CVE-2023-52428

CVE-2023-52428 (Nimbus JOSE+JWT) : In Connect2id Nimbus JOSE+JWT prior to 9.37.2, an attacker can trigger a denial of service (resource exhaustion) by sending a large JWE p2c header value (iteration count) for the PasswordBasedDecrypter (PBKDF2) component. This is a component-level vulnerability ...

CVE-2023-42839

CVE-2023-42839 pertains to an Apple-wide issue fixed by improved state management. Affected products/environments include tvOS 17.1, watchOS 10.1, macOS Sonoma 14.1, iOS 17.1, and iPadOS 17.1. The vulnerability potentially allowed an app to access sensitive user data. Remediation is OS updates to...

CVE-2023-42878

CVE-2023-42878 is a privacy issue affecting Apple platforms (watchOS, macOS, iOS, iPadOS). The root problem is insufficient private data redaction in log entries, enabling an app to access sensitive user data. It is fixed in watchOS 10.1, macOS Sonoma 14.1, and iOS 17.1 / iPadOS 17.1. No exploita...

CVE-2021-46979

CVE-2021-46979 : Linux kernel iio subsystem vulnerability where ioctl handlers were removed twice (during iio_device_unregister() and then inside iio_device_unregister_eventset()/iio_buffers_free_sysfs_and_mask()). This double removal could cause a double free leading to kernel panic. The issue i...

CVE-2024-33599

The nscd (Name Service Cache Daemon) binary is vulnerable to a stack-based buffer overflow in the netgroup cache. This flaw occurs when the fixed-size cache is exhausted by client requests, potentially causing a buffer overflow during subsequent requests for netgroup data. The vulnerability was i...

CVE-2022-20814

CVE-2022-20814 affects Cisco Expressway-C and Cisco TelePresence VCS. The root cause is improper validation of the SSL server certificate during connections to a Cisco Unified Communications Manager device, enabling a man-in-the-middle that could intercept traffic, view it in clear text, or modif...

CVE-2024-0039

CVE-2024-0039 affects Android Bluetooth stack with an out-of-bounds write in attp_build_value_cmd of att_protocol.cc, enabling remote code execution over the network without user interaction. The issue stems from a missing bounds check and is present in att_protocol.cc as described across multipl...

CVE-2023-52374

A privilege control vulnerability exists in the package management module of Huawei HarmonyOS and Huawei EMUI . This flaw allows an attacker to exploit incorrect authorization to compromise service confidentiality . While the specific root cause and versions are not detailed in the provided docum...

CVE-2024-1546

A vulnerability exists in Firefox (versions < 123, ESR < 115.8) and Thunderbird (versions

CVE-2023-6237

The OpenSSL library is vulnerable to a Denial of Service (DoS) attack due to a lack of restrictions on RSA public key sizes during validation. When the EVP_PKEY_public_check() function processes an RSA key with an excessively large prime modulus from an untrusted source, the computation to confir...

CVE-2024-1555

When opening a website using the firefox:// protocol handler, SameSite cookies were not properly respected. This vulnerability affects Firefox 123...

CVE-2024-26450

The photo gallery software Piwigo is vulnerable in versions prior to v.14.2.0 , allowing a malicious user to take over the application. The root cause involves chaining a Cross Site Request Forgery (CSRF) vulnerability to inject a Stored Cross Site Scripting (XSS) payload into an administrator's ...

CVE-2024-1548

The Firefox browser and Thunderbird email client are vulnerable to a flaw where a website can use a dropdown select input element to obscure a fullscreen notification . This vulnerability could lead to user confusion and potential spoofing attacks . The affected versions include Firefox < 123 ...

CVE-2024-26281

A cross-site scripting (XSS) vulnerability exists in Firefox for iOS versions

CVE-2024-37010

CVE-2024-37010 is an OwnCloud external-storage IDOR vulnerability where an authenticated user can modify another user’s external storage configuration without proper rights verification. The exploit description demonstrates that updating the target's external storage can change the storage’s name...

CVE-2024-26817

CVE-2024-26817 affects the Linux kernel amdkfd component. The vulnerability arises from using kzalloc with a multiplication that can overflow; the fix replaces kzalloc with calloc to avoid integer overflow. Descriptions in connected Nessus advisories (Unity Linux UTSA advisories) reiterate the sa...

CVE-2024-26939

Summary (CVE-2024-26939) : In the Linux kernel, the DRM i915 driver’s VMA handling suffers a Use-After-Free when destroying a VMA during retirement race, leading to spurious frees of an active i915 VMA object. The root cause is a race between __active_retire() and i915_vma_destroy()/parked paths,...

