CVE-2024-1223

RESERVED This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided...

CVE-2024-1176

RESERVED This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided...

CVE-2024-26048

Technical details for CVE-2024-26048 are not publicly available in the provided documents. No impacted products, versions, or root cause are specified. Monitor for updates.

CVE-2023-20907

CVE-2023-20907 is listed in the Android 14 security release notes as a high-severity DoS in the Framework component. The Android bulletin groups it among Framework vulnerabilities for Android 14, with reference A-239415997. The document does not provide specific affected product versions beyond A...

CVE-2020-40750

CVE-2020-40750 is referenced in IBM security bulletins for IBM WebSphere Application Server: cross-site scripting in the Admin Console. Affected products/versions include WebSphere Application Server 9.0, 8.5, 8.0, and 7.0. The IBM bulletin also notes additional references to related issues (e.g....

CVE-2020-38712

The IBM bulletin ties CVE-2020-38712 to SOAPAction spoofing in JAX-WS Web Services processing, affecting IBM WebSphere Application Server and IBM Security Verify Governance/Identity Manager component. Affected products include WebSphere Application Server versions 9.0, 8.5, 8.0, and 7.0, and the ...

CVE-2022-14262

Technical details for CVE-2022-14262 are not publicly provided in the supplied documents. Monitor for updates.

CAN-2005-2475

The CVE-2005-2475 entry is confirmed through multiple connected documents: unzip contains a race condition in file permission handling during extraction that could let a local attacker modify permissions of extracted files. The issue is tied to the unzip utility and is addressed by the backported...

CAN-2004-0047

CVE-2004-0047 corresponds to a local privilege escalation in the trr19 type trainer for GNU Emacs. Several disclosures (Debian DSA-430, Ubuntu CVE page, NVD) describe that multiple programs in trr19 1.0 do not drop privileges before executing a command, allowing local users to gain privileges (gr...

CAN-2004-0374

CVE-2004-0374 affects Interchange (pre-5.0.1). The vulnerability results from missing input sanitising, allowing remote attackers to expose the content of arbitrary variables and read/modify sensitive SQL information via an HTTP request that ends with the string SQLUSER . Public details in the co...

CAN-2004-0111

CVE-2004-0111 affects gdk-pixbuf before 0.20, where a malformed BMP file can cause a denial of service (crash) in apps that use the library. Public records across Debian/Red Hat advisories and OSV entries confirm the vulnerability, with Debian/DSA 464-1 and RHSA-2004:103 noting the impact and rec...

CAN-2004-0400

CVE-2004-0400 is tied to Exim, with multiple advisories across environments (Debian DSA-501, DSA-502-1; Gentoo GLSA 200405-07; FreeBSD/OpenVAS entries). Public details in connected docs indicate related issues include Exim at-tls handling and a remote-exploit risk (e.g., buffer overflows in speci...

CAN-2003-0068

CVE-2003-0068 affects the Eterm terminal emulator (0.9.1 and earlier). An attacker can modify the window title using a specific escape sequence and then insert it back into the user’s command line, potentially allowing arbitrary commands to be executed. Remediation is to upgrade to eterm 0.9.2 (a...

CAN-2004-0398

CVE-2004-0398 affects the neon library (libneon) and is referenced in multiple advisories (GLSA-200405-13/15, Debian DSA-506/507, Mandrake MDKSA-2004:049/078). The issue is a heap-based buffer overflow in neon’s date parsing routines (notably ne_rfc1036_parse and ne_httpdate_parse) that could, de...

CAN-2004-0827

CVE-2004-0827 is associated with ImageMagick across multiple advisories (Debian DSA 547-1, Ubuntu USN-35-1, Red Hat RHSA-2004:636). The connected documents describe a memory corruption issue in image processing (buffer/heap overflow in decoding BMP/DIB/related formats) that could allow arbitrary ...

CAN-2004-0077

CVE-2004-0077 is referenced in multiple Linux kernel security advisories (e.g., Debian DSA 442-1 and GLSA 200403-02) attached to OpenVAS entries, indicating a kernel vulnerability in the 2.4.x lineage across architectures (e.g., s390, mips, ia64). The OpenVAS data shows CVSS base score 7.2 with v...

CAN-2004-0772

CVE-2004-0772 is a set of double-free vulnerabilities in MIT Kerberos 5 (krb5), specifically in the error handling code for krb524d in MIT Kerberos 5 1.2.8 and earlier. These flaws may allow remote attackers to execute arbitrary code, primarily by exploiting double-free conditions in the KDC and ...

CAN-2004-0781

CVE-2004-0781 maps to an Icecast XSS in icecast-server (list.cgi) affecting 1.3.12 and earlier. The vulnerability arises from improper input sanitization in the status display, allowing remote attackers to craft a link containing script code that executes in a user’s browser, potentially stealing...

CAN-2004-0564

CVE-2004-0564 refers to the RP-PPPoE (rp-pppoe) component. When pppoe is run with setuid root, it can allow local users to overwrite arbitrary files, per multiple advisories (Debian DSA-557-1, Mandrake MDKSA-2004:145) and OSV/NVD entries. The issue arises only in configurations where rp-pppoe is ...

CAN-2004-0809

CVE-2004-0809 corresponds to a WebDAV/ mod_dav issue in the Apache WebDAV module that could allow a remote attacker to crash the server (Denial of Service) on installations with WebDAV enabled. The connected OpenVAS/Nessus entries reference SuSE SLES9 advisories (patches 5009547 and 5013988) addr...