CVE-2024-3628

The EasyEvent WordPress plugin (versions 1.0.0 and earlier ) is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is the failure to properly sanitize and escape certain plugin settings, which allows high-privilege users, such as administrators , to perform XSS attacks even when unf...

CVE-2018-16843

CVE-2018-16843 affects nginx before 1.15.6 and 1.14.1, where HTTP/2 implementation vulnerabilities in ngx_http_v2_module (if http2 is enabled) can cause excessive memory usage. Connected advisories also reference related CVEs (16844/16845) and show multiple distributions (Debian, Fedora/Red Hat, ...

CVE-2024-26943

The CVE-2024-26943 issue affects the Linux kernel driver path nouveau/dmem, where kcalloc() could fail and return NULL in nouveau_dmem_evict_chunk(), leading to NULL dereferences when dereferencing src_pfns, dst_pfns, or dma_addrs. The patch adds a __GFP_NOFAIL flag to kcalloc() and switches from...

CVE-2023-40106

CVE-2023-40106 concerns a BAL bypass in Android’s NotificationManagerService.java (sanitizeSbn) that could allow launching an activity from the background, enabling local privilege escalation without extra privileges or user interaction. Affected component is the background handling path in the A...

CVE-2021-46989

CVE-2021-46989 is a Linux kernel vulnerability affecting HFS+ extents handling during shrinking truncates. The issue arises when shrinking in the middle of an extent in the extents overflow file, where hfsplus_file_truncate() previously removed the last matching extent record unconditionally due ...

CVE-2021-29921

CVE-2021-29921 affects the ipaddress module in Python, where leading zeros in IPv4 octets are mishandled, potentially bypassing IP-based access controls. The issue is addressed by Python 3.9.5 and later; many advisories (Debian, AlmaLinux, Alpine, etc.) reference updates or security trackers conf...

CVE-2021-47060

CVE-2021-47060 affects the Linux kernel KVM subsystem. The issue arises when unregistering an I/O bus with kvm_io_bus_unregister_dev() fails to allocate memory for a new bus instance, causing unregister_dev() to destroy all devices on the bus except the target device without signaling the caller....

CVE-2023-48795

The SSH transport protocol, including OpenSSH (before 9.6), is vulnerable to the Terrapin attack (CVE-2023-48795). This vulnerability allows remote attackers to bypass integrity checks during the handshake phase by exploiting how the SSH Binary Packet Protocol (BPP) handles sequence numbers. The ...

CVE-2023-6247

The OpenVPN 3 Core Library in versions through 3.8.3 is vulnerable to a NULL Pointer Dereference (CWE-476) within the PKCS#7 parser . The root cause is the parser's failure to properly validate parsed data, which can lead to an application crash . To resolve this issue, users are recommended to u...

CVE-2022-20793

CVE-2022-20793 affects Cisco TelePresence CE Software and RoomOS Software for Cisco Touch 10 devices. The root cause is insufficient identity verification in the pairing process, allowing an unauthenticated, remote attacker to impersonate a legitimate device and pair with an affected device. A su...

CVE-2024-9166

CVE-2024-9166 corresponds to an OS command injection in Atelmo/TitanNit devices via the getcommand query. Connected docs identify affected hardware as TitanNit Web Control 2.01 and Atemio 7600, and Atelmo Atemio AM 520 HD devices (TitanNit 2.01 and earlier). The vulnerability allows unauthenticat...

CVE-2024-26622

CVE-2024-26622 affects the Linux kernel’s tomoyo subsystem. The issue is a use-after-free/write-after-free in tomoyo_write_control() when long lines are written. The root cause is that head->write_buf must be fetched after head->io_sem is held; otherwise concurrent write() calls can trigger...

CVE-2021-46978

In the Linux kernel, the following vulnerability has been resolved: KVM: nVMX: Always make an attempt to map eVMCS after migration When enlightened VMCS is in use and nested state is migrated with vmxgetnestedstate/vmxsetnestedstate KVM can't map evmcs page right away: evmcs gpa is not 'struct...

CVE-2024-0021

CVE-2024-0021 affects Android’s NotificationAccessConfirmationActivity in the work profile. A logic error could let an app enable notification listener services, enabling local elevation of privilege with no extra privileges; exploitation requires user interaction. The issue is documented across ...

CVE-2023-27321

CVE-2023-27321 describes a DoS vulnerability in OPC Foundation UA .NET Standard’s OPC UA ConditionRefresh handling. The flaw allows an attacker to trigger a resource exhaustion condition on affected servers by sending a high volume of ConditionRefresh requests, potentially consuming all server re...

CVE-2024-27026

CVE-2024-27026 relates to the Linux kernel vmxnet3 driver. The advisory/vulnerability text specifies that the issue was a missing reserved tailroom in vmxnet3, fixed by using rbi->len instead of rcd->len for non-data-carrying packets. A driver warning trace (XDP_WARN: Driver BUG: missing re...

