulnerable to Server-Side Request Forgery SSRF where an attacker can provide a hostname that resolves to a local or reserved IP address space and bypass the SSRF protection mechanism...

CVE-2025-2691

Versions of the package nossrf before 1.0.4 are vulnerable to Server-Side Request Forgery SSRF where an attacker can provide a hostname that resolves to a local or reserved IP address space and bypass the SSRF protection mechanism...

CVE-2021-25635

An Improper Certificate Validation vulnerability in LibreOffice allowed an attacker to self sign an ODF document, with a signature untrusted by the target, then modify it to change the signature algorithm to an invalid or unknown to LibreOffice algorithm and LibreOffice would incorrectly present...

CVE-2019-6697

Fortinet FortiGate FortiOS is affected by CVE-2019-6697 due to improper neutralization of input in the hostname parameter of a DHCP packet under the DHCP monitor page. This allows an unauthenticated attacker on the same network to perform a stored XSS via a crafted DHCP packet. Affects FortiOS ve...

CVE-2019-17659

Fortinet FortiSIEM CVE-2019-17659 involves a hard-coded cryptographic key vulnerability in FortiSIEM 5.2.6. The root cause is a reused/private key that could allow a remote, unauthenticated attacker to SSH into the supervisor as the restricted user tunneluser by leveraging the key from another in...

CVE-2019-15706

CVE-2019-15706 concerns the Fortinet FortiProxy/SSL VPN portal. The issue stems from improper input neutralization during web page generation, affecting FortiProxy 2.0.0 and 1.2.9 and earlier, and FortiOS versions 6.2.1 and earlier, 6.0.8 and earlier, and 5.6.12 and earlier. This vulnerability ca...

CVE-2023-33300

FortiNAC suffers an improper neutralization of special elements in a command injection vulnerability affecting the tcp/5555 XML interface, enabling an unauthenticated attacker to copy local files from the device. Affected releases include FortiNAC 7.2.0–7.2.1 and 9.4.0–9.4.3; remediation is in Fo...

CVE-2022-29059

CVE-2022-29059 concerns Fortinet FortiWeb SQL Injection. Connected data confirms an improper neutralization of special elements used in SQL commands (CWE-89) that could allow a privileged attacker to execute SQL commands on the log database. Affected product versions include FortiWeb 7.0.1 and be...