CVE-2021-22297

CVE-2021-22297 affects curl/libcurl with multiple advisories listing vulnerable 7.1.1–7.78.0 and related curl variants. The described issue is due to STARTTLS handling that can enable a MITM to inject data over TLS handshakes (noted in PTSecurity PT-2021-4653; Slackware SSA-2021-146-01 references...

CVE-2021-22297

This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided...

CVE-1234-1234

Technical details for CVE-1234-1234 are not publicly available in the provided documents. No affected products, root cause, impact, or remediation are stated. Monitor for updates as the entry remains reserved.

CVE-2019-16447

Adobe Illustrator prior to version 24.0 is affected by CVE-2019-16447 as part of APSB19-36. The issue is described as Binary Planting potentially leading to Local Code Execution. The linked advisories indicate this affects Windows and macOS deployments, alongside other vulnerabilities in the same...

CVE-2021-40749

Adobe Illustrator is affected by CVE-2021-40749 as part of APSB21-98; a NULL pointer dereference in Illustrator 25.4.1 and earlier (Windows/macOS) can cause DoS. The issue is addressed by Adobe in the 25.4.2 update (APSB21-98). Affected products/versions and explicit exploit details are corrobora...

CVE-2021-21081

Adobe Connect is affected by CVE-2021-21081, an XSS issue that could allow arbitrary JavaScript execution in the victim’s browser. The vulnerability is documented alongside other CVEs (21079, 21080) in APSB21-19 and affects versions prior to the 11.2 update. Public details in connected sources in...

CVE-2021-40744

CVE-2021-40744 is linked in connected sources to an Adobe Campaign vulnerability affecting Adobe Campaign Classic (ACC). The exposed flaw is a cross-site scripting (XSS) vulnerability stemming from insufficient input validation, enabling potential injection and execution of client-side code. The ...

CVE-2019-7967

Technical details for CVE-2019-7967 are not provided in the connected documents. The entry remains reserved/no public details here. Monitor for updates as information may be released later.

CVE-2015-7982

Vulnerability details found: The gm library (Node.js wrapper) versions prior to 1.21.1 are affected by a command-injection flaw. The issue occurs when user input is passed to gm.compare() without proper sanitization before invoking the GraphicsMagick binary. Remediation: update to version 1.21.1 ...

CVE-2016-1000223

The CVE entry CVE-2016-1000223 has no public details in the Initial document. Connected documents reveal a vulnerability in the jws package (GitHub advisory GHSA-GJCW-V447-2W7Q / OSV entry) where users can select the JWT verification algorithm, allowing a malicious actor to modify a JWT while sti...

CVE-2014-8882

The connected advisories identify a Regular Expression Denial of Service in the validator library’s isURL method affecting versions prior to 3.22.1; remediation is to update to 3.22.1 or later (GHSA-f5w6-r7rg-mcgq, OSV GHSA, and NODEJS advisory 42 reference validator.js). No exploitation details ...

CVE-2021-30492

The connected documents describe a real issue: zendesk_api_client_php is vulnerable to Server-Side Request Forgery (SSRF) because it does not validate the provided Zendesk subdomain in getAuthUrl and getAccessToken. Impact is that an attacker could cause arbitrary HTTP requests from the server. R...

CVE-2008-1418

Technical details for CVE-2008-1418 are not publicly available in the provided documents. No affected products, impact, or remediation are specified here; monitor for updates from official advisories.

Denial Of Service (DoS)

RESERVED This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided...

fuckthathussy.com XSS vulnerability

Open Bug Bounty ID: OBB-671376 Description| Value ---|--- Affected Website:| fuckthathussy.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

mw-werbung Local File Inclusion

===================================== mw-werbung Local File Includelfi Vulnerability ===================================== Author :: Destan Group :: Aras cyber Army Email :: [email protected] Discover :: 15 july 2010 Critical Lvl :: H Publised :: 22 june 2010 vender :: http://www.mw-werbung.d...

CVE-2018-1472

CVE-2018-1472 entry is rejected/not used per initial description.

CVE-2019-3309

CVE-2019-3309 is rejected/not used per the Initial Description; this entry does not represent an active vulnerability.

CVE-2022-46283

This CVE-2022-46283 entry is rejected/not used as stated in the Description.

CVE-2020-0436

CVE-2020-0436 entry is rejected/withdrawn and does not represent an active vulnerability.