CAN-2005-3068

The CVE CAN-2005-3068 maps to an issue in Eric (eric3) with missing input sanitising that could allow arbitrary code execution. Publicly referenced material in connected documents identifies Debian advisory DSA-869-1 fix for eric, affecting older 3.6.2-2 (Sarge) and 3.7.2-1 (Sid). The OpenVAS/NVD...

CAN-2004-0817

CVE-2004-0817 is evidenced across connected advisories for imlib and imlib2 in FreeBSD Ports and SLES9, with CVSS base 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P). OpenVAS entries reference FreeBSD/ Gentoo advisories (imagemagick/imlib) and note missing updates per those advisories, indicating vulnerable in...

CAN-2005-3121

CVE-2005-3121 affects the module-assistant tool; a rule file before 0.9.10 creates a temporary file insecurely, allowing local users to perform unauthorized operations. Debian notes fixed in 0.9.10 (DSA-867-1) and provides upgrade guidance. Open questions remain about real-world exploitation deta...

CVE-2024-25602

Stored cross-site scripting XSS vulnerability in Users Admin module's edit user page in Liferay Portal 7.2.0 through 7.4.2, and older unsupported versions, and Liferay DXP 7.3 before service pack 3, 7.2 before fix pack 17, and older unsupported versions allows remote authenticated users to inject...

Liferay Portal and Liferay DXP Security Vulnerabilities

Liferay Portal and Liferay DXP are both products of Liferay Inc.Liferay Portal is a J2EE-based portal solution. The solution uses technologies such as EJB as well as JMS and can be used as a Web publishing and sharing workspace, enterprise collaboration platform, social network, etc. Liferay DXP ...

ITFlow Cross Site Request Forgery

CVE: CVE-2024-25344 CWE: CWE-352 Vendor: ITFlow.org Affected product: ITFlow - Before commit 432488eca3998c5be6b6b9e8f8ba01f54bc12378 Discoverer: stehled, WP-Pomoc.cz Attack-Type: Remote AV: Admin user has to open a page, provided by an attacker, which will then perform malicious request changing...

CVE-2023-21723

Technical details are not publicly available in the provided documents; no affected products, impact, or remediation are specified. Monitor for updates.

CVE-2004-0912

Technical details are not publicly available in the provided documents for CVE-2004-0912. Monitor for updates from Ubuntu security advisories and this CVE entry as more information becomes available.

CVE-2013-3109

The connected OSV entry for UBUNTU-CVE-2013-3109 lists a vulnerability described as “SSL vaildation failed to validate hostnames.” The UB:CVE-2013-3109 Ubuntu entry also shows this description. No concrete affected product/version details, root-cause analysis, impact assessment, exploit status, o...

CVE-2015-4663

Technical details are not publicly available in the provided documents. Monitor for updates from Ubuntu or OSV entries for CVE-2015-4663.

CVE-2018-9782

Technical details for CVE-2018-9782 are not provided in the supplied documents. No exposed information on affected products, impact, or remediation. Monitor for updates as additional details may be published.

CVE-2019-14775

Technical details for CVE-2019-14775 are not publicly available in the provided documents. Monitor for updates.

CVE-2015-2685

The connected records confirm a SQL injection vulnerability in the Icinga Web API (CVE-2015-2685). Affected software: Icinga Web API. Root cause: SQL injection in the Web API. Impact is not detailed in the provided documents beyond identifying an SQL injection issue. Exploitation details are not ...

CVE-2021-0448

Technical details for CVE-2021-0448 are not publicly available in the provided documents. No affected products, root cause, or remediation are specified here. Monitor for updates from the linked sources (Ubuntu, Nessus, OSV, UB) to obtain concrete information.

CVE-2022-20003

Technical details are not publicly available in the provided documents for CVE-2022-20003. Connected sources show reports/mentions (Debian/Ubuntu/CNNVD) with no explicit vulnerability specifics. Monitor for updates.

CVE-2023-40321

Technical details for CVE-2023-40321 are not provided in the supplied documents. No confirmed affected products, impact, or fixes are disclosed here. Monitor connected sources (Ubuntu/CVE references) for updates.

CVE-2023-40316

Based on connected documents, CVE-2023-40316 is referenced as an unpatched vulnerability in Linux distributions (notably Ubuntu). The Nessus unpatched plugin notes affected Ubuntu packages with no vendor-supplied patch available, implying an unresolved issue on Linux hosts until a vendor fix is r...

CVE-2023-40318

CVE-2023-40318 is documented in connected Nessus and Ubuntu records as an unpatched vulnerability affecting Linux/Ubuntu packages, with no vendor patch available at the time of assessment. Ubuntu reference shows an entry for CVE-2023-40318; Nessus plugin UNPATCHED_CVE_2023_40318.NASL states Ubunt...

CVE-2023-40324

CVE-2023-40324 is linked to unpatched Linux distributions per Nessus data. The connected UNPATCHED_CVE_2023_40324.NASL plugin indicates one or more packages on Linux/Ubuntu are affected with no vendor-provided patch available, referencing an Ubuntu entry for CVE-2023-40324. The information does n...

CVE-2023-40323

Nessus plugin UNPATCHED_CVE_2023_40323.NASL reports an unpatched vulnerability for CVE-2023-40323 on Ubuntu Linux packages; no vendor patch is available per the plugin. The document does not specify affected Ubuntu package names or versions.