CVE-2023-20907

CVE-2023-20907 is listed in the Android 14 security release notes as a high-severity DoS in the Framework component. The Android bulletin groups it among Framework vulnerabilities for Android 14, with reference A-239415997. The document does not provide specific affected product versions beyond A...

CVE-2024-2094

Technical details for CVE-2024-2094 are not publicly available in the provided documents. Monitor for updates as additional information is published.

Address the Challenges of Compliance and Cybersecurity with Zero Trust

The intersection of compliance and cybersecurity is an opportunity for your organization to adopt solutions that simultaneously solve challenges in both areas...

leukaemia.org.nz Cross Site Scripting vulnerability OBB-3861771

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

cchvo.org Cross Site Scripting vulnerability OBB-3861053

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2020-40750

CVE-2020-40750 is referenced in IBM security bulletins for IBM WebSphere Application Server: cross-site scripting in the Admin Console. Affected products/versions include WebSphere Application Server 9.0, 8.5, 8.0, and 7.0. The IBM bulletin also notes additional references to related issues (e.g....

CVE-2020-38712

The IBM bulletin ties CVE-2020-38712 to SOAPAction spoofing in JAX-WS Web Services processing, affecting IBM WebSphere Application Server and IBM Security Verify Governance/Identity Manager component. Affected products include WebSphere Application Server versions 9.0, 8.5, 8.0, and 7.0, and the ...

CVE-2022-14262

Technical details for CVE-2022-14262 are not publicly provided in the supplied documents. Monitor for updates.

CAN-2005-3256

CVE-2005-3256 affects enigmail, the GPG support extension for Mozilla MailNews and Mozilla Thunderbird. The OpenVAS/Nessus entries reference Debian/Ubuntu/Mandrake advisories describing a programming error that can cause mail to be encrypted with the wrong public key, potentially exposing confide...

CAN-2004-0017

CVE-2004-0017 is for phpGroupWare and covers multiple SQL injection vulnerabilities in the calendar and infolog modules caused by insufficient sanitization/non-escaping of user-supplied data. Affected software is phpGroupWare (around version 0.9.14). Debian DSA-419-1 notes fixes in woody (0.9.14-...

CAN-2003-0961

CVE-2003-0961 is referenced across multiple OpenVAS entries tying it to kernel-related issues in 2.4.x series and Debian/Gentoo advisories (DSA GLSA 200312-02, DSA 439-1, DSA 442-1, and 450-1) and Slackware advisory SSA:2003-336-01. The connected documents indicate affected architectures and patc...

CAN-2004-0110

CVE-2004-0110 relates to libxml and libxml2 buffer overflow bugs in URL parsing and DNS handling, allowing remote arbitrary code execution. Connected advisories (SUSE, Fedora, CentOS, RHEL) confirm exploitation via long URLs or DNS responses and describe patches to libxml/libxml2. Remediation is ...

CAN-2004-0105

Connected advisories and scanners link CVE-2004-0105 to metamail-related advisories across multiple distributions (Slackware SSA:2004-049-02, Gentoo GLSA 200405-17, Debian DSA-449, FreeBSD ports/metamail entries). These sources describe missing updates for metamail and reference CVE-2004-0104/010...

CAN-2004-0366

CVE-2004-0366 corresponds to a SQL injection vulnerability in libpam-pgsql (pam-pgsql) prior to version 0.5.2, where not all user data is escaped before database submission. Debian security records (DSA-469/DSA-469-1) document a remote flaw in the PAM module for PostgreSQL authentication and stat...

CAN-2004-0374

CVE-2004-0374 affects Interchange (pre-5.0.1). The vulnerability results from missing input sanitising, allowing remote attackers to expose the content of arbitrary variables and read/modify sensitive SQL information via an HTTP request that ends with the string SQLUSER . Public details in the co...

CAN-2004-0111

CVE-2004-0111 affects gdk-pixbuf before 0.20, where a malformed BMP file can cause a denial of service (crash) in apps that use the library. Public records across Debian/Red Hat advisories and OSV entries confirm the vulnerability, with Debian/DSA 464-1 and RHSA-2004:103 noting the impact and rec...

CAN-2004-0151

CVE-2004-0151 corresponds to a local privilege escalation in xitalk, affecting xitalk packages 1.1.11 and earlier. Debian’s DSA-462-1 notes a missing privilege release that allows a local user to execute arbitrary commands under the GID utmp, potentially removing traces from utmp. Remediation per...

CAN-2004-0372

CVE-2004-0372 corresponds to multiple vulnerabilities in xine-related components (xine-ui and xine-lib). Publicly referenced advisories (Debian DSA-477-1, GLSA 200404-20, Gentoo GLSA) describe insecure temporary-file creation in xine-check and xine-bugreport scripts, and, more broadly, the abilit...

CAN-2004-0421

CVE-2004-0421 is a libpng vulnerability referenced across multiple advisories. The issue stems from an off-by-one error in the png_format_buffer function (pngerror.c) in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4, which allows a remote attacker to ...

CAN-2004-0400

CVE-2004-0400 is tied to Exim, with multiple advisories across environments (Debian DSA-501, DSA-502-1; Gentoo GLSA 200405-07; FreeBSD/OpenVAS entries). Public details in connected docs indicate related issues include Exim at-tls handling and a remote-exploit risk (e.g., buffer overflows in speci...