20 matches found
CVE-2026-15514
creationtimestamp| type| source ---|---|--- 2026-07-13 00:30:19+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqigsyplnr2y 2026-07-13 04:08:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqiszrfnrl2w...
SUSE CVE-2025-15514
Ollama 0.11.5-rc0 through current version 0.13.5 contain a null pointer dereference vulnerability in the multi-modal model image processing functionality. When processing base64-encoded image data via the /api/chat endpoint, the application fails to validate that the decoded data represents valid...
CVE-2025-15514
creationtimestamp| type| source ---|---|--- 2026-01-13 00:02:07+00:00| published-proof-of-concept| Telegram/4zuUlGU6EvpMTWPbip1D3Ts-WMioI6unE3WF1UcmysLKI 2026-01-13 02:21:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcbinfeq6o2c...
Unspecified vulnerability in Huawei HarmonyOS (CNVD-2025-15514)
Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A security vulnerability exists in Huawei HarmonyOS versions 5.0.1 and 5.1.0, which stems from a stack overflow risk when parsing vector images, and can be...
CVE-2019-15514
The Privacy Phone Number feature in the Telegram app 5.10 for Android and iOS provides an incorrect indication that the access level is Nobody, because attackers can find these numbers via the Group Info feature, e.g., by adding a significant fraction of a region's assigned phone numbers...
Fedora 39 : php (2024-7c800c4df7)
The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-7c800c4df7 advisory. PHP version 8.2.24 26 Sep 2024 CGI: Fixed bug GHSA-p99j-rfp4-xqvq Bypass of CVE-2024-4577, Parameter Injection Vulnerability. CVE-2024-8926 nielsdos...
CVE-2021-46642
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...
CVE-2021-46642
Bentley View 10.15.0.75 is affected by a DGN file parsing flaw that allows an out-of-bounds read, leading to information disclosure. The issue stems from insufficient validation of user-supplied data during DGN parsing, enabling a remote attacker to read past the end of an allocated buffer. Explo...
CVE-2019-15514
creationtimestamp| type| source ---|---|--- 2022-02-11 20:24:05+00:00| published-proof-of-concept| https://t.me/arvinclub/5198...
CVE-2020-15514
The jhcaptcha extension through 2.1.3, and 3.x through 3.0.2, for TYPO3 allows XSS...
CVE-2020-15514
The CVE-2020-15514 entry concerns the jh_captcha extension for TYPO3 (versions up to 2.1.3 and up to 3.0.2) that allows cross-site scripting (XSS) due to improper encoding of user input in HTML. Affected component is the TYPO3 jh_captcha extension; root cause is lack of proper output encoding for...
CVE-2017-15514
CVE-2017-15514 is rejected/not used per the initial description.
CVE-2019-15514
The CVE-2019-15514 entry concerns Telegram mobile app version 5.10 (Android/iOS) where the Privacy > Phone Number feature incorrectly indicates access level as Nobody. The vulnerability allows attackers to discover phone numbers via the Group Info feature, effectively causing information discl...
CVE-2019-15514
The Privacy Phone Number feature in the Telegram app 5.10 for Android and iOS provides an incorrect indication that the access level is Nobody, because attackers can find these numbers via the Group Info feature, e.g., by adding a significant fraction of a region's assigned phone numbers...
Docker for Windows stable < 18.06.0-ce-win70 / edge < 18.06.0-ce-rc3-win68 Remote Privilege Escalation Vulnerability
The version of Docker for Windows installed on the remote Windows host is stable channel 18.06.0-ce-win70 or edge channel 18.06.0-ce-rc3-win68. It is, therefore, affected by a remote privilege escalation vulnerability. C Tenable Network Security, Inc. include'compat.inc'; if description...
Docker for Windows Privilege Escalation Vulnerability (Aug 2018)
Docker for Windows is prone to a privilege escalation vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
CVE-2018-15514
HandleRequestAsync in Docker for Windows before 18.06.0-ce-rc3-win68 edge and before 18.06.0-ce-win72 stable deserialized requests over the \.\pipe\dockerBackend named pipe without verifying the validity of the deserialized .NET objects. This would allow a malicious user in the "docker-users"...
CVE-2018-15514
HandleRequestAsync in Docker for Windows before 18.06.0-ce-rc3-win68 edge and before 18.06.0-ce-win72 stable deserialized requests over the \.\pipe\dockerBackend named pipe without verifying the validity of the deserialized .NET objects. This would allow a malicious user in the "docker-users"...
CVE-2018-15514
Docker for Windows is affected by CVE-2018-15514 due to HandleRequestAsync deserialization of untrusted data over the dockerBackend NamedPipe, allowing local privilege escalation to SYSTEM for users in the docker-users group. Affected builds are stable < 18.06.0-ce-win70 and edge