18 matches found
CVE-2026-24336
creationtimestamp| type| source ---|---|--- 2026-01-23 07:13:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3md35ly7j2s2i...
CVE-2026-24336
Not used...
PT-2026-4635
CVE-2026-24336 - Apache HTTP Server Unvalidated User Input CVE ID : CVE-2026-24336 Published : Jan. 23, 2026, 5:16 a.m. | 1 hour, 58 minutes ago Description : Rejected reason: Not used Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2025-24336
SXF Common Library handles input data improperly. If a product using the library reads a crafted file, the product may be crashed...
CVE-2025-24336
SXF Common Library handles input data improperly. If a product using the library reads a crafted file, the product may be crashed...
CVE-2025-24336
SXF Common Library handles input data improperly. If a product using the library reads a crafted file, the product may be crashed...
CVE-2025-24336
SXF Common Library handles input data improperly. If a product using the library reads a crafted file, the product may be crashed...
CVE-2025-24336
CVE-2025-24336 concerns the SXF Common Library (OCF) where improper input data handling can cause a product that uses the library to crash when reading a crafted file. Public sources consistently describe the affected component as the SXF Common Library and cite the underlying issue as mishandlin...
CVE-2024-24336
A multiple Cross-site scripting XSS vulnerability in the '/members/moremember.pl', and ‘/members/members-home.pl’ endpoints within Koha Library Management System version 23.05.05 and earlier allows malicious staff users to carry out CSRF attacks, including unauthorized changes to usernames and...
CVE-2024-24336
The Koha Library Management System (version 23.05.05 and earlier) is affected by a multiple Cross-site scripting (XSS) vulnerability within the '/members/moremember.pl' and ‘/members/members-home.pl’ endpoints. This flaw allows malicious staff users to perform Cross-site Request Forgery (CSRF) at...
CVE-2022-24336
JetBrains TeamCity before 2021.2.1 is affected. An unauthenticated attacker can cancel running builds by sending an XML-RPC request to the TeamCity server. Affected versions are those prior to 2021.2.1. Remediation: upgrade to 2021.2.1 or later; as a temporary workaround, restrict access to the X...
CVE-2021-24336
The FlightLog WordPress plugin through 3.0.2 does not sanitise, validate or escape various POST parameters before using them a SQL statement, leading to SQL injections exploitable by editor and administrator users...
CVE-2021-24336
CVE-2021-24336 affects the WordPress FlightLog plugin (
CVE-2021-24336 FlightLog <= 3.0.2 - Authenticated (editor+) SQL Injection
The FlightLog WordPress plugin through 3.0.2 does not sanitise, validate or escape various POST parameters before using them a SQL statement, leading to SQL injections exploitable by editor and administrator users...
CVE-2020-24336
An issue was discovered in Contiki through 3.0 and Contiki-NG through 4.5. The code for parsing Type A domain name answers in ip64-dns64.c doesn't verify whether the address in the answer's length is sane. Therefore, when copying an address of an arbitrary length, a buffer overflow can occur. Thi...
CVE-2020-24336
CVE-2020-24336 affects Contiki (through v3.0) and Contiki-NG (through v4.5). The issue is in ip64-dns64.c DNS64 Type A domain-name parsing, where the code does not verify that the address length is sane. Copying an address of arbitrary length can cause a buffer overflow when NAT64 is enabled. Con...