CVE-2020-6925

HP Device Manager is affected on 4.x before 4.7 SP13 or 5.x before 5.0.4. CVE-2020-6925 describes a weak cipher susceptible to dictionary attacks in the device-manager component. The HP advisory and Rapid7 analysis indicate that chained CVEs (6925/6926/6927) can lead to unauthenticated remote acc...

CVE-2020-6926

HP Device Manager contains CVE-2020-6926: an unauthenticated RMI vulnerability that enables remote access to resources and, via an RMI call, can inject HQL that executes SQL on the bundled PostgreSQL database. Affected products/versions include HP Device Manager 4.x before 4.7 SP13 and 5.x before...

CVE-2014-1689

Huawei eSight System is affected by CVE-2014-1689: an image-upload vulnerability where the server fails to validate uploaded device images, enabling attackers to upload malicious code. This information comes from Huawei HWPSIRT advisory HW-323611 (HWPSIRT-2013-1257).

CVE-2014-1687

Huawei AR router SSH module DoS vulnerability (CVE-2014-1687): when subjected to a large volume of malformed SSH authentication packets, legitimate users may be unable to log in via SSH due to resource exhaustion. This vulnerability is documented in HWPSIRT-2013-1255 and linked CVE-2014-1687. Aff...

CVE-2010-0102

CVE-2010-0102 entry is linked to DCE/RPC-based evasion techniques. Connected advisories describe two evasion vectors: (1) using invalid NDR values to bypass IDS/IPS detection, and (2) sending fragmented DCE/RPC requests (including over CIFS) that may evade detection or carry unsafe traffic. The d...

CVE-2016-10240

CVE-2016-10240 is listed in the 2017 Android bulletin as a Qualcomm component vulnerability with a Nexus 6P impact. The entry shows the issue as Critical and notes a Qualcomm-internal reference with no publicly available patch details. The connected Android bulletin confirms the vulnerability is ...

CVE-2016-10241

CVE-2016-10241 is listed in the Android bulletin as a Critical issue within Qualcomm components (A-35436149, QC-CR#1068577). Affected devices include Nexus 5X, Nexus 6, Nexus 6P, Pixel, and Pixel XL. The vulnerability is part of Qualcomm AMSS vulnerabilities; the patch status note indicates the p...

CVE-2016-10279

CVE-2016-10279 is listed in the Android May 2017 bulletin as a High‑severity vulnerability affecting Qualcomm components, with affected devices Pixel and Pixel XL. The entry indicates the patch is internal to Qualcomm and not publicly available, and no public exploit details are provided in the c...

CVE-2017-17768

CVE-2017-17768 is listed in the Qualcomm section as affecting the LK bootloader with a High severity (QC-CR#2127172). The connected Android security bulletin entry confirms this CVE without providing explicit root-cause or mitigation details within the document. No additional exploit specifics or...

CVE-2021-0846

Technical details for CVE-2021-0846 are not publicly available in the provided documents. No affected products, root cause, or impact are specified. Monitor for updates.

CVE-2021-1978

CVE-2021-1978 is listed in the 2021-08 Android bulletin under Qualcomm closed‑source components, with High severity in the WLAN area (QC-CR#2859124). The connected data confirms affected component as WLAN in Qualcomm components; no explicit root cause, impact details, exploit info, or remediation...

CVE-2021-27666

CVE-2021-27666 is referenced in the TencentOS Server 3 advisory (TSSA-2022:0125) as a kernel issue: a possible buffer overflow in ESP transformation. The Nessus plugin notes TencentOS Server 3 versions prior to the tested release are affected and packages are available to fix the vulnerabilities,...

CVE-2019-13609

Citrix CVE-2019-13609 is a CRLF injection vulnerability in Citrix License Server for Windows and VPX. It could allow an unauthenticated attacker to bypass authentication and cause a malicious website to read or modify license server data on an existing session. Affected products include License S...

CVE-2018-3546

CVE-2018-3546 is addressed in Slackware’s SSA-2018-240-01 by upgrading the Slackware 14.2 kernel to 4.4.153 to mitigate Foreshadow (L1 Terminal Fault) and Foreshadow-NG. The Slackware changelog and NSS plugin indicate updated packages for both x86_64 and i386, including kernel and related modules...

CVE-2021-22297

CVE-2021-22297 affects curl/libcurl with multiple advisories listing vulnerable 7.1.1–7.78.0 and related curl variants. The described issue is due to STARTTLS handling that can enable a MITM to inject data over TLS handshakes (noted in PTSecurity PT-2021-4653; Slackware SSA-2021-146-01 references...

CVE-2021-22297

This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided...

CVE-1234-1234

Technical details for CVE-1234-1234 are not publicly available in the provided documents. No affected products, root cause, impact, or remediation are stated. Monitor for updates as the entry remains reserved.

CVE-2021-40743

Adobe InDesign (Windows and macOS) versions before 17.0.0 are affected by APSB21-107. CVE-2021-40743 is a NULL pointer dereference that could lead to a denial-of-service. Other related CVEs in the same advisory include CVE-2021-42731 and CVE-2021-42732. The vulnerability set is tied to InDesign 1...

CVE-2019-16447

Adobe Illustrator prior to version 24.0 is affected by CVE-2019-16447 as part of APSB19-36. The issue is described as Binary Planting potentially leading to Local Code Execution. The linked advisories indicate this affects Windows and macOS deployments, alongside other vulnerabilities in the same...

CVE-2021-40749

Adobe Illustrator is affected by CVE-2021-40749 as part of APSB21-98; a NULL pointer dereference in Illustrator 25.4.1 and earlier (Windows/macOS) can cause DoS. The issue is addressed by Adobe in the 25.4.2 update (APSB21-98). Affected products/versions and explicit exploit details are corrobora...