644 matches found
CVE-2021-4575
CVE-2021-4575 is a cross-site scripting vulnerability affecting IBM WebSphere Application Server (WAS) ND traditional, as referenced in IBM security bulletins about WAS shipped with IBM Security Directory Server. The connected IBM bulletin indicates affected WAS 8.5 and references the remediation...
CVE-2021-28582
Adobe Photoshop is affected by a buffer overflow vulnerability (CVE-2021-28582) described in APSB21-38. The issue is reported to allow arbitrary code execution and is tied to Photoshop versions prior to 21.2.9/22.4.2 on Windows and macOS. Connected sources indicate a vulnerability in Photoshop (C...
CVE-2021-44184
Adobe Photoshop (Windows/macOS) versions 22.x prior to 22.5.4 and 23.x prior to 23.1 are affected by multiple vulnerabilities referenced in APSB21-113, including a buffer overflow (CVE-2021-44184) that can lead to arbitrary code execution. The issue stems from an out-of-bounds write (CVE-2021-430...
CVE-2021-43020
CVE-2021-43020 is discussed in connected advisories for Adobe Photoshop (APSB21-113). The vulnerability is described as an out-of-bounds/End-of-buffer issue that can lead to a memory leak through an access-after-end-of-buffer condition (CWE-788). Affected products include Photoshop on Windows and...
CVE-2021-427171
The connected CNNVD entry links CVE-2021-427171 to a vulnerability in ModSecurity used with NGINX, where the ModSecurity JSON parser can be triggered by specially formatted JSON messages, causing high resource utilization and a potential denial of service. Affected component: ModSecurity WAF inte...
CVE-2020-1867
Technical details for CVE-2020-1867 are not publicly available in the provided documents. The connected sources do not specify affected products, versions, or impact. Monitor for updates as more information is released.
CVE-2021-9951
This CVE (CVE-2021-9951) is addressed in OpenSUSE/SUSE security updates for webkit2gtk3. Affected component: WebKitGTK’s webkit2gtk3, updated to version 2.30.3. Root cause: a use-after-free in the relevant code path. Impact: could allow arbitrary code execution on vulnerable hosts. Remediation: a...
CVE-2021-13584
CVE-2021-13584 is addressed in OpenSUSE/SUSE security advisories for webkit2gtk3. The updates fix use-after-free vulnerabilities that could allow arbitrary code execution (CVE-2021-13543, CVE-2021-13584) and related issues (CVE-2021-9948, CVE-2021-9951, CVE-2021-9983) by upgrading webkit2gtk3 to ...
CVE-2020-11750
OpenWrt’s umdns (Multicast DNS Daemon) is affected by CVE-2020-11750, with out-of-bounds reads of heap data and potential buffer overflow in OpenWrt 18.06.0–18.06.8 and 19.07.0–19.07.2. An attacker on the same local network could exploit by sending a crafted mDNS packet. The advisory notes no kno...
CVE-2021-23829
Technical details for CVE-2021-23829 are not provided in the supplied documents. The connected OpenSSL advisory covers CVE-2021-23839/23840/23841 affecting AIX; monitor for updates regarding CVE-2021-23829.
CVE-2019-20970
OpenDMARC vulnerability CVE-2019-20970 (OpenDMARC before 1.4.1.1) enables remote attackers to spoof SPF/DMARC/DKIM authentication results due to parsing/interpretation issues, allowing authentication bypass. The Arch Linux advisory confirms the issue and lists the fixed version 1.4.1.1. нет
CVE-2020-3540
Cisco DCNM (Data Center Network Manager) is affected by an authorization bypass in the web management interface. The issue stems from a failure to restrict resources intended for administrators, allowing an authenticated, remote attacker to view, modify, and delete data via a crafted URL. Cisco h...
CVE-2019-18918
The connected document describes a potential vulnerability in the HP Connection Optimizer driver that could allow escalation of privilege. It identifies the affected platforms/SoftPaqs and targets but does not provide concrete technical details such as exact affected versions, root cause, or expl...
CVE-2020-6924
Technical details for CVE-2020-6924 are not publicly available in the provided documents. Monitor for updates as more information may be released.
CVE-2020-3048
CVE-2021-3048 affects PAN-OS devices where external dynamic lists (EDLs) contain invalid URLs. The issue causes the Device Server daemon (devsrvr) to stop responding, leading to failed commits and configuration changes; if the device restarts, a DoS condition may occur and traffic processing can ...
CVE-2014-1687
Huawei AR router SSH module DoS vulnerability (CVE-2014-1687): when subjected to a large volume of malformed SSH authentication packets, legitimate users may be unable to log in via SSH due to resource exhaustion. This vulnerability is documented in HWPSIRT-2013-1255 and linked CVE-2014-1687. Aff...
CVE-2010-0102
CVE-2010-0102 entry is linked to DCE/RPC-based evasion techniques. Connected advisories describe two evasion vectors: (1) using invalid NDR values to bypass IDS/IPS detection, and (2) sending fragmented DCE/RPC requests (including over CIFS) that may evade detection or carry unsafe traffic. The d...
CVE-2016-10240
CVE-2016-10240 is listed in the 2017 Android bulletin as a Qualcomm component vulnerability with a Nexus 6P impact. The entry shows the issue as Critical and notes a Qualcomm-internal reference with no publicly available patch details. The connected Android bulletin confirms the vulnerability is ...
CVE-2017-17768
CVE-2017-17768 is listed in the Qualcomm section as affecting the LK bootloader with a High severity (QC-CR#2127172). The connected Android security bulletin entry confirms this CVE without providing explicit root-cause or mitigation details within the document. No additional exploit specifics or...