52 matches found
CAN-2005-1279
The CAN-2005-1279 entry corresponds to tcpdump vulnerabilities in the BGP dissector (RT_ROUTING_INFO handling) that can cause a denial of service via an infinite loop when processing crafted packets. Public advisories and patches exist across multiple distributions: Debian DSA-850-1/DSA-850 fix t...
CAN-2005-2967
CVE-2005-2967 is a format-string vulnerability in the CDDB processing component of the xine-lib library. Across multiple distributions (Debian, Ubuntu, Gentoo, Mandrake/Mandriva, FreeBSD ports, etc.), advisories describe that an attacker can cause arbitrary code execution by pointing a vulnerable...
CVE-2014-5511
Removed by vendor...
CVE-2024-25558
The CVE-2024-25558 entry is associated with Google ChromeOS: the PowerVR GPU driver contains an integer overflow in DevmemIntChangeSparse() that enables controllable out-of-bounds writes. This could lead to memory corruption or elevation of privileges, as described in ChromeOS security notes tied...
CVE-2023-5649
CVE-2023-5649 is an improper input validation vulnerability in Brocade ASCG related to registered case credentials. The Brocade advisory notes that before ASCG v3.0, a local authenticated user could provide invalid inputs (e.g., special characters) when performing a supportsave operation on a Bro...
CVE-2023-35903
The IBM Security Verify Governance – Identity Manager (Virtual Appliance) is affected by CVE-2023-35903 due to improper file validation, enabling arbitrary file upload and related privilege escalation/sensitive information exposure. Affected systems are the Identity Manager virtual appliance comp...
CVE-2021-0801
CVE-2021-0801 is listed in the Android 12 security release notes under the Framework category with Type ID and Severity Moderate. The provided documents do not expose the exact root cause, affected subcomponent, exploit details, or remediation/patch information for this CVE. No public technical d...
CVE-2021-0737
CVE-2021-0737 is listed under Android 12, Framework, with a vulnerability type of Elevation of Privilege (EoP) and a High severity rating. The Android 12 security release notes enumerate this CVE among issues fixed as part of the Android 12 update, indicating that affected devices with Android 12...
CVE-2019-9887
The connected VERACODE entry describes a Cross-site Scripting (XSS) issue in the johnpbloch/wordpress package, caused by a flawed sanitization path where wp_filter_post_kses is used instead of wp_filter_kses. This allows HTML tags to pass through and be interpreted by the browser. The document do...
CVE-2019-4524
IBM Db2 for Linux, UNIX and Windows contains CVE-2019-4524, an information-disclosure vulnerability that exposes remote storage credentials to privileged users after running LOAD or UPDATE ALERT CFG through the ADMIN_CMD() stored procedure. Affected are all fix-pack levels of Db2 V9.7, V10.1, V10...
CVE-2021-11191
Technical details for CVE-2021-11191 are not publicly available in the provided documents. Monitor for updates; no affected products, exploit info, or remediation details are stated in the supplied material.
Denial Of Service (DoS)
firefox is vulnerable to denial of service. The vulnerability exists when a user is convinced to drag and drop an image to their desktop or other folder which allows an attacker to cause an application crash...