CVE-2021-47021

CVE-2021-47021 is a Linux kernel vulnerability in the mt76 mt7915 driver area. The issue is a memory leak that occurs during mt7915_unregister_device(), with a specific root-cause: mt7915_tx_token_put() must be called before mt76_free_pending_txwi(). The description notes that the memory leak was...

CVE-2024-26351

The flusity-CMS software, version v2.33 , is vulnerable to a Cross-Site Request Forgery (CSRF) . This vulnerability is located specifically within the /core/tools/update_place.php component. The vulnerability allows for unauthorized actions to be performed on behalf of an authenticated user. Whil...

CVE-2023-52461

CVE-2023-52461 affects the Linux kernel DRM scheduler component (drm/sched). A malformed drm_sched_entity_init() could cause an out-of-bounds priority value to be clamped incorrectly due to a flawed bound-setting expression; this has been fixed. The vulnerability is categorized with locally explo...

CVE-2021-46959

CVE-2021-46959 is a Linux kernel SPI subsystem use-after-free issue (devm_spi_alloc_{master,slave}) caused by relying on the devres list during spi_unregister_controller. The root cause is that devres_find() runs after the devres list has been torn down, leading to underflow of reference counters...

CVE-2021-46983

CVE-2021-46983 is rejected/not used and does not represent an active vulnerability entry.

CVE-2020-1927

CVE-2020-1927 affects Apache HTTP Server 2.4.0–2.4.41, where mod_rewrite redirects intended to be self-referential could be fooled by encoded newlines and redirect to an unexpected URL within the request. Multiple connected advisories confirm the issue and indicate that fixes were released in Apa...

CVE-2021-47058

CVE-2021-47058 is a Linux kernel vulnerability affecting the regmap debugfs path. The issue arises from a memory leak in which debugfs_name is freed in regmap_debugfs_exit() but not recreated due to a conditional added by upstream commit cffa4b2122f5. The relevant sequence involves regmap_reinit_...

CVE-2024-26614

CVE-2024-26614 is a Linux Kernel vulnerability describing a race/ordering issue in init of the accept_queue spinlocks, disclosed as a local denial-of-service condition triggered by a syz reproduction. The provided sources (Linux kernel submissions and vendor advisories) attribute a high impact (C...

CVE-2024-31573

CVE-2024-31573 affects XMLUnit for Java prior to 2.10.0. In default configurations, XSLT extension functions are enabled during an XSLT transformation, which may allow code execution via an untrusted stylesheet. The vulnerability is described across multiple connected documents (including Nessus ...

CVE-2024-27008

CVE-2024-27008 is confirmed in the connected MiracleLinux advisories as a Linux kernel vulnerability affecting the drm nv04 driver. Description: when Output Resource (dcb->or) is assigned in fabricate_dcb_output(), there can be an out-of-bounds access to the dac_users array if dcb->or is ze...

CVE-2017-3169

CVE-2017-3169 affects Apache HTTP Server (httpd) up to the fixed versions: 2.2.x before 2.2.33 and 2.4.x before 2.4.26. The vulnerability is a NULL pointer dereference in the httpd’s mod_ssl component when third-party modules call ap_hook_process_connection() during an HTTP request to an HTTPS po...

CVE-2021-47028

CVE-2021-47028 affects the Linux kernel mt76 mt7915 driver stack. The issue is in tx rate reporting for mt7915e devices (cfg80211/mac80211 flow), where rate_info was not checked correctly, leading to unexpected or incorrect bitrate reporting. The connected NASL document confirms a fix in the txra...

CVE-2021-46985

CVE-2021-46985 corresponds to a Linux kernel vulnerability in the ACPI subsystem: if acpi_device_set_name() fails, acpi_device_bus_id->bus_id must be freed to avoid a memory leak in the error path. The connected Nessus/NVL entries reference Tencent/TencentOS and Unity Linux advisories noting t...

CVE-2018-20685

CVE-2018-20685 affects OpenSSH scp client: scp.c allows remote servers to bypass access restrictions via the filename "." or an empty filename, potentially enabling modification of the client-directory permissions. Multiple advisories confirm this vulnerability and fix paths: Arch Linux ASA-20190...

CVE-2024-25082

The Splinefont component in FontForge (versions through 20230101 ) is vulnerable to command injection when processing crafted archives or compressed files (TAR, ZIP, GZ, BZ2). The root cause is that the software constructs shell commands using filenames from archive entries without proper sanitiz...

CVE-2024-3918

The Pet Manager WordPress plugin, in versions 1.4 and earlier , is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is a failure to properly sanitise and escape certain Pet settings. This flaw allows users with high privileges, such as Contributors , to perform XSS attacks. While ...

