CVE-2013-3364

CVE-2013-3364 aligns with a GitHub advisory and OSV entry describing unauthenticated remote command injection in the ep_imageconvert plugin for Etherpad Lite. The vulnerability affects ep_imageconvert

CVE-2019-19723

CVE-2019-19723 has connected details: All versions of the npm package passport-cognito are vulnerable to Improper Authorization due to failure to properly scope authorization-related variables (access token, refresh token, ID token). This creates a race condition where concurrent authenticated us...

CVE-2013-7035

Technical details for CVE-2013-7035 are not publicly available in the provided documents; the CVE entry appears reserved. Monitor for updates.

CVE-2021-30492

The connected documents describe a real issue: zendesk_api_client_php is vulnerable to Server-Side Request Forgery (SSRF) because it does not validate the provided Zendesk subdomain in getAuthUrl and getAccessToken. Impact is that an attacker could cause arbitrary HTTP requests from the server. R...

CVE-2022-219862

CVE-2022-219862 corresponds to a vulnerability in ASP.NET Core related to HTTP headers pooling that can lead to a denial of service. Connected advisories show affected packages across multiple Linux distributions: MiracleLinux 8: dotnet5.0-5.0.211-1.el8.ML.1 (AXSA:2022-3061:07) — specific package...

CVE-2008-1418

Technical details for CVE-2008-1418 are not publicly available in the provided documents. No affected products, impact, or remediation are specified here; monitor for updates from official advisories.

CVE-2015-6842

Technical details about CVE-2015-6842 are not publicly available in the provided documents. The connected Nessus plugin describes unrelated FreeBSD OTRS PID-file permissions but does not tie to this CVE. Monitor for updates.

CVE-2018-15860

Technical details for CVE-2018-15860 are not provided in the supplied documents. The entry appears reserved with no public details. Monitor for updates.

CVE-2021-11193

Technical details for CVE-2021-11193 are not publicly available in the provided documents. Monitor for updates.

CVE-2021-92253

CVE-2021-92253 is evidenced in the connected FreeBSD VuXML/Nessus entry as part of a set of cURL vulnerabilities, described as “Metalink download sends credentials.” The provided documents identify the issue as a problem in cURL (Metalink download) but do not include the technical details of affe...

Denial Of Service (DoS)

RESERVED This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided...

Denial Of Service (DoS)

firefox is vulnerable to denial of service. The vulnerability exists when a user is convinced to drag and drop an image to their desktop or other folder which allows an attacker to cause an application crash...

Denial Of Service (DoS)

RESERVED This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided...

Denial Of Service (DoS)

RESERVED This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided...

Denial Of Service (DoS)

RESERVED This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided...

Denial Of Service (DoS)

RESERVED This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided...

Denial Of Service (DoS)

RESERVED This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided...

Denial Of Service (DoS)

RESERVED This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided...

openSUSE 15 Security Update : xen (openSUSE-SU-2021:3968-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:3968-1 advisory. - PCI devices with RMRRs not deassigned correctly Certain PCI devices in a system might be assigned Reserved Memory Regions specified via...

Debian DSA-5017-1 : xen - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5017 advisory. Multiple vulnerabilities have been discovered in the Xen hypervisor, which could result in privilege escalation, denial of service or information leaks. For the...