CVE-2024-24883

CVE-2024-24883 affects BdThemes Prime Slider – Addons For Elementor (WordPress). Affected versions: up to 3.11.10. Root cause: missing authorization check in bdt_duplicate_as_draft() allows authenticated users with contributor-level access and above to duplicate private/password-protected posts. ...

CVE-2024-24850

CVE-2024-24850: Quicksand Post Filter jQuery Plugin (WordPress) <= 3.1.1 has a Missing Authorization vulnerability via quicksand_admin_ajax, allowing unauthenticated access to delete arbitrary site options (Broken Access Control). The CVE is listed with a high risk in WordPress vulnerability f...

CVE-2024-29019

CVE-2024-29019 affects ESPHome’s dashboard API (version 2023.12.9 and prior) and is due to a CSRF flaw that lets a logged-in user’s session perform operations on configuration files if the victim visits a weaponized page. The issue enables bypassing authentication for API calls that manipulate co...

CVE-2024-25651

RESERVED This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided...

CVE-2024-25228

RESERVED This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided...

CVE-2024-1654

RESERVED This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided...

CVE-2024-1221

RESERVED This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided...

CVE-2024-26048

Technical details for CVE-2024-26048 are not publicly available in the provided documents. No impacted products, versions, or root cause are specified. Monitor for updates.

CVE-2024-2094

Technical details for CVE-2024-2094 are not publicly available in the provided documents. Monitor for updates as additional information is published.

CVE-2022-14262

Technical details for CVE-2022-14262 are not publicly provided in the supplied documents. Monitor for updates.

CAN-2005-3256

CVE-2005-3256 affects enigmail, the GPG support extension for Mozilla MailNews and Mozilla Thunderbird. The OpenVAS/Nessus entries reference Debian/Ubuntu/Mandrake advisories describing a programming error that can cause mail to be encrypted with the wrong public key, potentially exposing confide...

CAN-2005-2475

The CVE-2005-2475 entry is confirmed through multiple connected documents: unzip contains a race condition in file permission handling during extraction that could let a local attacker modify permissions of extracted files. The issue is tied to the unzip utility and is addressed by the backported...

CAN-2004-0017

CVE-2004-0017 is for phpGroupWare and covers multiple SQL injection vulnerabilities in the calendar and infolog modules caused by insufficient sanitization/non-escaping of user-supplied data. Affected software is phpGroupWare (around version 0.9.14). Debian DSA-419-1 notes fixes in woody (0.9.14-...

CAN-2004-0110

CVE-2004-0110 relates to libxml and libxml2 buffer overflow bugs in URL parsing and DNS handling, allowing remote arbitrary code execution. Connected advisories (SUSE, Fedora, CentOS, RHEL) confirm exploitation via long URLs or DNS responses and describe patches to libxml/libxml2. Remediation is ...

CAN-2004-0374

CVE-2004-0374 affects Interchange (pre-5.0.1). The vulnerability results from missing input sanitising, allowing remote attackers to expose the content of arbitrary variables and read/modify sensitive SQL information via an HTTP request that ends with the string SQLUSER . Public details in the co...

CAN-2004-0421

CVE-2004-0421 is a libpng vulnerability referenced across multiple advisories. The issue stems from an off-by-one error in the png_format_buffer function (pngerror.c) in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4, which allows a remote attacker to ...

CAN-2004-0400

CVE-2004-0400 is tied to Exim, with multiple advisories across environments (Debian DSA-501, DSA-502-1; Gentoo GLSA 200405-07; FreeBSD/OpenVAS entries). Public details in connected docs indicate related issues include Exim at-tls handling and a remote-exploit risk (e.g., buffer overflows in speci...

CAN-2003-0068

CVE-2003-0068 affects the Eterm terminal emulator (0.9.1 and earlier). An attacker can modify the window title using a specific escape sequence and then insert it back into the user’s command line, potentially allowing arbitrary commands to be executed. Remediation is to upgrade to eterm 0.9.2 (a...

CAN-2004-0472

CVE CAN-2004-0472 maps to a Debian security advisory (DSA-504-1) describing a remote buffer overflow in the Kerberos 4 kadmind component of heimdal. The issue arises from missing input sanitising and could allow reading a negative amount of data, potentially triggering unexpected daemon behavior....

CAN-2004-0414

CAN-2004-0414 concerns several CVS vulnerabilities including insufficient input validation on Entry lines (and related issues 0416/0417/0418). Across connected docs, CVS servers (cvs server or pserver) are affected with potential information disclosure, denial of service, or possibly arbitrary co...