CVE-2024-25742

The Linux kernel (versions before 6.9 ) is vulnerable to a security flaw where an untrusted hypervisor can inject virtual interrupt 29 (#VC) at any time and trigger its handler. This vulnerability specifically affects systems using AMD SEV-SNP and AMD SEV-ES technologies. Impacting the kernel's h...

CVE-2014-4078

CVE-2014-4078 affects Microsoft Internet Information Services (IIS) 8.0 and 8.5. The vulnerability is in the IP Security feature, where wildcard rules in the IP Address and Domain Restrictions list are not properly processed, enabling a remote attacker to bypass the intended rule set via an HTTP ...

CVE-2024-26612

The Linux kernel contains a vulnerability in the netfs and fscache components within the fscache_put_cache() function. The root cause is that the function dereferences the "cache" object before checking if it is IS_ERR_OR_NULL() . The fix involves performing the null/error check before dereferenc...

CVE-2023-52492

In the Linux kernel, the following vulnerability has been resolved: dmaengine: fix NULL pointer in channel unregistration function dmaasyncdevicechannelregister can fail. In case of failure, chan-local is freed with freepercpu, and chan-local is nullified. When dmaasyncdeviceunregister is called...

CVE-2024-35554

The idcCMS (Net Titanium IDC Cloud Management Agent System) version 1.35 is vulnerable to a Cross-Site Request Forgery (CSRF) . The flaw exists in the /admin/infoWeb_deal.php component, specifically involving the mudi , dataType , and dataTypeCN parameters. An attacker could leverage this vulnera...

CVE-2024-26468

A DOM-based cross-site scripting (XSS) vulnerability exists in the index.html component of jstrieb/urlpages before commit 035b647 . The root cause is the improper neutralization of input, which allows an attacker to execute arbitrary JavaScript by sending a crafted URL . To remediate, users shoul...

CVE-2023-51747

Apache James prior to versions 3.8.1 and 3.7.5 is vulnerable to SMTP smuggling . This issue stems from lenient behavior in line delimiter handling , which can cause a discrepancy in interpretation between the sender and the receiver. An attacker could exploit this to forge an SMTP envelop , poten...

CVE-2018-15473

OpenSSH vulnerability CVE-2018-15473 affects OpenSSH up to version 7.7, where the server may enumerate valid usernames by returning different responses for invalid authentication attempts due to not delaying bailout until after the request packet is parsed (auth2-gss.c, auth2-hostbased.c, auth2-p...

CVE-2024-26608

The CVE-2024-26608 entry describes a Linux kernel ksmbd_nl_policy out-of-bounds read that was addressed by a patch to fix a global oob in ksmbd_nl_policy. The bug manifested as a read of size 1 at a netlink attribute parsing path, with the faulting address located in ksmbd_nl_policy+0x100/0xa80 a...

CVE-2023-4826

The SocialDriver WordPress theme versions prior to 2024 are vulnerable to a prototype pollution vulnerability. This flaw allows an attacker to inject arbitrary properties, which can result in a cross-site scripting (XSS) attack. To remediate this issue, users should update to version 2024 or late...

CVE-2022-20655

CVE-2022-20655 describes a CLI command-injection vulnerability in ConfD on Cisco devices. It results from insufficient validation of a process argument in the CLI, enabling an authenticated, local attacker to inject commands during execution and potentially run arbitrary commands with the privile...

CVE-2024-25369

A reflected Cross-Site Scripting (XSS) vulnerability exists in FUEL CMS version 1.5.2 , a content management system based on the CodeIgniter framework. The flaw allows an attacker to execute arbitrary code by providing a crafted string following the group_id parameter. To minimize risk until a pa...

CVE-2019-9513

CVE-2019-9513 (and related HTTP/2 CVEs) affect nginx and nghttp2. The issues enable denial of service via HTTP/2 resource loops and priority/window manipulation, causing high CPU/memory usage. nginx 1.16.x and nghttp2 are specifically named in advisories; remediation is upgrading to fixed package...

CVE-2023-52368

A denial of service vulnerability exists in Huawei HarmonyOS and Huawei EMUI due to an input validation flaw in the Accounts module . An attacker can exploit this vulnerability to cause system functions to operate abnormally. No specific exploit links or remediation versions are provided in the d...

CVE-2024-41035

CVE-2024-41035 (Linux kernel USB core) : A duplicate-endpoint bug in usbcore was caused by assuming bEndpointAddress reserved bits are always 0, making endpoint_is_duplicate() misclassify descriptors that share direction and endpoint number. The fix clears the reserved bits when parsing endpoint ...

CVE-2024-0407

Certain HP Enterprise LaserJet and HP LaserJet Managed printers are vulnerable to information disclosure . The root cause is the absence of an appropriate CA certificate in the device's certificate store, which may lead the device to trust connections made back to services enabled by certain solu...

CVE-2024-4367

CVE-2024-4367 concerns a missing type check when handling fonts in PDF.js, allowing arbitrary JavaScript execution within the PDF.js context. Affected products listed in connected docs include Firefox before 126, Firefox ESR before 115.11, and Thunderbird before 115.11. The root cause is limited ...

