CVE-2024-26472

The KLiK SocialMediaWebsite version 1.0.1 by msaad1999 is affected by a reflected cross-site scripting (XSS) vulnerability. The root cause is the improper neutralization of input during web page generation in the create-new-pwd.php endpoint, specifically involving the selector and validator param...

CVE-2024-26872

The CVE-2024-26872 vulnerability affects the Linux kernel RDMA/srpt subsystem. A race condition allows a use-after-free situation in srpt_refresh_port() when an event handler is registered before the srpt device is fully initialized. The issue can impact confidentiality, integrity, and availabili...

CVE-2019-6110

CVE-2019-6110 (OpenSSH SCP client) affects OpenSSH 7.9. The vulnerability arises from accepting and displaying arbitrary stderr output from the SCP server, allowing a malicious server or MITM to spoof SCP client output and potentially mask or override transferred files. Connected advisories confi...

CVE-2023-7202

The Fatal Error Notify WordPress plugin before 1.5.3 does not have authorisation and CSRF checks in its testerror AJAX action, allowing any authenticated users, such as subscriber to call it and spam the admin email address with error messages. The issue is also exploitable via CSRF...

CVE-2024-24095

Code-projects Simple Stock System version 1.0 is vulnerable to SQL Injection (CWE-89). The vulnerability stems from the system's susceptibility to malicious SQL commands, which could impact the confidentiality, integrity, and availability of the data. The provided documents do not specify a parti...

CVE-2016-8858

CVE-2016-8858 affects OpenSSH 6.x and 7.x up to 7.3, where the kex_input_kexinit() function can be triggered by remote KEXINIT messages to exhaust memory and cause a denial of service. Public sources in connected docs describe memory consumption per connection (examples range up to 128 MB per con...

CVE-2024-24096

Code-projects Computer Book Store version 1.0 is vulnerable to SQL Injection via the BookSBIN component. This vulnerability allows for the improper neutralization of special elements used in SQL commands, potentially leading to high impact on confidentiality, integrity, and availability. No speci...

CVE-2024-42084

CVE-2024-42084 : Linux kernel vulnerability in ftruncate() on 64-bit architectures. In 32-bit compat mode, off_t sign-extension caused a negative length to be interpreted as a valid positive size, allowing truncation to a size between 2 GiB and 4 GiB. The root cause was the compat syscall using a...

CVE-2024-26874

CVE-2024-26874 is a Linux kernel vulnerability in the drm/mediatek driver where a race allows a NULL pointer dereference in mtk_drm_crtc_finish_page_flip if mtk_crtc->event is NULL. The root cause is that pending_needs_vblank is derived from mtk_crtc->event and a race occurs between atomic_...

CVE-2024-26559

An issue in uverif version 2.0 , a free and open-source web authentication management system, allows a remote attacker to obtain sensitive information . This vulnerability is categorized as Insecure Storage of Sensitive Information (CWE-925 ). While the vulnerability has been sighted in the wild,...

CVE-2024-25876

The Enhavo CMS version v0.13.1 is affected by a cross-site scripting (XSS) vulnerability within the Header module . An attacker can execute arbitrary web scripts or HTML by injecting a crafted payload into the Title text field . To mitigate this risk, it is recommended to disable the Header modul...

CVE-2023-50436

An issue exists in Couchbase Server versions 7.1.5 through 7.2.3 where ns_server admin credentials are leaked in an encoded form within the diag.log file. This vulnerability stems from insufficient protection of credentials during logging processes. To remediate this issue, users are advised to u...

CVE-2024-24099

The Scholars Tracking System version 1.0 , developed by Fabian Ros, is vulnerable to SQL Injection during the Employment Status Information Update process. The root cause is a lack of validation for externally entered SQL statements, which could allow an attacker to execute unauthorized SQL comma...

CVE-2024-26466

The web-platform-tests/wpt project is susceptible to a DOM-based cross-site scripting (XSS) vulnerability in the /dom/ranges/Range-test-iframe.html component. This issue exists in versions before commit 938e843 and occurs because the component fails to properly neutralize input, allowing attacker...

CVE-2024-0015

CVE-2024-0015 affects the Android Framework via DreamService.java: convertToComponentName can be abused to launch arbitrary protected activities through intent redirection, enabling local elevation of privilege with low privileges and no user interaction required. Public references indicate this ...

CVE-2024-0248

The CVE-2024-0248 entry concerns the EazyDocs WordPress plugin prior to 2.4.0, where insufficient access controls allowed authenticated users (e.g., subscribers) to delete arbitrary posts and to add/delete documents/sections. Root cause is broken access control, with where unauthenticated access ...

CVE-2024-25767

The nanomq MQTT broker (version 0.21.2 ) is affected by a Use-After-Free vulnerability located in the /nanomq/nng/src/core/socket.c file. This issue stems from a post-release reuse vulnerability within the software's core components. While the vulnerability's impact on availability is rated as hi...

