CVE-2019-27690

CVE-2019-27690 is reported as part of ALAS-2019-1268 for Amazon Linux 2, affecting Java SE/Java SE Embedded components with the Networking subcomponent. Affected are Java SE: 7u221, 8u212, 11.0.3, 12.0.1 and Java SE Embedded: 8u211. The vulnerability allows an unauthenticated attacker with networ...

CVE-2016-1000212

CVE-2016-1000212 affects lighttpd: a vulnerability where the server could propagate the client’s HTTP_PROXY value to internal processes via the HTTP_PROXY environment variable when processing a Proxy header, enabling a remote attacker to influence outbound requests. Multiple connected advisories ...

CVE-2011-1631

Cisco IOS Software contains a denial-of-service vulnerability (CVE-2011-1631) affecting devices that use Gambino DSP components. An unauthenticated, remote attacker can exploit malformed RTP packet processing by sending crafted network packets, potentially causing device components to become unre...

CVE-2019-20970

OpenDMARC vulnerability CVE-2019-20970 (OpenDMARC before 1.4.1.1) enables remote attackers to spoof SPF/DMARC/DKIM authentication results due to parsing/interpretation issues, allowing authentication bypass. The Arch Linux advisory confirms the issue and lists the fixed version 1.4.1.1. нет

CVE-2019-1002162

Concrete details in connected documents show that CVE-2019-1002162 is associated with Fedora updates for atomic-reactor. Fedora advisories FEDORA-2019-782e6e61ce (Fedora 29) and FEDORA-2019-b60638d04e (Fedora 28) list atomic-reactor 1.6.36.1-3.fc29 and 1.6.36.1-3.fc28 as the corrected packages, r...

CVE-2018-1002161

CVE-2018-1002161 corresponds to a SQL injection flaw in Koji’s hub XMLRPC handlers. Multiple advisories (Mageia MGASA-2019-0144, OSV) describe that an unauthenticated attacker can issue arbitrary SQL commands to Koji’s database due to flaws in Koji’s hub code. Mitigation across reports is to upgr...

CVE-2021-13543

CVE-2021-13543 is a confirmed vulnerability in WebKitGTK/WebKit2GTK (e.g., openSUSE webkit2gtk3 updates) where a use-after-free could lead to arbitrary code execution. The connected advisories show the affected product as webkit2gtk3 and indicate the fix was applied by upgrading to version 2.30.3...

CVE-2014-1495

CVE-2014-1495 affects Mozilla Firefox/Firefox ESR prior to version 24.4. The root cause is an improper validation in the checkHandshake() function, which a remote, unauthenticated attacker could exploit to corrupt memory and achieve arbitrary code execution. Public documentation in the connected ...

CVE-2014-1709

CVE-2014-1709 is an IPC message injection vulnerability in Google Chrome (Chrome 34 era) that could allow bypass of sandbox restrictions. It was among the security fixes highlighted in the Chrome 34 Stable Channel Update, with multiple fixes and external credits (including geohot). The connected ...

CVE-2020-6508

CVE-2020-6508 is a Google Chrome vulnerability described in Chrome security release notes as a Use-after-free in the login screen. The connected KLA11680 advisory lists this CVE as affecting Google Chrome versions earlier than 80.0.3987.132, and Chrome’s June 2020 stable update (83.0.4103.97) ind...

CVE-2020-3324

CVE-2020-3324 maps to a Cisco StarOS IPv6 DoS in the ASR 5000 Series. The issue arises from insufficient validation of incoming IPv6 traffic, allowing an unauthenticated, remote attacker to cause a DoS (reload) on affected devices. Cisco’s advisory confirms IPv6-specific impact and absence of IPv...

CVE-2020-3540

Cisco DCNM (Data Center Network Manager) is affected by an authorization bypass in the web management interface. The issue stems from a failure to restrict resources intended for administrators, allowing an authenticated, remote attacker to view, modify, and delete data via a crafted URL. Cisco h...

CVE-2019-18918

The connected document describes a potential vulnerability in the HP Connection Optimizer driver that could allow escalation of privilege. It identifies the affected platforms/SoftPaqs and targets but does not provide concrete technical details such as exact affected versions, root cause, or expl...

CVE-2020-6924

Technical details for CVE-2020-6924 are not publicly available in the provided documents. Monitor for updates as more information may be released.

CVE-2020-6925

HP Device Manager is affected on 4.x before 4.7 SP13 or 5.x before 5.0.4. CVE-2020-6925 describes a weak cipher susceptible to dictionary attacks in the device-manager component. The HP advisory and Rapid7 analysis indicate that chained CVEs (6925/6926/6927) can lead to unauthenticated remote acc...

CVE-2020-6926

HP Device Manager contains CVE-2020-6926: an unauthenticated RMI vulnerability that enables remote access to resources and, via an RMI call, can inject HQL that executes SQL on the bundled PostgreSQL database. Affected products/versions include HP Device Manager 4.x before 4.7 SP13 and 5.x before...

CVE-2014-1689

Huawei eSight System is affected by CVE-2014-1689: an image-upload vulnerability where the server fails to validate uploaded device images, enabling attackers to upload malicious code. This information comes from Huawei HWPSIRT advisory HW-323611 (HWPSIRT-2013-1257).

CVE-2014-1687

Huawei AR router SSH module DoS vulnerability (CVE-2014-1687): when subjected to a large volume of malformed SSH authentication packets, legitimate users may be unable to log in via SSH due to resource exhaustion. This vulnerability is documented in HWPSIRT-2013-1255 and linked CVE-2014-1687. Aff...

CVE-2010-0102

CVE-2010-0102 entry is linked to DCE/RPC-based evasion techniques. Connected advisories describe two evasion vectors: (1) using invalid NDR values to bypass IDS/IPS detection, and (2) sending fragmented DCE/RPC requests (including over CIFS) that may evade detection or carry unsafe traffic. The d...

CVE-2016-10240

CVE-2016-10240 is listed in the 2017 Android bulletin as a Qualcomm component vulnerability with a Nexus 6P impact. The entry shows the issue as Critical and notes a Qualcomm-internal reference with no publicly available patch details. The connected Android bulletin confirms the vulnerability is ...