CVE-2018-16844

CVE-2018-16844 affects nginx before versions 1.15.6 and 1.14.1 where HTTP/2 implementation can cause excessive CPU usage when nginx is built with the ngx_http_v2_module and the listen directive uses http2. The issue is triggered by HTTP/2 handling and is report-backed across multiple providers (D...

CVE-2021-47000

In the Linux kernel, the following vulnerability has been resolved: ceph: fix inode leak on getattr error in fhtodentry...

CVE-2024-26813

The CVE-2024-26813 issue affects the Linux kernel vfio-platform subsystem (SET_IRQS) where loopback IRQ triggering can occur before an eventfd is configured, enabling a NULL dereference. The fix registers all IRQs in a disabled state during device open and ensures trigger changes are serialized w...

CVE-2019-16905

CVE-2019-16905 affects OpenSSH 7.7–7.9 and 8.x prior to 8.1 when built with the experimental XMSS key type. It describes a pre-authentication integer overflow in XMSS key parsing that can cause memory corruption and local code execution. The XMSS implementation is treated as experimental in all r...

CVE-2024-0420

MapPress Maps for WordPress Plugin prior to 2.88.15 is affected by a Stored XSS vulnerability: the map title is not sanitized/escaped when output in the admin dashboard, allowing Contributors and higher roles to inject exploits. Impact details reported across multiple sources (including Red Hat, ...

CVE-2021-46992

CVE-2021-46992 affects the Linux kernel netfilter nftables hashtables. The issue arises from storing the number of buckets in 32-bit variables, allowing an overflow in nft_hash_buckets() when large sizes are encountered (sz Brent: 0x40000000 was observed). The syzbot report shows UBSAN: shift-out...

CVE-2024-42096

CVE-2024-42096 is a Linux kernel vulnerability in the x86 profiling code (profile_pc) used for timer-based profiling. The issue stemmed from the function’s assumptions about stack layout when accounting time spent in spinlocks, which could misattribute time and trigger KASAN warnings. The advisor...

CVE-2023-27372

The SPIP CMS is vulnerable to Remote Code Execution (RCE) in versions prior to 4.2.1 (specifically branches 3.2, 4.0, 4.1, and 4.2). The root cause is a deserialization flaw in the protege_champ() function, which fails to properly validate serialized strings before calling unserialize(). This can...

CVE-2023-38709

Apache HTTP Server (versions through 2.4.58 ) is vulnerable to HTTP response splitting due to faulty input validation in the core. This flaw allows malicious or exploitable backend/content generators to insert unsanitized headers, such as Content-Type or Content-Encoding , into the response. Prac...

CVE-2024-0018

The vulnerability CVE-2024-0018 affects Android Media Codecs (ColorConverter.cpp) in ColorConverter::convertYUV420Planar16ToY410, where a heap-based out-of-bounds write is possible. This could enable local escalation of privilege with no additional execution privileges and requires no user intera...

CVE-2018-10892

CVE-2018-10892 : In Docker/Moby, the default OCI Linux spec (oci/defaults_linux.go) from 1.11 to current does not block /proc/acpi pathnames. This allows a container to affect host hardware state (e.g., enabling/disabling Bluetooth, changing keyboard brightness) by targeting /proc/acpi, represent...

CVE-2017-15715

CVE-2017-15715 affects Apache HTTP Server 2.4.0–2.4.29. The issue: the expression could treat a trailing '$' as a newline in a malicious filename, bypassing filename-end checks and potentially allowing uploads that would otherwise be blocked. Documents consistently describe this as a bypass vuln...

CVE-2019-11043

CVE-2019-11043 affects PHP in FPM configurations where known underflow in env_path_info in fpm_main.c allows writing past buffers, enabling remote code execution. Affected versions are PHP 7.1.x < 7.1.33, 7.2.x < 7.2.24, and 7.3.x

CVE-2019-6109

OpenSSH 7.9 contains CVE-2019-6109: missing character encoding in the progress display allows a malicious server/MITM to spoof scp client output by crafting object names (refresh_progress_meter in progressmeter.c). The vulnerability can enable spoofing of file transfer output; related issues incl...

CVE-2021-30745

CVE-2021-30745 is marked as rejected, but connected documents describe a local privilege-escalation in Apple macOS QuartzCore. The flaw involves type confusion in the QuartzCore framework that can allow a low-privilege attacker to escalate privileges to the WindowServer context. The ZDI advisory ...

CVE-2021-3156

CVE-2021-3156 is a heap-based buffer overflow in sudo that enables privilege escalation to root. The issue arises in the argument parsing path and is exploitable via commands using sudoedit -s with a trailing backslash, leading to memory corruption. Affected release information in the provided do...

CVE-2010-5107

The OpenSSH server daemon (sshd ) is vulnerable to a denial of service (DoS) attack due to a default configuration that enforces a fixed time limit between establishing a TCP connection and completing a login. A remote attacker can exploit this by opening numerous TCP connections to exhaust avail...

