CVE-2020-36785

CVE-2020-36785 concerns the Linux kernel media/atomisp subsystem. The vulnerability arises from a use-after-free in atomisp_alloc_css_stat_bufs(), where the s3a_buf is freed along with items from asd->s3a_stats, causing a double free and use-after-free condition. The initial entry indicates th...

CVE-2024-26482

An HTML injection vulnerability exists in the Edit Content Layout module of Kirby CMS v4.1.0 . While the reporter suggested that this could be used to inject malicious scripts, the vendor disputes this, stating that backend sanitization is in place to prevent script execution, even though certain...

CVE-2024-26283

This vulnerability affects Firefox for iOS versions

CVE-2023-42873

CVE-2023-42873 affects Apple platforms and is resolved via updated bounds checks that prevent arbitrary code execution with kernel privileges. The fixed versions include macOS Sonoma 14.1; tvOS 17.1; macOS Monterey 12.7.1; macOS Ventura 13.6.1; iOS 16.7.2 and 17.1; and iPadOS 16.7.2 and 17.1. The...

CVE-2024-0038

Summary of CVE-2024-0038: The issue lies in Android’s AccessibilityManagerService.java within the function injectInputEventToInputFilter, where a missing permission check enables arbitrary input event injection. This can lead to local escalation of privilege without additional execution privilege...

CVE-2023-42860

A permissions issue in macOS allows an application to modify protected parts of the file system due to incorrect authorization . This vulnerability is addressed in macOS Sonoma 14.1 , macOS Monterey 12.7.1 , and macOS Ventura 13.6.1 . While Apple's changelog specifies these versions as the fix, a...

CVE-2021-46995

CVE-2021-46995 affects the Linux kernel can: mcp251xfd driver. Root cause: in mcp251xfd_probe, converting to dev_err_probe() accidentally removed a return, causing an OOPs when devm_clk_get() fails and clk_get_rate() is called on the next line. Impact: local attacker requires privileges (per CVSS...

CVE-2019-20372

NGINX (on Amazon Linux 2) is affected by CVE-2019-20372 when configured with certain error_page settings, enabling HTTP request smuggling. The Amazon Linux 2 ALAS advisory ALAS2NGINX1-2023-004 confirms vulnerable 1.17.x/older configurations and provides patched packages: nginx 1.18.0 and related ...

CVE-2019-0220

CVE-2019-0220 affects Apache HTTP Server 2.4.0–2.4.38. The issue arises when the path component of a request URL contains multiple consecutive slashes; directives like LocationMatch and RewriteRule must account for duplicates in regular expressions because the server may collapse or mishandle the...

CVE-2024-0036

CVE-2024-0036 describes a logic error in startNextMatchingActivity within Android’s ActivityTaskManagerService.java that could bypass restrictions on starting activities from the background, enabling local privilege escalation without extra execution privileges and without user interaction. The v...

CVE-2020-1472

CVE-2020-1472 (Zerologon) is referenced in connected records as affecting Samba packages. Two advisories note affected versions and fixes: CVE-2020-1472 in Samba for versions < 4.18.3-1 (CBLMARINER:36991) and

CVE-2023-42942

CVE-2023-42942 concerns Apple platforms where a vulnerability arose from improper handling of symlinks. The issue could let a malicious app gain root privileges. Public advisories show fixes across multiple Apple OS versions: watchOS 10.1; macOS Sonoma 14.1; tvOS 17.1; iOS 16.7.2 and iPadOS 16.7....

CVE-2024-25851

The Netis WF2780 networking device, specifically version v2.1.40144 , is susceptible to a command injection vulnerability. The flaw exists within the cgitest.cgi endpoint, where the config_sequence parameter in other_para fails to properly neutralize special elements used in OS commands. This vul...

CVE-2024-1554

The fetch API and navigation incorrectly shared the same cache, as the cache key did not include the optional headers fetch may contain. Under the correct circumstances, an attacker may have been able to poison the local browser cache by priming it with a fetch response controlled by the addition...

