Open Redirect

getgrav/grav is vulnerable to open redirect. The vulnerability exists because the function redirect in Common/Grav.php does not validate the internal route parameter route and redirect to another location, allowing attackers to provide a malicious route to a location or file...

The vulnerability of the pg_ctlcluster script in the postgresql-common package involves insecure privilege management. This allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the pgctlcluster script in the postgresql-common package is related to an access rights rollback error during the creation of temporary directories for sockets/stats. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrit...

CVE-2020-11529

Common/Grav.php in Grav before 1.7 has an Open Redirect. This is partially fixed in 1.6.23 and still present in 1.6.x...

CVE-2020-11529

Grav before 1.7 has an open redirect in Common/Grav.php. The issue is partially fixed in 1.6.23 but remains in 1.6.x; Grav 1.7+ is affected by the resolved behavior. Nuclei and Veracode entries describe the risk as open redirect that can redirect users to a malicious site (phishing). Practical im...

CVE-2019-19346

creationtimestamp| type| source ---|---|--- 2020-04-03 00:58:28+00:00| seen| https://t.me/cibsecurity/10959...

CVE-2019-3945

Web server running on Parrot ANAFI can be crashed due to the SDK command "CommonCurrentDateTime" being sent to control service with larger than expected date length...

Access Restriction Bypass

The Common UNIX Printing System CUPS is vulnerable to local privilege escalation to root due to insecure environment variable handling...

CVE-2020-10531

An issue was discovered in International Components for Unicode ICU for C/C++ through 66.1. An integer overflow, leading to a heap-based buffer overflow, exists in the UnicodeString::doAppend function in common/unistr.cpp...

CVE-2015-7334

creationtimestamp| type| source ---|---|--- 2020-03-27 17:52:15+00:00| seen| https://t.me/cibsecurity/10791...

postgresql: Selectivity estimators bypass row security policies

PostgreSQL maintains column statistics for tables. Certain statistics, such as histograms and lists of most common values, contain values taken from the column. PostgreSQL does not evaluate row security policies before consulting those statistics during query planning; an attacker can exploit thi...

CVE-2019-10221

creationtimestamp| type| source ---|---|--- 2020-03-20 17:32:17+00:00| seen| https://t.me/cibsecurity/10654...

Security Bulletin: Multiple vulnerabilities have been identified in Netty shipped with IBM Tivoli Netcool/OMNIbus Transport Module Common Integration Library (CVE-2019-20445, CVE-2019-20444)

Summary Netty is a dependency component shipped with the IBM Tivoli Netcool/OMNIbus Transport Module Common Integration Library for Message Bus Integration. Information about security vulnerabilities affecting Netty has been published. CVE-2019-20445, CVE-2019-20444 Vulnerability Details CVEID:...

CVE-2018-20334

creationtimestamp| type| source ---|---|--- 2020-03-20 06:32:20+00:00| seen| https://t.me/cibsecurity/10642 2025-05-15 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-05-15 2026-06-23 14:06:20+00:00| exploited|...

Hancom Office HwordApp.dll Library tfo_common Component Resource Management Error Vulnerability

Hancom Office is a mobile office program from the Korean company Hancom. The program supports viewing and editing documents in many formats. hncbd90 is one of the hncbd90 libraries. A resource management error vulnerability exists in the tfocommon component of the HwordApp.dll library in Hancom...

CVE-2019-16338

The tfocommon component in HwordApp.dll in Hancom Office 9.6.1.7634 allows a use-after-free via a crafted .docx file...

ICU: Integer overflow in UnicodeString::doAppend()

An issue was discovered in International Components for Unicode ICU for C/C++ through 66.1. An integer overflow, leading to a heap-based buffer overflow, exists in the UnicodeString::doAppend function in common/unistr.cpp...

Security Bulletin: Information Disclosure in Cognos Business Intelligence (Cognos BI) shipped with Tivoli Common Reporting (CVE-2019-1547, CVE-2019-1549, CVE-2019-1563)

Summary IBM Tivoli Common Reporting TCR interim fixes address Security Vulnerabilities CVE-2019-1547, CVE-2019-1549, CVE-2019-1563 Vulnerability Details CVEID: CVE-2019-1547 DESCRIPTION: OpenSSL could allow a local authenticated attacker to obtain sensitive information, caused by the ability to...

CVE-2017-12842

creationtimestamp| type| source ---|---|--- 2020-03-16 23:46:04+00:00| seen| https://t.me/cibsecurity/10532 2026-04-10 18:26:02+00:00| seen| https://gist.github.com/motolese/14f6c5a8151e9fb449829e58444e63c4...

DEBIAN-CVE-2016-1000111

Twisted before 16.3.1 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect CGI applications from the presence of untrusted client data in the HTTPPROXY environment variable, which might allow remote attackers to redirect a CGI application's outbou...

CVE-2020-0551

creationtimestamp| type| source ---|---|--- 2020-03-10 18:19:39+00:00| seen| https://t.me/thehackernews/632 2020-12-20 21:57:56+00:00| seen| https://t.me/CyberSecurityTechnologies/775 2024-10-10 02:42:11+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/774...