5788 matches found
CVE-2018-100022
Technical details for CVE-2018-100022 are not provided in the supplied documents; no affected products, versions, impact, or remediation are stated. Monitor for updates.
CVE-2018-147189
Technical details for CVE-2018-147189 are not publicly available in the provided documents; no affected products, vulnerability type, or fixes are described. Monitor for updates.
CVE-2021-13584
CVE-2021-13584 is addressed in OpenSUSE/SUSE security advisories for webkit2gtk3. The updates fix use-after-free vulnerabilities that could allow arbitrary code execution (CVE-2021-13543, CVE-2021-13584) and related issues (CVE-2021-9948, CVE-2021-9951, CVE-2021-9983) by upgrading webkit2gtk3 to ...
CVE-2020-11750
OpenWrt’s umdns (Multicast DNS Daemon) is affected by CVE-2020-11750, with out-of-bounds reads of heap data and potential buffer overflow in OpenWrt 18.06.0–18.06.8 and 19.07.0–19.07.2. An attacker on the same local network could exploit by sending a crafted mDNS packet. The advisory notes no kno...
CVE-2020-11752
CVE-2020-11752 is tied to the OpenWrt relayd component. OpenWrt advisory states that relayd up to OpenWrt 18.06.8 and 19.07.0–19.07.2 is vulnerable to out-of-bounds reads of heap data and possible buffer overflow, via specially crafted DHCP packets in a local-network context. The issue affects th...
CVE-2021-23829
Technical details for CVE-2021-23829 are not provided in the supplied documents. The connected OpenSSL advisory covers CVE-2021-23839/23840/23841 affecting AIX; monitor for updates regarding CVE-2021-23829.
CVE-2019-27690
CVE-2019-27690 is reported as part of ALAS-2019-1268 for Amazon Linux 2, affecting Java SE/Java SE Embedded components with the Networking subcomponent. Affected are Java SE: 7u221, 8u212, 11.0.3, 12.0.1 and Java SE Embedded: 8u211. The vulnerability allows an unauthenticated attacker with networ...
CVE-2016-1000212
CVE-2016-1000212 affects lighttpd: a vulnerability where the server could propagate the client’s HTTP_PROXY value to internal processes via the HTTP_PROXY environment variable when processing a Proxy header, enabling a remote attacker to influence outbound requests. Multiple connected advisories ...
CVE-2011-1631
Cisco IOS Software contains a denial-of-service vulnerability (CVE-2011-1631) affecting devices that use Gambino DSP components. An unauthenticated, remote attacker can exploit malformed RTP packet processing by sending crafted network packets, potentially causing device components to become unre...
CVE-2019-20970
OpenDMARC vulnerability CVE-2019-20970 (OpenDMARC before 1.4.1.1) enables remote attackers to spoof SPF/DMARC/DKIM authentication results due to parsing/interpretation issues, allowing authentication bypass. The Arch Linux advisory confirms the issue and lists the fixed version 1.4.1.1. нет
CVE-2019-1002162
Concrete details in connected documents show that CVE-2019-1002162 is associated with Fedora updates for atomic-reactor. Fedora advisories FEDORA-2019-782e6e61ce (Fedora 29) and FEDORA-2019-b60638d04e (Fedora 28) list atomic-reactor 1.6.36.1-3.fc29 and 1.6.36.1-3.fc28 as the corrected packages, r...
CVE-2018-1002161
CVE-2018-1002161 corresponds to a SQL injection flaw in Koji’s hub XMLRPC handlers. Multiple advisories (Mageia MGASA-2019-0144, OSV) describe that an unauthenticated attacker can issue arbitrary SQL commands to Koji’s database due to flaws in Koji’s hub code. Mitigation across reports is to upgr...
CVE-2021-13543
CVE-2021-13543 is a confirmed vulnerability in WebKitGTK/WebKit2GTK (e.g., openSUSE webkit2gtk3 updates) where a use-after-free could lead to arbitrary code execution. The connected advisories show the affected product as webkit2gtk3 and indicate the fix was applied by upgrading to version 2.30.3...
CVE-2014-1495
CVE-2014-1495 affects Mozilla Firefox/Firefox ESR prior to version 24.4. The root cause is an improper validation in the checkHandshake() function, which a remote, unauthenticated attacker could exploit to corrupt memory and achieve arbitrary code execution. Public documentation in the connected ...
CVE-2014-1709
CVE-2014-1709 is an IPC message injection vulnerability in Google Chrome (Chrome 34 era) that could allow bypass of sandbox restrictions. It was among the security fixes highlighted in the Chrome 34 Stable Channel Update, with multiple fixes and external credits (including geohot). The connected ...
CVE-2020-6508
CVE-2020-6508 is a Google Chrome vulnerability described in Chrome security release notes as a Use-after-free in the login screen. The connected KLA11680 advisory lists this CVE as affecting Google Chrome versions earlier than 80.0.3987.132, and Chrome’s June 2020 stable update (83.0.4103.97) ind...
CVE-2020-3324
CVE-2020-3324 maps to a Cisco StarOS IPv6 DoS in the ASR 5000 Series. The issue arises from insufficient validation of incoming IPv6 traffic, allowing an unauthenticated, remote attacker to cause a DoS (reload) on affected devices. Cisco’s advisory confirms IPv6-specific impact and absence of IPv...
CVE-2020-3540
Cisco DCNM (Data Center Network Manager) is affected by an authorization bypass in the web management interface. The issue stems from a failure to restrict resources intended for administrators, allowing an authenticated, remote attacker to view, modify, and delete data via a crafted URL. Cisco h...
CVE-2019-18918
The connected document describes a potential vulnerability in the HP Connection Optimizer driver that could allow escalation of privilege. It identifies the affected platforms/SoftPaqs and targets but does not provide concrete technical details such as exact affected versions, root cause, or expl...