231554 matches found
CVE-2023-49927
CVE-2023-49927 affects Samsung Mobile Processor, Wearable Processor, and Modem Exynos families (980, 990, 850, 1080, 2100, 2200, 1280, 1380, 1330, 9110, W920, and related modems). The baseband software fails to properly validate the RRC format types, leading to insufficient encryption. This is de...
CVE-2024-34055
CVE-2024-34055 affects Cyrus IMAPD before 3.8.3 and 3.10.x before 3.10.0-rc1. An attacker with authentication can trigger unbounded memory allocation by sending many LITERALs in a single command, enabling memory exhaustion (availability impact). Patches/releases: upgrade to Cyrus IMAPD 3.8.3 or 3...
CVE-2023-50804
CVE-2023-50804 concerns Samsung baseband/modem software in Exynos devices where NAS (Non-Access‑Stratum) format type checking is insufficient, enabling authentication bypass in the baseband stack. The issue affects multiple Exynos SoCs (e.g., Exynos 9820/9825/980/990/850/1080/2100/2200/1280/1380/...
CVE-2022-28658
CVE-2022-28658 concerns the Apport component of Ubuntu/Linux, where argument parsing mishandles filename splitting on older kernels, enabling local argument spoofing to the Apport daemon. The issue affects Apport’s handling of certain filenames and command-line arguments, with the published CVSS ...
CVE-2022-28657
CVE-2022-28657 concerns Apport, where the Python crash handler is not disabled before chroot, enabling a local attacker to exploit the issue. The vulnerability is described across multiple advisories (e.g., Ubuntu USN-6894-1) and related Nessus/OSV entries, all referencing the same root cause: Ap...
CVE-2024-5635
CVE-2024-5635 affects the itsourcecode Bakery Online Ordering System 1.0. The vulnerability is in an unknown function of the file index.php , where manipulating the argument txtsearch leads to SQL injection . The attack is executable remotely and the exploit has been disclosed publicly. Connected...
CVE-2022-28656
CVE-2022-28656 affects the Apport component in Ubuntu-derived environments. The vulnerability is described as: when is_closing_session() runs, it allows local users to consume RAM in the Apport process, which can lead to a local denial of service. The issue is disclosed and tracked across multipl...
CVE-2022-28655
CVE-2022-28655 affects the Apport component on Linux/Ubuntu, where is_closing_session() allows a local user to create arbitrary TCP D-Bus connections. The available documents describe a local attack surface with potential integrity and availability impact (I: High, A: High) while confidentiality ...
CVE-2022-28654
CVE-2022-28654 concerns the Apport component in Linux/Ubuntu. The is_closing_session() path allows an attacker to fill the apport.log, causing a denial of service or local resource exhaustion as described in multiple advisories. The vulnerability is locally exploitable with low privileges and doe...
CVE-2024-30889
AudimexEE (audimexEE) vulnerable to Cross Site Scripting in versions prior to 15.1.3.9. CVE-2024-30889 allows a remote attacker to execute arbitrary code via parameters service, method, widget_type, request_id, and payload. The fixed version is 15.1.3.9 (or later). No exploitation status is provi...
CVE-2022-28652
CVE-2022-28652 affects the Apport component, specifically ~/.config/apport/settings parsing. The vulnerability is described as a parsing issue (billion laughs) with local attack vector and a high availability impact in the NVD metrics. The connected records confirm affected product/area and the u...
CVE-2024-36675
LyLme_spage v1.9.5 is affected by SSRF via the url parameter in apply/index.php, as documented by the nuclei template and related sources. The vulnerability allows an attacker to force the server to make arbitrary requests, potentially reaching internal resources. Remediation: upgrade to a versio...
CVE-2024-36121
Netty’s netty-incubator-codec-ohttp contains a flaw in BoringSSLAEADContext: the sequence counter can overflow, causing AES-GCM nonces to repeat and potentially compromise confidentiality/integrity. Public sources describe that enabling encryption beyond 2^32 messages without proper overflow chec...
CVE-2024-32974
CVE-2024-32974 is a use-after-free in Envoy’s QUIC stack. A crash occurs in EnvoyQuicServerStream::OnInitialHeadersComplete() because QUICHE may push request headers after StopReading() and the HCM ActiveStream has been destroyed, risking use-after-free when QUICHE makes up calls. This can crash ...
CVE-2024-32975
CVE-2024-32975 affects Envoy’s QUIC stack. It describes a crash caused by an integer underflow in QuicStreamSequencerBuffer::PeekRegion(), leading to a crash at QuicheDataReader::PeekVarInt62Length(). The vulnerability is triggered by the underflow, resulting in a crash and potential denial of se...
CVE-2024-32976
CVE-2024-32976 affects Envoy’s Brotli decompressor. The Brotli filter can enter an endless loop during decompression when given extra input, potentially enabling denial-of-service. Connected advisories note this issue alongside other Envoy CVEs and list mitigations that include upgrading Envoy to...
CVE-2024-34362
CVE-2024-34362 affects Envoy’s QUIC stack: a use-after-free in HttpConnectionManager with EnvoyQuicServerStream can crash the process. Exploitation described as crafted request sequencing (no FIN, then RESET_STREAM, then close). No explicit exploit details in the Initial description; connected ad...
CVE-2024-34363
CVE-2024-34363 affects Envoy, due to how Envoy invoked the nlohmann JSON library. The issue can cause an uncaught exception from downstream data when incomplete UTF-8 strings are serialized, leading to a process crash. The vulnerability is documented across multiple advisories and vendor analyses...
CVE-2024-34364
Envoy (the cloud-native proxy) is affected by CVE-2024-34364: an out-of-memory (OOM) condition caused by the async HTTP client buffering the mirror response with an unbounded buffer. This unbounded buffering can lead to memory exhaustion and potential DoS. Public documents attribute the issue to ...