CVE-2023-40323

Nessus plugin UNPATCHED_CVE_2023_40323.NASL reports an unpatched vulnerability for CVE-2023-40323 on Ubuntu Linux packages; no vendor patch is available per the plugin. The document does not specify affected Ubuntu package names or versions.

CVE-2014-5515

Removed by vendor...

CVE-2014-5513

Removed by vendor...

CVE-2014-5514

Removed by vendor...

CVE-2014-5512

Removed by vendor...

CVE-2014-5512

CVE-2014-5512 is associated with ntopng; Ubuntu notes indicate several vulnerabilities fixed upstream in version 1.2.1. Debian entry was removed by vendor. No specific exploitation details are provided in the connected sources. Mitigation mentioned: upgrade to ntopng 1.2.1 or later as per upstrea...

CVE-2014-5514

CVE-2014-5514 is represented as a reserved placeholder in the Initial document. The connected Ubuntu entry notes that ntopng had several vulnerabilities fixed upstream in version 1.2.1, which provides a remediation reference, but the provided materials do not include concrete technical details (a...

CVE-2022-2205

This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided...

CVE-2014-9586

This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided...

CVE-2022-4094

Technical details for CVE-2022-4094 are not publicly available in the provided documents; no affected products, impact, or remediation are described. Monitor for updates.

CVE-2023-7217

The CVE-2023-7217 entry is supported by connected data indicating an integer overflow in libebml.so caused by improper validation of input sizes, which can lead to a crash. Affected component: libebml.so (EBML library). No explicit versions, products, exploit details, or remediation are provided ...

CVE-2024-25558

The CVE-2024-25558 entry is associated with Google ChromeOS: the PowerVR GPU driver contains an integer overflow in DevmemIntChangeSparse() that enables controllable out-of-bounds writes. This could lead to memory corruption or elevation of privileges, as described in ChromeOS security notes tied...

CVE-2024-25556

ChromeOS update note confirms CVE-2024-25556 is an in-system, publicly acknowledged issue: an out-of-bounds write in the PhysmemCreateNewDmaBufBackedPMR path. Affected product family: ChromeOS/ChromeOS Flex. The security fix is included in the Stable channel update for OS version 15699.58.0 and B...

CVE-2024-1280

CVE-2024-1280 is an out-of-bounds/write issue in the CAMX driver of ChromeOS, leading to privilege escalation/arbitrary code execution. The ChromeOS update notes list CVE-2024-1280 as a Medium severity fix in the CAMX driver and indicate the patch is included in the OS/browser updates (OS version...

CVE-2023-49668

CVE-2023-49668 is reported as a High-severity issue affecting UNISOC kernel components. Connected Android security details confirm the vulnerability is tracked under UNISOC Kernel in the 2024-02-01 Android bulletin, with mitigation via Android patch levels and vendor updates. External CNNCVD info...

CVE-2023-50325

The connected IBM PowerSC bulletin details CVE-2023-50325 affecting IBM PowerSC 1.3, 2.0, and 2.1. The issue is a Cross-Origin Resource Sharing (CORS) misconfiguration where domain names are not limited to trusted domains, enabling an attacker to perform privileged actions and access sensitive da...

CVE-2019-17997

LayerBB 1.1.3 has a cross-site scripting issue linked to CVE-2019-13972, allowing XSS via the pm_title parameter in application/commands/new.php. The connected records note this as a related issue to CVE-2019-17997, indicating the vector relies on the pm_title input. The documentation confirms th...

CVE-2021-25817

The Initial CVE-2021-25817 entry is a reserved placeholder. Connected documents provide concrete details for CVE-2020-25817 (SilverStripe through 4.6.0-rc1) describing an XXE vulnerability in CSSContentParser. A developer utility used for parsing HTML in unit tests can be exploited to trigger XXE...

CVE-2032-43016

Technical details for CVE-2032-43016 are not publicly available in the provided documents; monitoring for updates is advised.

CVE-2021-234550

CVE-2021-234550 affects IBM Spectrum Control (versions 5.4.0–5.4.5.2). The issue is a Dojo prototype pollution in setObject that could allow a remote attacker to execute arbitrary code by sending a specially crafted request. IBM lists a fix in Spectrum Control v5.4.6. Other related advisories not...