CVE-2024-26653

CVE-2024-26653 : In the Linux kernel, the USB ljca (ljca_auxdev_release) path double-freed the platform_data on error handling when auxiliary_device_add() fails. The issue is fixed by removing the redundant kfree() in callers and by freeing the passed-in platform_data only for errors that occur b...

CVE-2024-25802

Affected software: SKINsoft S-Museum 7.02.3. Vulnerability: Unrestricted file upload via the Add Media function. The attack payload, in this case, is the file content (not the filename). Root cause / nature: Arbitrary file upload capability exists in the Add Media workflow. Impact (as stated): Hi...

CVE-2024-31309

A Denial of Service (DoS) vulnerability exists in Apache Traffic Server due to improper handling of HTTP/2 CONTINUATION frames , which can cause the server to consume excessive resources. The affected versions include 8.0.0 through 8.1.9 and 9.0.0 through 9.2.3 . To mitigate this, users can confi...

CVE-2020-1934

CVE-2020-1934 affects Apache HTTP Server 2.4.0–2.4.41 via mod_proxy_ftp, which may use uninitialized memory when proxying to a malicious FTP backend. Public advisories confirm the fixes in Apache HTTP Server 2.4.43+ (e.g., ALAS-2020-1370/ALAS2-2020-1427), so upgrading to 2.4.43 or newer is the re...

CVE-2024-26876

The CVE-2024-26876 entry concerns the Linux kernel, specifically the DRM bridge adv7511. The vulnerability stems from a crash that could occur if an IRQ is pending during adv7511_probe before adv7511_cec_init, causing cec_received_msg_ts to access uninitialized data and trigger a kernel Oops. The...

CVE-2023-32188

CVE-2023-32188 affects NeuVector. The issue arises from the ability to reverse‑engineer the JWT token used for Manager/API authentication, forging a valid token that can lead to remote code execution. This is described with a CVSS 4.0 base score of 9.4 (CRITICAL) and a network attack vector with ...

CVE-2024-26954

CVE-2024-26954 (Linux kernel) is tied to a slab-out-of-bounds read in ksmbd during smb2_create_req processing. The issue arises when smb2_create_req’s NameOffset is smaller than its Buffer offset, allowing slab-out-of-bounds reads from smb2_open. The patch fixes this by enforcing a minimum value ...

CVE-2023-45918

CVE-2023-45918 is a rejected CVE entry. The Initial Description states it was withdrawn by the CNA and not a security issue; the Connected Documents reflect this with a matching entry noting the withdrawal and lack of public details. There are no active technical details, affected products, explo...

CVE-2024-27079

CVE-2024-27079 affects the Linux kernel IAMMU VT-d code. Systems with kdump/crash kernel may crash due to NULL domain on device release in deferred_attach mode, triggering a NULL pointer dereference during device removal. The mitigated path uses the release_domain mechanism to clear the scalable ...

CVE-2023-52480

CVE-2023-52480 is tied to a race in ksmbd where a session_lookup race with ksmbd_expire_session could lead to a use-after-free (sess->last_active). Connected docs confirm the fix adds a rwsem to synchronize ksmbd_session_lookup and ksmbd_expire_session, addressing the UAF window. The Linux ker...

CVE-2024-0421

The CVE-2024-0421 entry concerns the WordPress MapPress Maps plugin prior to 2.88.16, where an IDOR allows unauthenticated users to read private and draft posts via an AJAX action that should only expose public maps. Multiple connected sources confirm the flaw and its public-facing impact, includ...

CVE-2017-7494

CVE-2017-7494 affects Samba 3.5.0 and later, with vulnerable ranges ending before 4.6.4, and also before 4.5.10 and 4.4.14 in some branches. The flaw enables a malicious client with write access to a writable Samba share to upload a shared library and trigger the server to load and execute it, ac...

CVE-2021-47031

In the Linux kernel, the following vulnerability has been resolved: mt76: mt7921: fix memory leak in mt7921coredumpwork Fix possible memory leak in mt7921coredumpwork...

CVE-2021-47047

CVE-2021-47047 concerns the Linux kernel SPI ZynqMP GQSPI driver. The root cause was that dma_map_single failures could lead to using an unmapped address, triggering a crash when reading large flash blocks. The fix adjusts the SPI controller to support a 44-bit DMA address width and to return imm...

CVE-2024-4535

The KKProgressbar2 Free WordPress plugin (versions

CVE-2023-52476

CVE-2023-52476 refers to a Linux kernel vulnerability in the perf/x86/lbr path where a panic can occur if a vsyscall is made while LBR sampling is active. The issue arises when a vsyscall interrupt (NMI) leads to a decode path that dereferences next_byte pointing to the vsyscall address (e.g., ge...

CVE-2021-47069

CVE-2021-47069 is a Linux kernel race in IPC paths: do_mq_timedreceive may call wq_sleep with a stack-allocated ewq_addr that can be overwritten, leading to a later access by do_mq_timedsend and a crash. The root cause is a race between the receiver’s stack address and the sender’s use of that ad...