CVE-2021-46963

CVE-2021-46963 is a Linux kernel vulnerability in the SCSI qla2xxx driver where an incorrect free of an Srb object caused a crash. The fix updates qla2xxx_mqueuecommand() to stop freeing srb (now allocated by upper layers), preventing srb double-free/invalid free. Connected advisories confirm the...

CVE-2023-52358

A configuration flaw exists in the audio module of Huawei HarmonyOS and Huawei EMUI (a user interface based on the Android operating system). Exploitation of this vulnerability by an attacker can result in a denial of service (DoS), affecting the availability of the affected systems. No specific ...

CVE-2021-23017

CVE-2021-23017 affects nginx's resolver. A security issue arises from an off-by-one in ngx_resolver_copy when DNS labels are followed by a root-domain pointer, allowing a crafted UDP response to overwrite the least significant byte of the next heap chunk metadata. This can lead to a worker proces...

CVE-2021-46960

CVE-2021-46960 corresponds to a Linux kernel CIFS issue where the error code from smb2_get_enc_key was returned incorrectly, triggering a potentially misleading warning in CIFS writeback paths. The description notes that the vulnerability has been resolved in the kernel by returning the correct e...

CVE-2024-8118

Grafana vulnerability CVE-2024-8118: The alert rule write API endpoint uses incorrect permissions, allowing users who can write external alert instances to also write alert rules. This is the same issue described in BIT-GRAFANA-2024-8118 and OSV entries, which confirm the description but do not p...

CVE-2007-0609

CVE-2007-0609 affects Advanced Guestbook 2.4.2, where a directory-traversal flaw allows an unauthenticated remote attacker to bypass .htaccess and cause local PHP code execution or template reads by submitting a crafted lang cookie value (dot-dot) and a filename without a .php extension in index....

CVE-2024-1556

The incorrect object was checked for NULL in the built-in profiler, potentially leading to invalid memory access and undefined behavior. Note: This issue only affects the application when the profiler is running. This vulnerability affects Firefox 123...

CVE-2008-2018

CVE-2008-2018 affects PHPizabi 0.848b C1 HFP3. The AssignUser function in template.class.php performs unsafe macro expansions on strings delimited by { and }, enabling remote authenticated users to extract sensitive data via a macro in a comment (e.g., {user.password}) on an admin profile. The is...

CVE-2021-46961

CVE-2021-46961 involves the Linux kernel where handling of spurious interrupts in the GICv3 IRQ path could trigger a nested NMI and a BUG_ON(in_nmi()), causing a kernel panic. The root cause is enabling IRQs while processing spurious interrups; a rewrite of the commit moved spurious interrupt han...

CVE-2021-46990

CVE-2021-46990 affects powerpc/64s in the Linux kernel. The vulnerability arises from runtime patching of entry flush mitigations via a debugfs entry (entry_flush), which can be unsafe when CPUs are active, potentially causing a crash due to an LR restore issue. The fixed vulnerability patches ar...

CVE-2024-1549

This vulnerability affects Firefox versions less than 123, Firefox ESR less than 115.8, and Thunderbird less than 115.8. The issue occurs when a website sets a large custom cursor , which can overlap with the permission dialog . This overlap may result in user confusion, potentially leading to th...

CVE-2021-29038

The Liferay Portal and Liferay DXP platforms are vulnerable to an information disclosure issue where password reminder answers are not obfuscated on the page. This allows attackers to steal these answers via man-in-the-middle or shoulder surfing attacks. Affected versions include Liferay Portal 7...

CVE-2024-33600

A null pointer dereference vulnerability exists in the nscd (Name Service Cache Daemon) binary, specifically within the glibc library. The flaw occurs when the cache fails to add a not-found netgroup response to the cache, causing the client request to trigger a crash or daemon exit. This issue w...

CVE-2021-46955

CVE-2021-46955 affects the Linux kernel in combination with Open vSwitch. The issue arises in IPv4 packet fragmentation within ovs_fragment(), where a temporary dst_entry is misused as an rtable pointer during the ip_do_fragment() -> ip_skb_dst_mtu() -> ip_dst_mtu_maybe_forward() -> ip_m...

CVE-2021-46966

CVE-2021-46966 affects the Linux kernel: a use-after-free vulnerability in ACPI custom_method code where cm_write() could access a freed buf if count

CVE-2001-0554

The BSD-based telnetd telnet daemon is vulnerable to a buffer overflow across various operating systems. The root cause is the improper handling of a set of options, specifically AYT (Are You There) , by the telrcv function . This flaw allows remote attackers to execute arbitrary commands . While...

CVE-2021-46962

CVE-2021-46962 : Linux kernel mmc: uniphier-sd driver fix for resource leak in remove path. A missing tmio_mmc_host_free() balanced a prior tmio_mmc_host_alloc() in probe, creating a leak in the error path during removal. The fix adds the missing tmio_mmc_host_free() call in the remove function t...

