CVE-2023-40320

CVE-2023-40320 pertains to Moodle and is characterized by a self-XSS vulnerability that can lead to account takeover. Multiple third-party sources describe a stored/self-XSS risk in Moodle but do not provide concrete details on affected versions or a published patch in the supplied documents. Exp...

CVE-2023-40319

CVE-2023-40319 is reflected in connected data as an unpatched Linux/Ubuntu issue: Nessus notes Ubuntu packages affected with no vendor patch available; no formal CVE technical details (affected package names, versions, or root cause) are provided in the documents. OSS data (OSV/UBUNTU records) sh...

CVE-2023-40324

CVE-2023-40324 is linked to unpatched Linux distributions per Nessus data. The connected UNPATCHED_CVE_2023_40324.NASL plugin indicates one or more packages on Linux/Ubuntu are affected with no vendor-provided patch available, referencing an Ubuntu entry for CVE-2023-40324. The information does n...

CVE-2014-5515

According to the Ubuntu security entry for CVE-2014-5515, ntopng had several vulnerabilities that were fixed upstream in version 1.2.1. The connected records provide no further details (affected versions, root cause, impact, or exploit information). No MITRE/attack details are included. Remediati...

CVE-2014-5511

Removed by vendor...

CVE-2014-5513

CVE-2014-5513 is reflected in the Ubuntu security entry for ntopng, which notes vulnerabilities fixed upstream in version 1.2.1. The connected document confirms ntopng as affected and provides a fixed-upstream reference, but the specific root cause, vulnerable component details, impact scope, or ...

CVE-2014-5514

Removed by vendor...

CVE-2022-2205

Technical details for CVE-2022-2205 are not publicly available in the provided documents. Monitor for updates.

CVE-2022-2205

This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided...

CVE-2014-9586

This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided...

SSH Public Key - No supported authentication methods available (server sent public key)

Citrix ADC: SSH is not working...

CVE-2022-21698 affecting package node-problem-detector for versions less than 0.8.10-19

CVE-2022-21698 affecting package node-problem-detector for versions less than 0.8.10-19. A patched version of the package is available...

CVE-2024-1314

The connected documents describe a vulnerability in Kinto-Attachment where an existing record’s attachment can be replaced when a user has read permission on a parent collection or bucket. Impact occurs if read access exists on a parent (and can be exploited anonymously if system.Everyone has rea...

CVE-2024-25558

The CVE-2024-25558 entry is associated with Google ChromeOS: the PowerVR GPU driver contains an integer overflow in DevmemIntChangeSparse() that enables controllable out-of-bounds writes. This could lead to memory corruption or elevation of privileges, as described in ChromeOS security notes tied...

CVE-2024-25556

ChromeOS update note confirms CVE-2024-25556 is an in-system, publicly acknowledged issue: an out-of-bounds write in the PhysmemCreateNewDmaBufBackedPMR path. Affected product family: ChromeOS/ChromeOS Flex. The security fix is included in the Stable channel update for OS version 15699.58.0 and B...

CVE-2024-1281

CVE-2024-1281 is tied to a ChromeOS/ChromeOS Flex issue: a buffer/Out-of-Bounds write in the cam_lrme_mgr_hw_prepare_update function in Chrome OS. The PT security entry for Google Chrome OS (PT-2023-8539) describes a related buffer overflow in the same component, noting privilege-escalation impac...

CVE-2024-1280

CVE-2024-1280 is an out-of-bounds/write issue in the CAMX driver of ChromeOS, leading to privilege escalation/arbitrary code execution. The ChromeOS update notes list CVE-2024-1280 as a Medium severity fix in the CAMX driver and indicate the patch is included in the OS/browser updates (OS version...

SUSE SLES15 Security Update : kernel (Live Patch 3 for SLE 15 SP5) (SUSE-SU-2024:0352-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:0352-1 advisory. This update for the Linux Kernel 5.14.21-1505005519 fixes several issues. The following security issues were fixed: - CVE-2023-6932: Fixed a...

CVE-2019-17997

LayerBB 1.1.3 has a cross-site scripting issue linked to CVE-2019-13972, allowing XSS via the pm_title parameter in application/commands/new.php. The connected records note this as a related issue to CVE-2019-17997, indicating the vector relies on the pm_title input. The documentation confirms th...

CVE-2019-18940

CVE-2019-18976 describes a NULL pointer dereference in res_pjsip_t38.c affecting Sangoma Asterisk up to version 13.x and Certified Asterisk up to 13.21-x. If a re-invite for T.38 faxing arrives and the SDP contains a port of 0 with no c line, a crash can occur. This vulnerability is distinct from...