CVE-2024-2301

Certain HP LaserJet Pro devices are potentially vulnerable to a Cross-Site Scripting (XSS) attack. The root cause is a lack of protective measures for the website structure within the device's microprogramming software . A remote attacker can exploit this flaw via the web management interface to ...

CVE-2024-35560

The idccms v1.35 cloud management agent system by Net Titanium Technology contains a Cross-Site Request Forgery (CSRF) vulnerability. The flaw exists in the /admin/ca_deal.php component, specifically when the mudi=del parameter is used with empty dataType and dataTypeCN variables. This vulnerabil...

CVE-2024-1846

The Responsive Tabs WordPress plugin (versions

CVE-2024-26982

CVE-2024-26982 affects the Linux kernel Squashfs code. The vulnerability arises from an OOB read path in fill_meta_index() triggered by an inode number value of zero, which is treated as unused. After a faulty read aborts, an empty metadata index is invalidated with inode=0, and a subsequent read...

CVE-2024-26859

CVE-2024-26859: In the Linux kernel, a race in the bnX2x driver during EEH error handling could cause a read of freed memory when bnx2x_io_slot_reset() and bnx2x_nic_unload() race. The fix ensures page pool allocations are verified before freeing SGEs to prevent NULL-pointer dereferences and cras...

CVE-2024-21798

The CVE-2024-21798 issue affects ELECOM wireless LAN routers and repeater families. A cross-site scripting (XSS) vulnerability can be triggered when a malicious administrative user configures crafted content; when another admin logs in and operates the device, an arbitrary script may execute in t...

CVE-2024-26973

CVE-2024-26973 concerns the Linux kernel fat subsystem. The issue occurred when fat_encode_fh_nostale() encoded a file handle without a parent and stored only the first 10 bytes; since the file handle length must be a multiple of 4, the actual length is 12 bytes and the last two bytes could be un...

CVE-2024-25768

The OpenDMARC authentication and email analysis software version 1.4.2 is vulnerable to a null pointer dereference in the /OpenDMARC/libopendmarc/opendmarc_policy.c file. This vulnerability can be triggered by a perpetrator to cause service failures . Remediation is available through official pac...

CVE-2024-1106

The Shariff Wrapper WordPress plugin, in versions prior to 4.6.10 , contains a vulnerability where it fails to sanitise and escape certain settings. This flaw allows high-privilege users, such as administrators, to execute Stored Cross-Site Scripting (XSS) attacks, even in environments where the ...

CVE-2024-26862

CVE-2024-26862 — Linux kernel data race (kernel 5.x/6.x) Root cause: missing READ_ONCE()/WRITE_ONCE() annotations for ignore_outgoing reads in packet code; read/write races observed between dev_queue_xmit_nit() and packet_setsockopt(). Syzkaller/KCSAN reported a data-race affecting packet_setsock...

CVE-2024-26999

CVE-2024-26999 — Linux kernel (serial/pmac_zilog) A vulnerability in the Linux kernel’s pmac_zilog serial driver was mitigated by a patch that was later removed. The mitigation intended to stop IRQs entirely caused a crash when pmac_zilog is used as a serial console. Specifically, a pr_err() path...

CVE-2024-26467

A DOM-based cross-site scripting (XSS) vulnerability exists in the tabatkins/railroad-diagrams library, specifically within the component generator.html file. The flaw allows an attacker to execute arbitrary JavaScript by providing a specially crafted URL . This issue affects versions prior to co...

CVE-2024-26490

A cross-site scripting (XSS) vulnerability exists in the Addon JD Simple module of flusity-CMS v2.33 . This flaw arises from the improper neutralization of input during web page generation, specifically allowing an attacker to inject a crafted payload into the Title text field . Successful exploi...

CVE-2024-25170

The Mezzanine CMS version v6.0.0 is affected by a Design/Logic Flaw that allows attackers to bypass access controls by manipulating the Host header . This vulnerability can lead to unauthorized access to sensitive information or systems. While no patch version is currently specified, it is recomm...

CVE-2024-26931

The CVE-2024-26931 issue affects the Linux kernel’s qla2xxx SCSI driver. Under memory pressure, the driver could not allocate an SRB to perform error recovery during a cable pull, causing a flush failure and the upper layer to modify scsi_cmnd. When memory frees up, another cable-pull flush could...

CVE-2023-44487

CVE-2023-44487 – HTTP/2 Rapid Reset DoS Root cause: HTTP/2 stream resets can cause servers to continue processing, leading to unbounded resource consumption and potential DoS when clients rapidly cancel streams. What’s affected: Various HTTP/2 implementations and deployments, including servers, p...

CVE-2024-3594

The IDonate WordPress plugin through 1.9.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...