CVE-2024-0017

CVE-2024-0017 involves a permissions bypass in the shouldUseNoOpLocation function of CameraActivity.java, creating a possible confused deputy and leading to local information disclosure without requiring additional execution privileges. Exploitation requires user interaction. The vulnerability is...

CVE-2022-48817

CVE-2022-48817 is a Linux kernel issue affecting the ar9331 MDIO switch under the DSA subsystem. The root cause is that mdiobus registration was done under devres and could be freed by devm_mdiobus_free() via device core shutdown, leading to a panic if the bus was still registered. The advisory e...

CVE-2024-26465

A DOM-based cross-site scripting (XSS) vulnerability exists in the stwdio beep.js JavaScript toolkit (a browser-based synthesizer builder). The flaw is located in the /beep/Beep.Instrument.js component and affects versions prior to commit ef22ad7 . Attackers can exploit this by sending a speciall...

CVE-2021-46967

CVE-2021-46967 is rejected/not used and does not represent an active vulnerability entry.

CVE-2023-52097

A vulnerability exists in Huawei EMUI and Huawei HarmonyOS within the NMS module that allows an attacker to bypass foreground service restrictions . Successful exploitation of this flaw can compromise system confidentiality . No specific patch versions or workarounds are currently provided in the...

CVE-2024-0030

CVE-2024-0030 affects the Android Bluetooth stack: the out-of-bounds read arises in btif_to_bta_response within btif_gatt_util.cc due to an incorrect bounds check. This can cause local information disclosure without extra privileges. User interaction is not required. Exploitation details (vectors...

CVE-2023-40124

CVE-2023-40124 involves a local information disclosure (cross-user read) due to a confused deputy. Public docs from NVD/Red Hat/OSV describe impact as local, with no execution privileges required and no user interaction needed. Android security bulletin entries for 2023-11-01/05 group this under ...

CVE-2023-52644

CVE-2023-52644 relates to a Linux kernel WiFi component (b43) where the QoS-disabled path could map the IEEE 802.11 queue incorrectly due to a single-queue scenario. The root cause is that when QoS is off, the code may attempt to stop/wake a non-existent queue or fail to stop/wake the actual queu...

CVE-2024-26809

The CVE-2024-26809 vulnerability is in the Linux kernel's netfilter nft_set_pipapo code. The clone path previously could destroy elements using a stale view of the lookup table, risking double-destroy of elements; the fix ensures clone uses a current view to perform destruction. A patch sequence ...

CVE-2023-52433

CVE-2023-52433: Linux kernel netfilter nft_set_rbtree vulnerability. New elements in a single transaction may expire before the transaction ends; skip sync GC during the transaction to avoid the commit path traversing an already released object. Async GC will collect expired elements after the tr...

CVE-2023-52587

CVE-2023-52587 (Linux kernel) affects IB/ipoib multicast locking. The issue arose when priv->lock was released while iterating priv->multicast_list in ipoib_mcast_join_task(), creating a window for ipoib_mcast_dev_flush() to remove items mid-iteration. If a mcast item is removed after the l...

CVE-2022-23088

The FreeBSD kernel's net80211 subsystem is vulnerable to a heap-based buffer overflow due to insufficient validation of the length of an IEEE 802.11s Mesh ID before copying it to a heap-allocated buffer. While a Wi-Fi client is in scanning mode (not associated with an SSID), a network-adjacent at...

CVE-2024-26328

CVE-2024-26328 details (Mode C) : Affects QEMU 7.1.0–8.2.1. In hw/pci/pcie_sriov.c, register_vfs fails to set NumVFs to PCI_SRIOV_TOTAL_VF, which causes improper interaction with hw/nvme/ctrl.c. The result is mishandling of SR-IOV virtual functions and related NVMe interactions, per the advisory ...

CVE-2024-34447

The Bouncy Castle Crypto Package For Java (specifically versions before BC TLS Java 1.0.19 , including BC Java 1.78 and BC Java (LTS) 2.73.6 ) is vulnerable to a hostname verification issue. When endpoint identification is enabled in BCJSSE and an SSL socket is created without an explicit hostnam...

CVE-2024-25399

Subrion CMS version 4.2.1 is vulnerable to a Cross-Site Scripting (XSS) vulnerability within the adminer.php file. This flaw allows for the potential injection of malicious scripts into the web page. While the impact is described as partial with a Medium severity (CVSS 3.1 score of 6.1), the docu...

CVE-2024-1676

An inappropriate implementation in the Navigation component of Google Chrome prior to version 122.0.6261.57 allows a remote attacker to spoof the security UI by navigating to a crafted HTML page. The vulnerability is categorized with a Low Chromium security severity and involves CWE-79 (Improper ...