CVE-2024-35512

hmq v1.5.5 is vulnerable to Denial of Service DoS due to a Null Pointer Exception. A remote attacker can trigger a broker crash by sending a specially crafted MQTT UNSUBSCRIBE packet with an illegal control character Topic. The failure to properly validate this field leads to a null pointer...

CVE-2024-35176

REXML is an XML toolkit for Ruby. The REXML gem before 3.2.6 has a denial of service vulnerability when it parses an XML that has many s in an attribute value. Those who need to parse untrusted XMLs may be impacted to this vulnerability. The REXML gem 3.2.7 or later include the patch to fix this...

CVE-2021-46943

In the Linux kernel, the following vulnerability has been resolved: media: staging/intel-ipu3: Fix setfmt error handling If there in an error during a setfmt, do not overwrite the previous sizes with the invalid config. Without this patch, v4l2-compliance ends up allocating 4GiB of RAM and causin...

BELL-CVE-2024-26582

Bulletin has no description...

DEBIAN-CVE-2024-25447

An issue in the imlibloadimagewitherrorreturn function of imlib2 v1.9.1 allows attackers to cause a heap buffer overflow via parsing a crafted image...

CVE-2024-23334

creationtimestamp| type| source ---|---|--- 2024-01-30 00:21:31+00:00| seen| https://t.me/ctinow/175621 2024-01-31 05:37:10+00:00| seen| https://t.me/ctinow/176487 2024-02-05 21:16:43+00:00| seen| https://t.me/ctinow/179501 2024-02-21 21:16:49+00:00| seen| https://t.me/ctinow/190079 2024-02-28...

CVE-2023-6350

CVE-2023-6350 is a use-after-free in libavif used by Google Chrome/Chromium before version 119.0.6045.199, potentially enabling remote heap corruption via a crafted avif file. Affected software stacks include Chromium-based browsers (Chrome/Chromium) and related Electron builds, with multiple sec...

CVE-2022-3172

creationtimestamp| type| source ---|---|--- 2023-11-03 23:23:43+00:00| seen| https://t.me/cibsecurity/73549 2023-12-22 00:26:41+00:00| seen| https://t.me/ctinow/158085 2023-12-24 03:44:05+00:00| seen| https://t.me/arpsyndicate/2146 2025-03-13 20:14:03+00:00| seen|...

CVE-2022-48469

There is a traffic hijacking vulnerability in Huawei routers. Successful exploitation of this vulnerability can cause packets to be hijacked by attackers...

CVE-2023-29584

mp4v2 v2.0.0 was discovered to contain a heap buffer overflow via the MP4GetVideoProfileLevel function at /src/mp4.cpp...

CVE-2023-28683

Jenkins Phabricator Differential Plugin 2.1.5 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...

CVE-2022-47483

In telephony service, there is a missing permission check. This could lead to local denial of service in telephone service with no additional execution privileges needed...

CVE-2022-46356

Potential vulnerabilities have been identified in HP Security Manager which may allow escalation of privilege, arbitrary code execution, and information disclosure...

CVE-2022-4805

creationtimestamp| type| source ---|---|--- 2022-12-28 16:12:26+00:00| seen| https://t.me/cibsecurity/55485 2025-04-10 17:49:17+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11295...

CVE-2022-39103

In Gallery service, there is a missing permission check. This could lead to local denial of service in Gallery service with no additional execution privileges needed...

CVE-2022-36363

creationtimestamp| type| source ---|---|--- 2022-10-11 14:25:56+00:00| seen| https://t.me/cibsecurity/51106 2025-07-06 01:59:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ltb6djgj7q2i...

CVE-2021-26056

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2021. Notes: none...

CVE-2021-0938

In memzeroexplicit of compiler-clang.h, there is a possible bypass of defense in depth due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android...

CVE-2019-0588

creationtimestamp| type| source ---|---|--- 2019-01-09 14:53:48+00:00| seen| MISP/5c360a14-9018-4d13-b6c9-714c0a021402...

CVE-2011-4451

creationtimestamp| type| source ---|---|--- 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/wikkaspamexec.rb 2025-02-06 03:13:40+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:08:58+00:00| seen|...