CAN-2005-2367

This CVE (CAN-2005-2367) is part of a set of issues in Ethereal (network traffic analyser). Connected advisories confirm format-string vulnerabilities in several dissectors could allow remote code execution; other CVEs (2360–2366) primarily describe denial-of-service conditions. Remediation acros...

CAN-2005-1279

The CAN-2005-1279 entry corresponds to tcpdump vulnerabilities in the BGP dissector (RT_ROUTING_INFO handling) that can cause a denial of service via an infinite loop when processing crafted packets. Public advisories and patches exist across multiple distributions: Debian DSA-850-1/DSA-850 fix t...

CAN-2005-2967

CVE-2005-2967 is a format-string vulnerability in the CDDB processing component of the xine-lib library. Across multiple distributions (Debian, Ubuntu, Gentoo, Mandrake/Mandriva, FreeBSD ports, etc.), advisories describe that an attacker can cause arbitrary code execution by pointing a vulnerable...

CAN-2005-3121

CVE-2005-3121 affects the module-assistant tool; a rule file before 0.9.10 creates a temporary file insecurely, allowing local users to perform unauthorized operations. Debian notes fixed in 0.9.10 (DSA-867-1) and provides upgrade guidance. Open questions remain about real-world exploitation deta...

CVE-2019-14775

Technical details for CVE-2019-14775 are not publicly available in the provided documents. Monitor for updates.

CVE-2021-0448

Technical details for CVE-2021-0448 are not publicly available in the provided documents. No affected products, root cause, or remediation are specified here. Monitor for updates from the linked sources (Ubuntu, Nessus, OSV, UB) to obtain concrete information.

CVE-2022-20003

Technical details are not publicly available in the provided documents for CVE-2022-20003. Connected sources show reports/mentions (Debian/Ubuntu/CNNVD) with no explicit vulnerability specifics. Monitor for updates.

CVE-2023-40321

Technical details for CVE-2023-40321 are not provided in the supplied documents. No confirmed affected products, impact, or fixes are disclosed here. Monitor connected sources (Ubuntu/CVE references) for updates.

CVE-2023-40318

CVE-2023-40318 is documented in connected Nessus and Ubuntu records as an unpatched vulnerability affecting Linux/Ubuntu packages, with no vendor patch available at the time of assessment. Ubuntu reference shows an entry for CVE-2023-40318; Nessus plugin UNPATCHED_CVE_2023_40318.NASL states Ubunt...

CVE-2023-40324

CVE-2023-40324 is linked to unpatched Linux distributions per Nessus data. The connected UNPATCHED_CVE_2023_40324.NASL plugin indicates one or more packages on Linux/Ubuntu are affected with no vendor-provided patch available, referencing an Ubuntu entry for CVE-2023-40324. The information does n...

CVE-2023-40323

Nessus plugin UNPATCHED_CVE_2023_40323.NASL reports an unpatched vulnerability for CVE-2023-40323 on Ubuntu Linux packages; no vendor patch is available per the plugin. The document does not specify affected Ubuntu package names or versions.

CVE-2014-5514

CVE-2014-5514 is represented as a reserved placeholder in the Initial document. The connected Ubuntu entry notes that ntopng had several vulnerabilities fixed upstream in version 1.2.1, which provides a remediation reference, but the provided materials do not include concrete technical details (a...

CVE-2014-5512

Removed by vendor...

CVE-2024-1314

The connected documents describe a vulnerability in Kinto-Attachment where an existing record’s attachment can be replaced when a user has read permission on a parent collection or bucket. Impact occurs if read access exists on a parent (and can be exploited anonymously if system.Everyone has rea...

CVE-2024-25558

The CVE-2024-25558 entry is associated with Google ChromeOS: the PowerVR GPU driver contains an integer overflow in DevmemIntChangeSparse() that enables controllable out-of-bounds writes. This could lead to memory corruption or elevation of privileges, as described in ChromeOS security notes tied...

CVE-2023-50325

The connected IBM PowerSC bulletin details CVE-2023-50325 affecting IBM PowerSC 1.3, 2.0, and 2.1. The issue is a Cross-Origin Resource Sharing (CORS) misconfiguration where domain names are not limited to trusted domains, enabling an attacker to perform privileged actions and access sensitive da...

CVE-2019-17997

LayerBB 1.1.3 has a cross-site scripting issue linked to CVE-2019-13972, allowing XSS via the pm_title parameter in application/commands/new.php. The connected records note this as a related issue to CVE-2019-17997, indicating the vector relies on the pm_title input. The documentation confirms th...

CVE-2019-18940

CVE-2019-18976 describes a NULL pointer dereference in res_pjsip_t38.c affecting Sangoma Asterisk up to version 13.x and Certified Asterisk up to 13.21-x. If a re-invite for T.38 faxing arrives and the SDP contains a port of 0 with no c line, a crash can occur. This vulnerability is distinct from...

CVE-2032-43016

Technical details for CVE-2032-43016 are not publicly available in the provided documents; monitoring for updates is advised.

CVE-2022-45592

CVE-2022-45592 is discussed in connected documents as affecting Linux distributions (notably Debian/Ubuntu) with a set of issues: Server-Side Request Forgery (SSRF), persistent Cross-Site Scripting (XSS), and a File Upload vulnerability. The Nessus NASL notes unpatched status for Debian/Ubuntu pa...