CVE-2011-0068

CVE-2011-0068: The connected documentation details memory safety issues in Firefox’s WebGL/WebGLES components that could be exploited to run arbitrary code. Mozilla’s MFSA 2011-17 describes two crashes in WebGL/WebGLES that could be triggered to execute code, fixed in Firefox 4.0.1. OpenSUSE advi...

CVE-2012-0424

Technical details for CVE-2012-0424 are not provided in the supplied documents; the Initial Description is a placeholder. Monitor for updates from the sources.

CVE-2021-26976

Technical details for CVE-2021-26976 are not publicly available in the provided documents. Monitoring for updates is advised; no affected products, impact, or remediation are described in the supplied materials.

CVE-2020-26793

Technical details for CVE-2020-26793 are not publicly provided in the supplied documents; it is listed among Firefox vulnerabilities but no product/version/root-cause/impact data is included. Monitor for updates.

CVE-2021-28582

Adobe Photoshop is affected by a buffer overflow vulnerability (CVE-2021-28582) described in APSB21-38. The issue is reported to allow arbitrary code execution and is tied to Photoshop versions prior to 21.2.9/22.4.2 on Windows and macOS. Connected sources indicate a vulnerability in Photoshop (C...

CVE-2021-44184

Adobe Photoshop (Windows/macOS) versions 22.x prior to 22.5.4 and 23.x prior to 23.1 are affected by multiple vulnerabilities referenced in APSB21-113, including a buffer overflow (CVE-2021-44184) that can lead to arbitrary code execution. The issue stems from an out-of-bounds write (CVE-2021-430...

CVE-2022-24087

CVE-2022-24087 is the follow-on to CVE-2022-24086, an Improper Input Validation vulnerability in Adobe Commerce/Magento Open Source that enables pre-authenticated remote code execution. Connected sources indicate it affects Magento Open Source/Adobe Commerce 2.3.3-p1–2.3.7-p2 and 2.4.0–2.4.3-p1, ...

CVE-2022-03801

Concrete details found: CVE-2022-0380 affects the Fotobook WordPress plugin (versions up to 3.2.3). The vulnerability is a Reflected Cross‑Site Scripting (XSS) due to insufficient escaping and the use of $_SERVER['PHP_SELF'] in the options-fotobook.php file, enabling injection of arbitrary script...

CVE-2021-442255

CVE-2021-442255 is referenced in a Huawei EulerOS keepalived advisory (EulerOS-SA-2022-2565) affecting EulerOS Virtualization 3.0.6.0, where the keepalived component relies on IPVS for Layer4 load balancing. The connected OpenVAS/Nessus entries confirm the vulnerability association and assign a C...

CVE-2021-9983

CVE-2021-9983 is a vulnerability in WebKitGTK/WebKit2GTK (used by openSUSE/SUSE) that corresponds to an out-of-bounds write affecting webkit2gtk3. The connected advisories attribute the issue to a memory safety flaw in webkit2gtk3, with multiple vendors referencing CVE-2021-9983 among other CVEs....

CVE-2021-9948

CVE-2021-9948 is addressed in OpenSUSE/SUSE advisories for webkit2gtk3. The vulnerability is described as a type confusion in WebKitGTK that could lead to arbitrary code execution. Remediation is to upgrade webkit2gtk3 to version 2.30.3 (as part of openSUSE/SLE updates in 2020-2021 cycles), with ...

CVE-2018-147189

Technical details for CVE-2018-147189 are not publicly available in the provided documents; no affected products, vulnerability type, or fixes are described. Monitor for updates.

CVE-2021-1000007

The connected advisories describe a DoS: parsing duration strings with very large exponents in the Rust parse_duration crate (via parse_duration::parse) can exhaust CPU and memory, enabling an attacker to cause high resource usage. The issue is caused by using BigInt with exponentiation in the pa...

CVE-2020-24597

CVE-2020-24597: Joomla core contains a directory traversal in com_media that allows access to files outside the webroot. Public sources list affected versions as Joomla core up to 3.9.24 (Nessus plugin 112581) and up to 3.9.20 (OpenVAS entry). Root cause is lack of input validation for com_media ...

CVE-2014-1709

CVE-2014-1709 is an IPC message injection vulnerability in Google Chrome (Chrome 34 era) that could allow bypass of sandbox restrictions. It was among the security fixes highlighted in the Chrome 34 Stable Channel Update, with multiple fixes and external credits (including geohot). The connected ...

CVE-2020-6916

HP’s advisory HPSBHF03671 rev.1 describes a potential vulnerability in the HP LT4120 Snapdragon X5 LTE Driver Installer before version 1.0.1.80, which may allow escalation of privilege and arbitrary code execution. The document lists affected platforms/SoftPaqs and states HP has identified target...

CVE-2020-6913

HP Sure Sense driver may have a vulnerability that could allow Unauthorized Code Execution, per HP PSRT bulletin HPSBHF03663 rev. 1. Details are limited; bulletin may be updated as new information or SoftPaqs become available. HP recommends keeping firmware/software up to date. The connected docu...

CVE-2020-6925

HP Device Manager is affected on 4.x before 4.7 SP13 or 5.x before 5.0.4. CVE-2020-6925 describes a weak cipher susceptible to dictionary attacks in the device-manager component. The HP advisory and Rapid7 analysis indicate that chained CVEs (6925/6926/6927) can lead to unauthenticated remote acc...

CVE-2020-6927

CVE-2020-6927 is a local privilege escalation in HP Device Manager 5.0.0–5.0.3, caused by a bundled PostgreSQL database with a default, weakly protected dm_postgres account (password: single space). This allows a local attacker to connect to the database, run SQL queries, and achieve SYSTEM-level...

CVE-2020-6926

HP Device Manager contains CVE-2020-6926: an unauthenticated RMI vulnerability that enables remote access to resources and, via an RMI call, can inject HQL that executes SQL on the bundled PostgreSQL database. Affected products/versions include HP Device Manager 4.x before 4.7 SP13 and 5.x before...