CVE-2014-8882

The connected advisories identify a Regular Expression Denial of Service in the validator library’s isURL method affecting versions prior to 3.22.1; remediation is to update to 3.22.1 or later (GHSA-f5w6-r7rg-mcgq, OSV GHSA, and NODEJS advisory 42 reference validator.js). No exploitation details ...

CVE-2016-1000240

The connected advisories identify a Cross-Site Scripting (XSS) vulnerability in the c3 JavaScript charting library. Affected versions are vulnerable to XSS due to improper sanitization of HTML in rendered tooltips. The issue is documented in GHSA-GVG7-PP82-CFF3 and mirrored in OSV and npm advisor...

CVE-2016-1000234

The CVE-2016-1000234 entry maps to a Cross-Site Scripting issue in the jqTree component. Connected advisories (GHSA-GJHX-GXWX-JX9J and OSV) describe that affected versions of jqtree are vulnerable to XSS via the drag-and-drop operation when modifying tree data, allowing script content within a no...

CVE-2016-1000227

CVE-2016-1000227 is a reserved placeholder entry; connected advisories describe a cross-site scripting vulnerability in bootstrap-tagsinput. All versions are affected by unsanitized input passed to the itemTitle parameter, leading to XSS. The issue is not actively maintained (last updates circa 2...

CVE-2016-1000242

The connected advisories describe a Denial of Service in the mqtt package (GHSA-HG78-C92R-HVWR / OSV entry). Affected mqtt versions crash the Node.js process when handling specially crafted MQTT packets, leading to a DoS. Remediation: upgrade to v1.0.0 or later. References include GitHub Advisory...

CVE-2021-30492

The connected documents describe a real issue: zendesk_api_client_php is vulnerable to Server-Side Request Forgery (SSRF) because it does not validate the provided Zendesk subdomain in getAuthUrl and getAccessToken. Impact is that an attacker could cause arbitrary HTTP requests from the server. R...

CVE-2014-3143

CVE-2014-3143 is not just a placeholder; connected documents describe multiple curl/libcurl vulnerabilities. The issues involve memory safety in path handling and hostname parsing: (1) sanitize_cookie_path() may index memory with -1 when a path is a single double-quote, destroying heap memory; (2...

CVE-2008-1418

Technical details for CVE-2008-1418 are not publicly available in the provided documents. No affected products, impact, or remediation are specified here; monitor for updates from official advisories.

CVE-2015-6842

Technical details about CVE-2015-6842 are not publicly available in the provided documents. The connected Nessus plugin describes unrelated FreeBSD OTRS PID-file permissions but does not tie to this CVE. Monitor for updates.

CVE-2017-1307

Technical details for CVE-2017-1307 are not publicly available in the provided documents. Monitor for updates as new information may be published later.

CVE-2018-15860

Technical details for CVE-2018-15860 are not provided in the supplied documents. The entry appears reserved with no public details. Monitor for updates.

CVE-2021-11192

Technical details for CVE-2021-11192 are not publicly available in the provided documents. Monitor for updates.

CVE-2021-11191

Technical details for CVE-2021-11191 are not publicly available in the provided documents. Monitor for updates; no affected products, exploit info, or remediation details are stated in the supplied material.

CVE-2021-92253

CVE-2021-92253 is evidenced in the connected FreeBSD VuXML/Nessus entry as part of a set of cURL vulnerabilities, described as “Metalink download sends credentials.” The provided documents identify the issue as a problem in cURL (Metalink download) but do not include the technical details of affe...

Denial Of Service (DoS)

RESERVED This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided...

Denial Of Service (DoS)

RESERVED This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided...

Denial Of Service (DoS)

firefox is vulnerable to denial of service. The vulnerability exists when a user is convinced to drag and drop an image to their desktop or other folder which allows an attacker to cause an application crash...

Denial Of Service (DoS)

RESERVED This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided...

Denial Of Service (DoS)

RESERVED This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided...

Denial Of Service (DoS)

RESERVED This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided...