CVE-2023-37366

CVE-2023-37366 is a remote denial-of-service vulnerability in Samsung Exynos mobile, automotive, and modem processors (including Exynos 9810 through 2200, Modem 5123/5300, and Auto T5123). The root cause is in cd_parseMsg (file cd_codec.c) within the Shannon SM Task, where improper input validati...

CVE-2023-24286

sgt-puzzles (Portable Puzzle Collection) versions before 20230116.5782e29 contain a buffer overflow in the Mosaic puzzle , triggerable via a crafted save file (game description parameter). The vulnerability carries a CVSS 3.1 score of 2.9 (LOW) , with a local attack vector, high complexity, and l...

CVE-2023-24283

Portable Puzzle Collection (sgt-puzzles) versions before 20230116.5782e29 contain a buffer overflow in the Guess puzzle component, triggered by a crafted save file, leading to a Denial of Service . The CVSS 3.1 score is 2.9 (Low) , with a local attack vector and high complexity. An upstream fix i...

CVE-2023-24291

Simon Tatham's Portable Puzzle Collection (sgt-puzzles) before version 20230116.5782e29 contains a buffer overflow (also described as an integer overflow) triggered via the record length parameter in a crafted save file. The vulnerability can lead to a buffer overrun in the application, with a lo...

CVE-2023-34854

HotelDruid before 3.0.6 is affected by insufficient file upload sanitation in the backup/restore function, enabling authenticated remote code execution (RCE) . The vulnerability requires high privileges and is network-based with high attack complexity, yielding a CVSS 3.1 score of 6.6 (MEDIUM) . ...

advisory-database

Python Packaging Advisory Database This is a community owned repository of advisories for packages published on https://pypi.org. Advisories live in the vulns directory and use a YAML encoding of a simple format. Contributing advisories Making a pull request Existing entries can be edited by simp...

CVE-2025-67070-Intelbras-CFTV-MFA-Bypass

Intelbras NVD 9032 R Ftd – Vulnerabilidad crítica de restablecimiento de contraseña Descubierto por: Theo Cia CVE: CVE-2025-67070 Estado: Reportado al proveedor Fecha de descubrimiento: Noviembre 2025 Impacto: Acceso administrativo completo mediante bypás de MFA Firmware: V2.800.00IB00C.0.T Build...

NVD-Database

Este repositorio no tiene un README...

Apache OFBiz Directory Traversal - Remote Code Execution

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Apache OFBiz. This issue affects Apache OFBiz: before 18.12.13 id: CVE-2024-32113 info: name: Apache OFBiz Directory Traversal - Remote Code Execution author: DhiyaneshDK severity: high description: |...

CVE-2021-21193

CVE-2021-21193 Introduction to Hacking Vulnerability case study presentations March 2022 Mehrzad Khodashenas, Setareh Sheikholeslamzadeh Introduction Quick Info CVE Dictionary Entry: CVE-2021-21193 NVD Published Date: 03/16/2021 NVD Last Modified: 12/03/2021 Source: Chrome...

CVE-2026-25857

https://nvd.nist.gov/vuln/detail/CVE-2026-25857...

spring-cvss-check

spring-cvss-check 覆盖 15 条 Spring / Tomcat 官方安全公告2026-08-20 七条 · 2026-06-08 五条 · 2025-09-15 一条 · Tomcat 2026-08-25 两条。 其中 8 条,接 NVD 的扫描器报CRITICAL 9.19.8,而厂商官方评的是 LOW / MEDIUM。 另外 7 条两边评级完全一致 —— 差别只有一个:厂商有没有自己给 CVE 记录提交 CVSS 分数。 这个工具回答四个问题: 1. 你的版本中了这 15 条里的哪几条 2. 官方到底评多少分以及 NVD 上那个分是谁打的 3...

CVE-2026-3786

NVD-CVE-2026-3786 https://nvd.nist.gov/vuln/detail/CVE-2026-3786...

cve-2026-9082

CVE-2026-9082 Tipo : Inyección SQL CWE-89 Producto afectado : Drupal Core API de abstracción de base de datos Aviso de Drupal : SA-CORE-2026-004 Publicado : 20 de mayo de 2026 Gravedad : Altamente crítica Drupal 20/25 | NVD CVSS 6.5 ¿Qué es? CVE-2026-9082 es una vulnerabilidad de inyección SQL en...

MINI-6XR7-P7W3-HW2W

Bulletin has no description...

CVE-2026-70967

...

BELL-CVE-2026-68178

Bulletin has no description...

SSRF (Server-Side Request Forgery) axios Dependency in Jira Service Management Data Center

This High severity SSRF Server-Side Request Forgery vulnerability was introduced in versions 5.17.2, 10.0.0, 10.1.1, 10.2.0, 10.3.0, 10.4.0, 10.5.0, 10.6.0, 10.7.1, 11.0.0, 11.1.0, 11.2.0, and 11.3.0 of Jira Service Management Data Center. This SSRF Server-Side Request Forgery vulnerability, with...

File Inclusion rollup Dependency in Jira Service Management Data Center

This High severity File Inclusion vulnerability was introduced in versions 11.3.8 of Jira Service Management Data Center. This File Inclusion vulnerability, with a CVSS Score of 8.8 and a CVSS Vector of CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:P allows an unauthenticated...

DoS (Denial of Service) org.springframework:spring-expression Dependency in Crowd Data Center

This High severity DoS Denial of Service vulnerability was introduced in versions 7.0.0, 7.1.0, and 7.2.0 of Crowd Data Center. This DoS Denial of Service vulnerability, with a CVSS Score of 7.5 and a CVSS Vector of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H allows an unauthenticated attacker t...