271 matches found
CAN-2006-2024
The provided connected advisories confirm CVE-2006-2024 is one of several libtiff/kfax-related flaws impacting KDE graphics (kdegraphics). Affected components include the libtiff library used by kfax, where a malicious TIFF could cause a crash or arbitrary code execution. Remediation across distr...
CVE-2024-33352
CVE-2024-33352 is evidenced by a GitHub exploit detailing BlueStacks for Windows (pre-10.40.1000.502) with a CWE-552-like flaw: World-writable VM/config files allow an unprivileged user to backdoor the Android VM and potentially achieve code execution on the host via VM escape. Specifically, glob...
CVE-2024-31969
CVE-2024-31969 is a local privilege-escalation in sudo via sudoedit. The flaw, introduced in sudo 1.9.0, stems from improper validation of user environment variables and file ownership in sudoedit, enabling a local user with sudoedit access to modify files as root (e.g., via SUDO_EDITOR or symlin...
CVE-2024-23700
CVE-2024-23700 is referenced in a Wear OS security bulletin as a Framework‑level vulnerability that could enable local privilege escalation by a malicious app with no extra privileges. PT-2026-3764 notes a PoC and claims the exploit can silently obtain permissions to read/write contacts, SMS, cal...
CVE-2024-1642470
CVE-2024-1642470 affects the Windows USB Generic Parent Driver. The connected exploit repo describes a remote code execution via crafted IOCTL requests that trigger a buffer overflow in the driver’s IOCTL handling. A PoC and detection script demonstrate exploitation by opening the vulnerable devi...
CVE-2019-19268
Technical details for CVE-2019-19268 are not publicly available in the provided documents. The description indicates the candidate is reserved and will be announced later. Monitor for updates.
CVE-2024-23780
CVE-2024-23780 has a connected exploit showing remote code execution on NetBox instances. The attached exploit script (HazardLab-IO) claims to execute arbitrary code via a NetBox deployment, with parameters for URL, username, and password. PT-2024-20080 references NetBox and notes affected versio...
CAN-2003-0961
CVE-2003-0961 is referenced across multiple OpenVAS entries tying it to kernel-related issues in 2.4.x series and Debian/Gentoo advisories (DSA GLSA 200312-02, DSA 439-1, DSA 442-1, and 450-1) and Slackware advisory SSA:2003-336-01. The connected documents indicate affected architectures and patc...
CAN-2004-0374
CVE-2004-0374 affects Interchange (pre-5.0.1). The vulnerability results from missing input sanitising, allowing remote attackers to expose the content of arbitrary variables and read/modify sensitive SQL information via an HTTP request that ends with the string SQLUSER . Public details in the co...
CAN-2004-0077
CVE-2004-0077 is referenced in multiple Linux kernel security advisories (e.g., Debian DSA 442-1 and GLSA 200403-02) attached to OpenVAS entries, indicating a kernel vulnerability in the 2.4.x lineage across architectures (e.g., s390, mips, ia64). The OpenVAS data shows CVSS base score 7.2 with v...
CAN-2004-0558
CVE-2004-0558 is referenced across multiple advisories (Slackware SSA:2004-266-01, Gentoo GLSA 200409-25, SLES9 updates, FreeBSD/FreeBSD Ports) as a CUPS-related issue. OpenVAS entries label it as a CUPS DoS with CVSS 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P). The connected docs discuss affected packages ...
CAN-2004-0557
SoX versions 12.17.2–12.17.4 are affected by multiple buffer overflows in wav.c (st_wavstartread) that allow remote code execution via crafted WAV header fields. Public reports credit Ulf Harnhammar; affected commands include sox (and play). Debian and Gentoo advisories document remote, arbitrary...
CAN-2004-0964
CVE-2004-0964 concerns a stack-based buffer overflow in the Zinf Audio Player (formerly freeamp) version 2.2.1. The vulnerability arises from insufficient bounds checking when processing a specially crafted PLS playlist file. A remote attacker could exploit this by convincing a user to open a mal...
CAN-2004-0940
CVE-2004-0940 describes a buffer overflow in Apache’s mod_include (SSI) affecting Apache 1.3.x up to 1.3.32, exploitable by local users who can create SSI documents to execute arbitrary code as the apache user. Public references in connected docs show multiple advisories and patches across platfo...
CAN-2003-0985
The provided OpenVAS/DSA/Gentoo entries reference CVE-2003-0985 in kernel-related advisories (e.g., Debian DSA 417-1/417-2, Gentoo GLSA 200401-01) affecting 2.4.x kernel packages (kernel-image-2.4.18-1-alpha, kernel-patch-2.4.18-powerpc, etc.). The CVSS base is shown as 7.2 with vector AV:L/AC:L/...
CAN-2004-0990
CVE-2004-0990 is referenced across connected advisories/plugins (e.g., Ubuntu USN-11-1/USN-21-1 and SLES9 updates) as a GD graphics library issue. The documents confirm the CVE association and that updates to the gd package are the proposed remediation, but do not provide detailed root-cause, aff...
CAN-2004-1287
Two stack-based buffer overflow bugs in NASM were disclosed, leading to CVE-2004-1287 and CVE-2005-1194. An updated NASM package fixes these issues; Red Hat RHSA-2005:381 (and CentOS/CESA advisories) note the vulnerability in NASM up to affected versions and recommend upgrading to patched package...
CAN-2004-1170
CVE-2004-1170 affects the a2ps package (notably versions around 4.13). The connected sources describe a vulnerability where an attacker can leverage shell metacharacters in a file name to execute arbitrary commands remotely, due to insecure handling of the filename in the tool’s processing (e.g.,...
CAN-2004-0996
CVE-2004-0996 affects the cscope utility (versions 15-4 and 15-5). The root cause is insecure temporary file creation: cscope creates temporary files in world-writable directories with predictable names, enabling a local attacker to perform a symlink attack and overwrite arbitrary files with the ...