CAN-2005-1109

CVE-2005-1109 refers to JunkBuster, a HTTP proxy. The vulnerability (affecting JunkBuster before version 2.0.2-r3) arises from heap corruption due to inconsistent use of an internal function, enabling remote attackers to crash the daemon and potentially execute arbitrary code. Impact is a remote ...

CAN-2005-0753

CVE-2005-0753 is a buffer overflow in CVS servers that process version/author data, potentially allowing remote code execution. Affected: CVS server (not clients) across multiple platforms; impact described as remote arbitrary code execution, depending on access method. Public details in Debian/F...

CAN-2005-1858

This CVE affects FUSE (filesystem in userspace): FUSE 2.x before 2.3.0 fails to clear memory from unfilled pages after a read returns a short byte count, potentially allowing local users to disclose sensitive information. The Debian advisory (DSA-744-1) links CVE-2005-1858 to fuse and notes a fix...

CAN-2005-1852

CAN-2005-1852 is an integer overflow in libgadu (Gadu library) that affects Kopete/Kdenetwork and ekg-related components. A remote attacker could send specially crafted Gadu-Gadu messages to trigger the overflow, potentially crashing the involved application or executing arbitrary code. Public ad...

CAN-2005-1532

CVE-2005-1532 is a vulnerability in Mozilla-based applications (Mozilla Suite/Firefox/Thunderbird) caused by insufficient validation in handling JavaScript eval and Script objects, enabling remote code execution with the privileges of the logged-in user. Public advisories reference this CVE along...

CAN-2005-2088

The connected Nessus document lists CVE-2005-2088 as an HTTP Request Smuggling issue in Apache httpd when acting as a proxy: Apache 1.3.x before 1.3.34 and 2.0.x before 2.0.55 are vulnerable to crafted requests with both Transfer-Encoding: chunked and Content-Length headers, leading to misinterpr...

CAN-2005-2536

CVE-2005-2536 affects pstotext, which failed to use Ghostscript -dSAFER, allowing remote attackers to exploit malformed PostScript/PDF files to execute arbitrary commands. The issue is documented in Debian DSA-792-1 and OSSC/NASL entries, stating that pstotext did not invoke -dSAFER and that fixe...

CAN-2005-2658

CVE-2005-2658 is a buffer overflow in Turquoise SuperStat (turqstat) prior to 2.2.x. Debian advisories describe remote exploitation via a crafted NNTP server that could execute arbitrary code. Public records cite fixed versions per distribution: 2.2.1woody1 (woody), 2.2.2sarge1 (sarge), and 2.2.4...

CAN-2005-2367

This CVE (CAN-2005-2367) is part of a set of issues in Ethereal (network traffic analyser). Connected advisories confirm format-string vulnerabilities in several dissectors could allow remote code execution; other CVEs (2360–2366) primarily describe denial-of-service conditions. Remediation acros...

CAN-2005-2177

CVE-2005-2177 is associated with net-snmp. The connected advisories state a remote DoS in net-snmp where a specially crafted packet can crash the agent; Red Hat/CentOS notes this under RHSA-2005:395 with a patch update. A related issue, CVE-2005-1740, concerns insecure temporary files that could ...

CVE-2014-5513

Removed by vendor...

CVE-2023-35903

The IBM Security Verify Governance – Identity Manager (Virtual Appliance) is affected by CVE-2023-35903 due to improper file validation, enabling arbitrary file upload and related privilege escalation/sensitive information exposure. Affected systems are the Identity Manager virtual appliance comp...

CVE-2018-7646

The connected Veracode entry identifies a denial of service in svgexport caused by a missing timeout when loading an external image. Impact is DoS; no exploit details are provided in the supplied documents. No CVE-specific remediation is stated here; monitor for updates.

CVE-2017-1579

CVE-2017-1579 is addressed in IBM DOORS Next Generation (DNG/RRC). The IBM Security Bulletin reports a cross-site scripting vulnerability in the Web UI of Rational DOORS Next Generation, allowing an attacker to embed arbitrary JavaScript and potentially disclose credentials within a trusted sessi...

CVE-2016-6109

CVE-2016-6109 is a cross-site scripting vulnerability in IBM Business Process Manager (BPM) used with IBM Cloud Orchestrator/Enterprise. IBM advisories (IBM BPM/Cloud Orchestrator links) enumerate affected BPM/Cloud Orchestrator versions and state the vulnerability allows embedding arbitrary Java...

SUSE CVE-2022-37460

RESERVED This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided...

CVE-2022-20211

Android 12 security bulletin lists CVE-2022-20211 under the System category as an Android bug with Type ID and Moderate severity. The entry confirms the CVE exists within the Android 12 vulnerability set but provides no explicit technical details, affected sub-component, root cause, exploitabilit...

CVE-2021-0863

CVE-2021-0863 is listed in the Android 12 security release notes under Framework as an Information Disclosure (ID) vulnerability with Android bug ID A-118188362, Severity Moderate. It is addressed as part of the Android 12 release; no exploitation details are provided in the document.

CVE-2021-0852

From the Android 12 security release notes, CVE-2021-0852 is listed under the System vulnerabilities as Type: ID (information disclosure) with Moderate severity. It references Android bug ID A-156096455. The entry confirms the CVE is part of the Android 12 fixes, but the release notes do not prov...

CVE-2021-0834

CVE-2021-0834 is listed in the Android 12 security release notes under the System component with a Moderate severity. The Android bulletin cross-references this CVE to Android bug ID A-172670679. The notes indicate no exploitation reports and that fixes are part of the Android 12 release, with de...