CVE-2026-51081: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in Proxmox Virtual Environment PVE 9.x 5.1.8 and Proxmox Virtual Environment PVE 8.x 4.3.16 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload...

CVE-2026-51082: Concurrent Execution using Shared Resource with Improper Synchronization

A race condition between the vncproxy and vncwebsocket API calls in Proxmox Virtual Environment PVE 9.x pve-manager before 9.1.9 and 8.x before 8.4.19; qemu-server 9.x before 9.1.7 and 8.x before 8.4.7; and pve-container before 6.1.3 PVE 9.x and before 5.3.4 PVE 8.x allows an attacker with...

aiida-core (>=2.9.0rc0, <=2.9.2), grpc-pve-cloud (>=3.2.0, <=3.6.3rc0) +11 more potentially affected by CVE-2026-45309 via asyncssh (2.22.0)

asyncssh PYPI version 2.22.0 is affected by a known vulnerability. The following packages have a transitive dependency on asyncssh and may be impacted: - aiida-core =2.9.0rc0, =3.2.0, =0.0.12, =3.1.0, =3.2.0, =3.1.0, =0.11.0, =0.1.4rc0, =0.2.0.dev14, =0.0.10, =0.0.12 - waldiez-runner 0.7.1 Source...

aiida-core (>=2.9.0rc0, <=2.9.2), grpc-pve-cloud (>=3.2.0, <=3.6.3rc0) +11 more potentially affected by CVE-2026-45309 via asyncssh (2.22.0)

asyncssh PYPI version 2.22.0 is affected by a known vulnerability. The following packages have a transitive dependency on asyncssh and may be impacted: - aiida-core =2.9.0rc0, =3.2.0, =0.0.12, =3.1.0, =3.2.0, =3.1.0, =0.11.0, =0.1.4rc0, =0.2.0.dev14, =0.0.10, =0.0.12 - waldiez-runner 0.7.1 Source...

CVE-2022-35507

A response-header CRLF injection vulnerability in the Proxmox Virtual Environment PVE and Proxmox Mail Gateway PMG web interface allows a remote attacker to set cookies for a victim's browser that are longer than the server expects, causing a client-side DoS. This affects Chromium-based browsers...

Crlf injection

A response-header CRLF injection vulnerability in the Proxmox Virtual Environment PVE and Proxmox Mail Gateway PMG web interface allows a remote attacker to set cookies for a victim's browser that are longer than the server expects, causing a client-side DoS. This affects Chromium-based browsers...

Server side request forgery (ssrf)

Proxmox Virtual Environment PVE and Proxmox Mail Gateway PMG are vulnerable to SSRF when proxying HTTP requests between pvepmgproxy and pvepmgdaemon. An attacker with an unprivileged account can craft an HTTP request to achieve SSRF and file disclosure of any files on the server. Also, in Proxmox...

CVE-2022-35508

Proxmox CVE-2022-35508 enables SSRF when proxying HTTP requests between pve(pmg)proxy and pve(pmg)daemon, exploitable by an unprivileged user to disclose server files. In Proxmox Mail Gateway, there is also a privilege escalation route to root@pam if backup artifacts were used, because pmg-backup...

CVE-2022-35507: Improper Neutralization of Special Elements in Output Used by a Downstream Component

A response-header CRLF injection vulnerability in the Proxmox Virtual Environment PVE and Proxmox Mail Gateway PMG web interface allows a remote attacker to set cookies for a victim's browser that are longer than the server expects, causing a client-side DoS. This affects Chromium-based browsers...

CVE-2022-35508: Server-Side Request Forgery (SSRF)

Proxmox Virtual Environment PVE and Proxmox Mail Gateway PMG are vulnerable to SSRF when proxying HTTP requests between pvepmgproxy and pvepmgdaemon. An attacker with an unprivileged account can craft an HTTP request to achieve SSRF and file disclosure of any files on the server. Also, in Proxmox...

CVE-2022-35508

Proxmox Virtual Environment PVE and Proxmox Mail Gateway PMG are vulnerable to SSRF when proxying HTTP requests between pvepmgproxy and pvepmgdaemon. An attacker with an unprivileged account can craft an HTTP request to achieve SSRF and file disclosure of any files on the server. Also, in Proxmox...

CVE-2022-35507

A response-header CRLF injection vulnerability in the Proxmox Virtual Environment PVE and Proxmox Mail Gateway PMG web interface allows a remote attacker to set cookies for a victim's browser that are longer than the server expects, causing a client-side DoS. This affects Chromium-based browsers...

CVE-2022-35507

Proxmox VE/PMG web interfaces are affected by a response-header CRLF injection in pve-http-server. An attacker can cause a client-side DoS by injecting CRLF into response headers to set cookies longer than the server expects, notably affecting Chromium-based browsers using %0d. Affected versions ...

Proxmox PVE-HTTPServer code issue vulnerabilities

pve-http-server is an open source virtualization environment library from Proxmox. A security vulnerability exists in Proxmox pve-http-server, which stems from an SSRF vulnerability when proxying HTTP requests between pvepmgproxy and pvepmgdaemon, where an attacker with an unprivileged account ca...

CVE-2018-13547

The CVE-2018-13547 entry concerns Providence Casino Token (ProvidenceCasinoToken) on Ethereum, where the mintToken function contains an integer overflow that allows the contract owner to set any user’s balance to an arbitrary value. Public sources in connected documents (CNVD/CNVD-2020-22842 and ...

CVE-2018-13580

The mintToken function of a smart contract implementation for ProvidenceCasino PVE, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...

CVE-2018-13580

ProvidenceCasino (PVE) is affected. The mintToken function in its smart contract has an integer overflow vulnerability that allows the contract owner to set any user’s token balance to an arbitrary value. This is described across multiple sources (CNVD-2020-22843 and NVD entries) as a vulnerabili...

CVE-2018-13580: Integer Overflow or Wraparound

The mintToken function of a smart contract implementation for ProvidenceCasino PVE, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...

PT-2018-11964

Name of the Vulnerable Software and Affected Versions ProvidenceCasino PVE affected versions not specified Description The issue concerns an integer overflow in the mintToken function of a smart contract implementation. This overflow allows the contract owner to set the balance of any user to any...

CVE-2018-13210

The vulnerability CVE-2018-13210 affects ProvidenceCasinoToken, an Ethereum ERC20 token. The sell function has an integer overflow where amount * sellPrice can become zero, reducing a seller’s assets. This is described in the NVD entry and corroborated by CNVD/PRION/CVELIST records; no public rem...