CVE-2023-28531

CVE-2023-28531 affects OpenSSH: ssh-add adds smartcard keys to ssh-agent without the intended per‑hop destination constraints, starting from OpenSSH up to version 9.2.x and earliest affected 8.9. The issue is resolved in OpenSSH 9.3 and later. Remediation is upgrading to 9.3+ (or the distro patch...

CVE-2024-0023

CVE-2024-0023: In ConvertRGBToPlanarYUV of Codec2BufferUtils.cpp, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges required. User interaction is not needed for exploitation. Connected...

CVE-2021-1636

Technical details about CVE-2021-1636 are not publicly provided in the supplied documents. Please monitor for updates from official sources for affected products, vulnerable components, impact, and remediation.

CVE-2023-52603

CVE-2023-52603 : In Linux kernel, a UBSAN array-index-out-of-bounds was reported in JFS’s dtSplitRoot (dtree) when the value of fsi drops below -1, causing an out-of-bounds access previously guarded by a check that only handled -1. A patch was added to handle values less than 0, addressing the ro...

CVE-2024-26863

CVE-2024-26863 : In the Linux kernel, a vulnerability in the HSR/PRP framing layer allowed an uninitialized value to be accessed when the Ethernet header indicates a PRP/HSR packet but is not followed by an HSR tag. The issue arises in hsr_get_node() and can lead to uninit-value reads as shown by...

CVE-2023-52600

CVE-2023-52600 affects the Linux kernel JFS component. Root cause: a use-after-free in jfs_evict_inode where, if diMount(ipimap) fails, the released ipimap may be accessed in diFreeSpecial() as rcu_core() asynchronously frees it via jfs_free_node(). The fix ensures sbi->ipimap is not initializ...

CVE-2021-40438

CVE-2021-40438 is an SSRF flaw in Apache HTTP Server 2.4.x through older revisions where a crafted request URI path can cause mod_proxy to forward the request to an origin server chosen by the remote user. The issue affects Apache httpd 2.4.48 and earlier; the CVSSv3.1 base score is 9.0 (CRITICAL...

CVE-2008-3723

The CVE-2008-3723 entry concerns a directory traversal vulnerability in PHPizabi 0.848b C1 HFP3. The flaw affects index.php where the id parameter in the admin.templates.edittemplate action can be exploited for reading arbitrary files by using patterns like .., a URL, or a full pathname. Affected...

CVE-2022-23092

The lib9p library used in FreeBSD operating systems contains an out-of-bounds write vulnerability due to a missing bounds check when unpacking RWALK messages . A malicious bhyve guest kernel can trigger this bug to overwrite memory in the bhyve(8) process, potentially leading to user-mode code ex...

CVE-2024-3863

Technical details about CVE-2024-3863 are not provided in the supplied documents. Public information is limited to the vulnerability description and affected products; monitor for updates from authoritative sources for affected versions, impact, and fixes.

CVE-2020-36774

The GNOME Glade application (specifically plugins/gtk+/glade-gtk-box.c ) is vulnerable to a denial of service (application crash) due to the mishandling of widget rebuilding for GladeGtkBox . This issue affects versions before 3.38.1 and 3.39.x before 3.40.0 . Technical documentation confirms tha...

CVE-2024-26626

The CVE-2024-26626 entry relates to the Linux kernel IP multicast forwarding path (net/ipv4/ipmr.c, function ip_mr_forward). A NULL pointer dereference during multicast packet forwarding could trigger a kernel panic; the issue has been resolved with a kernel patch. Connected sources enumerate the...

CVE-2021-47033

Technical details about CVE-2021-47033 are not provided in the supplied documents. The initial entry only mentions a Linux kernel fix for mt76/mt7615 DMA unmapping and provides no product/version/patch specifics. Monitor for updates.

CVE-2023-40100

CVE-2023-40100 affects Android via a memory corruption in the discovery_thread of Dns64Configuration.cpp caused by a use-after-free. This can lead to local elevation of privilege with no extra execution privileges required and no user interaction needed, per multiple sources. The vulnerability is...

CVE-2024-1553

Memory safety bugs exist in Firefox , Firefox ESR , and Thunderbird software. These vulnerabilities involve memory corruption and could potentially be exploited to execute arbitrary code with sufficient effort. Affected versions include Firefox < 123 , Firefox ESR < 115.8 , and Thunderbird

CVE-2022-23086

The FreeBSD Kernel is affected by a heap-based buffer overflow (out-of-bounds write) in the mpr , mps , and mpt drivers. The vulnerability exists because handlers for *_CFG_PAGE read/write ioctls allocate a buffer based on a caller-specified size but copy a fixed-size header into it. If the speci...

CVE-2023-52604

CVE-2023-52604 is a Linux kernel vulnerability affecting the JFS subsystem, specifically UBSAN: array-index-out-of-bounds in fs/jfs/jfs_dmap.c (dbAdjTree). Public writeups note an out-of-bounds access (index 196694 in an s8[1365] buffer) encountered during Syzkaller fuzzing, leading to a kernel p...