CVE-2021-0448

Technical details for CVE-2021-0448 are not publicly available in the provided documents. No affected products, root cause, or remediation are specified here. Monitor for updates from the linked sources (Ubuntu, Nessus, OSV, UB) to obtain concrete information.

CVE-2023-40322

CVE-2023-40322 relates to Moodle and involves an insufficient access check that can allow access to other users’ message data. Connected sources indicate Moodle versions affected include pre-3.9.23, pre-3.11.16 for 3.11.x, pre-4.0.10 for 4.0.x, pre-4.1.5 for 4.1.x, and pre-4.2.2 for 4.2.x. Some N...

CVE-2014-5515

According to the Ubuntu security entry for CVE-2014-5515, ntopng had several vulnerabilities that were fixed upstream in version 1.2.1. The connected records provide no further details (affected versions, root cause, impact, or exploit information). No MITRE/attack details are included. Remediati...

CVE-2014-5513

Removed by vendor...

CVE-2014-9586

This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided...

CVE-2023-45918

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

CVE-2021-29639

Rejected reason: This candidate was in a CNA pool that was not assigned to any issues during 2021...

Design/Logic Flaw

Rejected reason: This candidate was in a CNA pool that was not assigned to any issues during 2021...

Design/Logic Flaw

Rejected reason: This candidate was in a CNA pool that was not assigned to any issues during 2021...

Design/Logic Flaw

Rejected reason: This candidate was in a CNA pool that was not assigned to any issues during 2021...

Design/Logic Flaw

Rejected reason: This candidate was in a CNA pool that was not assigned to any issues during 2021...

CVE-2024-24498

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2024-1008. Reason: This candidate is a duplicate of CVE-2024-1008. Notes: All CVE users should reference CVE-2024-1008 instead of this candidate...

CVE-2024-25558

The CVE-2024-25558 entry is associated with Google ChromeOS: the PowerVR GPU driver contains an integer overflow in DevmemIntChangeSparse() that enables controllable out-of-bounds writes. This could lead to memory corruption or elevation of privileges, as described in ChromeOS security notes tied...

Novel-Plus SQL Injection Vulnerability

Novel-Plus is an online social reading and writing platform from Novel-Plus, Inc. An SQL injection vulnerability exists in Novel-Plus v4.3.0-RC1 and earlier versions, which stems from an SQL injection vulnerability in the path /novel/author/list...

Novel-Plus Code Issue Vulnerability

Novel-Plus is an online social reading and writing platform from Novel-Plus, Inc. A code issue vulnerability exists in Novel-Plus v4.3.0-RC1 and earlier versions, which stems from an arbitrary file download vulnerability in the component com.java2nb.common.controller.FileController: fileDownload...

PT-2024-20236 · Unknown · Novel-Plus

Name of the Vulnerable Software and Affected Versions: Novel-Plus versions 4.3.0-RC1 and prior Description: A SQL injection issue exists, allowing an attacker to perform SQL injection via the /system/dataPerm/list API endpoint by passing crafted offset, limit, and sort parameters. Recommendations...

Novel-Plus Security Vulnerability

Novel-Plus is an online social reading and writing platform from Novel-Plus, Inc. A security vulnerability exists in Novel-Plus version v4.3.0-RC1 and earlier versions. An attacker can exploit the vulnerability to pass specially crafted offset, limit, and sort parameters to perform a SQL injectio...

PT-2024-13423 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The issue is related to a rejected CVE candidate. No general information about the issue is provided, and there are no details about potentially...

CVE-2024-24557

A vulnerability was found in github.com/moby/moby. The classic builder cache system in moby is vulnerable to cache poisoning if the image is built using a 'FROM scratch' in Dockerfile. This flaw allows an attacker who has knowledge of the Dockerfile to create a malicious cache that would be pulle...

GHSA-XW73-RW38-6VJC Classic builder cache poisoning

The classic builder cache system is prone to cache poisoning if the image is built FROM scratch. Also, changes to some instructions most important being HEALTHCHECK and ONBUILD would not cause a cache miss. An attacker with the knowledge of the Dockerfile someone is using could poison their cache...