CVE-2021-46957

In the Linux kernel, the following vulnerability has been resolved: riscv/kprobe: fix kernel panic when invoking sysread traced by kprobe The execution of sysread end up hitting a BUGON in findgetblock after installing kprobe at sysread, the BUG message like the following: 65.708663 ------------...

CVE-2021-47027

CVE-2021-47027 concerns the Linux kernel mt7921e/mt76 PCI path where firmware download failure can trigger a kernel panic due to a PCI MSI handling bug. The crash trace points to free_msi_irqs (pci_disable_msi) during mt7921_pci_probe, resulting in a fatal exception and system halt. Public detail...

CVE-2024-41008

The CVE-2024-41008 entry describes a Linux kernel patch in drm/amdgpu that changes how vm->task_info is handled. The task_info object becomes a dynamically allocated pointer with reference counting; new helpers amdgpu_vm_get_task_info and amdgpu_vm_put_task_info manage its lifecycle, and the l...

CVE-2023-51385

OpenSSH CVE-2023-51385: OS command injection can occur when a username or hostname containing shell metacharacters is used in expansion tokens, e.g., in untrusted repositories. Affected: OpenSSH up to version

CVE-2024-26971

CVE-2024-26971 relates to the Linux kernel clock framework for Qualcomm IPQ5018 (clk: qcom: gcc-ipq5018). The issue is that frequency table arrays were not properly terminated with an empty element, which can lead to out-of-bounds access when components traverse the table (e.g., qcom_find_freq() ...

CVE-2022-4137

CVE-2022-4137 is a reflected XSS in Keycloak’s oob OAuth endpoint caused by incorrect null-byte handling. A malicious link can insert an arbitrary URI into a Keycloak error page, and exploitation requires user interaction, potentially compromising user details. Connected sources identify this vul...

CVE-2021-47015

CVE-2021-47015 affects the Linux kernel bnxt_en driver. The root cause is incorrect RX consumer index handling in bnxt_rx_pkt(): the driver passed the previous index (raw_cons) to bnxt_discard_rx() instead of the current index (tmp_raw_cons), causing potential out-of-order RX buffer completion an...

CVE-2024-57000

CVE-2024-57000 is a duplicate of CVE-2023-48022. The connected records tie CVE-2023-48022 to a Ray remote code execution issue via the agent/job submission endpoint (affecting Ray v2.9.3–2.40.0; exploitation is demonstrated by a Metasploit module), with references from Nessus (Ray Dashboard Job R...

CVE-2024-35621

The Formwork content management system is vulnerable to a Cross-site Scripting (XSS) vulnerability in the Edit function . The root cause is the insufficient sanitization of markdown fields , specifically within the Content field , which allows users with page editing permissions to inject [remove...

CVE-2024-26625

The CVE-2024-26625 entry concerns a Linux kernel issue in the LLC path where a stale sk->sk_wq pointer could remain after releasing an LLC socket. The trace indicates a use-after-free path triggered by sock_wfree and related sk_buff paths. The fix involves a commit that clears sock->sk afte...

CVE-2022-38322

Temenos Transact (formerly T24) is affected by multiple reflected XSS vulnerabilities in the helprequest.jsp component. The Nuclei template documents an exploit vector using a crafted URL parameter: GET /jsps/helprequest.jsp?url=%27)%22+onerror=%22confirm(%27document.domain%27)%22. Impact: attack...

CVE-2021-47072

CVE-2021-47072 (Linux kernel, btrfs) : The vulnerability concerns the btrfs filesystem where, after moving an inode between directories and logging both old and new dentries, a power-failure can leave the old dentry present when only the new one should exist. The bug occurs because the old parent...

CVE-2019-9517

CVE-2019-9517 describes an attack against some HTTP/2 implementations where unconstrained internal data buffering can cause a denial of service. The vulnerability arises when an attacker floods a connection with a large number of requests for a large response object while manipulating HTTP/2 flow...

CVE-2021-47043

CVE-2021-47043 affects the Linux kernel media: venus: core subsystem. The issue is a resource leak in the error path of venus_probe(): if an error occurs after a successful of_icc_get() call, the operation must be undone. The mitigation is to replace of_icc_get() with devm_of_icc_get(), update th...

CVE-2021-47037

CVE-2021-47037 affects the Linux kernel's ASoC q6afe-clocks driver. The issue arises because the driver could be reprobed (e.g., APR services restart after firmware crash) and would oops since hw.init is cleared during the first probe. The vulnerability has been mitigated by rewriting the driver ...

CVE-2021-47019

The CVE-2021-47019 entry concerns the Linux kernel mt76/mt7921 path, where a race could lead to invalid register access after suspend when the PCIe host controller is suspended. Public details describe a fix that disables interrupts and synchronizes pending IRQ handlers to ensure the irq tasklet ...