CVE-2024-25469

A SQL Injection vulnerability exists in CRMEB crmeb_java versions v.1.3.4 and before . A remote attacker can exploit this by using the latitude and longitude parameters within the api/front/store/list component to obtain sensitive information and potentially gain unauthorized access to data. To m...

CVE-2023-40109

CVE-2023-40109 affects the Android USB configuration path: createFromParcel in UsbConfiguration.java. The issue enables a background activity launch via a permissions bypass, causing local privilege escalation with no extra execution privileges, requiring user interaction for exploitation. Report...

CVE-2021-46991

CVE-2021-46991 is a Linux kernel use-after-free in the i40e driver, where pf->cinst->lan_info is accessed after pf->cinst is freed during i40e_client_del_instance. The vulnerability arises because the code frees the object and then continues to access a member of it, leading to a potenti...

CVE-2014-0160

CVE-2014-0160 (Heartbleed) is an information-disclosure vulnerability in OpenSSL’s TLS/DTLS heartbeat implementation. Affected: OpenSSL 1.0.1 before 1.0.1g. Root cause: improper handling of the Heartbeat extension (d1_both.c, t1_lib.c) leading to a buffer over-read, enabling an attacker to read m...

CVE-2024-27396

CVE-2024-27396 affects the Linux kernel net/gtp code: a Use-After-Free in gtp_dellink during RCU traversal (hlist_for_each_entry_rcu) because the traversal isn’t inside the RCU read critical section. The fix replaces the traversal with hlist_for_each_entry_safe to ensure the key isn’t freed durin...

CVE-2023-42848

CVE-2023-42848 affects Apple media/image processing components across multiple platforms. The issue causes heap corruption when processing a maliciously crafted image, addressed by updated bounds checks and fixes in: watchOS 10.1, macOS Sonoma 14.1, tvOS 17.1, iOS 16.7.2 and 17.1, and iPadOS 16.7...

CVE-2024-53677

A flaw in the file upload logic of Apache Struts (versions 2.0.0 to before 6.4.0) allows an unauthenticated attacker to manipulate file upload parameters to enable path traversal . This can result in the upload of a malicious file, potentially leading to Remote Code Execution (RCE) . The vulnerab...

CVE-2023-52376

Huawei HarmonyOS and EMUI are affected by an information disclosure vulnerability in the Gallery module . An attacker can exploit this flaw to obtain sensitive information , potentially impacting service confidentiality. This vulnerability is associated with CWE-212 (Improper Removal of Sensitive...

CVE-2024-23944

A missing ACL check in the persistent watchers handling of Apache ZooKeeper allows an attacker to monitor child znodes. By attaching a persistent watcher (via the addWatch command) to a parent znode they already have access to, an attacker can observe the full path of znodes that trigger watch ev...

CVE-2023-52366

Huawei EMUI , an Android-based mobile operating system, is affected by an out-of-bounds read vulnerability in the Intelligent State Recognition (or smart activity recognition) module. The root cause is identified as a buffer copy without checking the size of the input (CWE-120). Successful exploi...

CVE-2024-25081

The Splinefont component in FontForge versions up to 20230101 is vulnerable to command injection due to a lack of sanitization when processing crafted filenames. An attacker can trigger this by opening a file with a malicious name that includes shell metacharacters, such as a semicolon (;), which...

CVE-2024-35915

CVE-2024-35915 affects the Linux kernel NFC/NCI subsystem. The issue is an uninitialized payload read in nci_rx_work() when a received packet has a zero-length payload, leading to potential uninitialized data exposure. The patch fixes the vulnerability by validating the payload size before invoki...

CVE-2024-26892

Technical details about CVE-2024-26892 are not provided in the given documents. Public information appears limited here; no vendor/product/fix specifics are available. Monitor vendor advisories for updates and patch status.

CVE-2024-0033

CVE-2024-0033 concerns Android’s ashmem-dev.cpp, where a heap buffer overflow may cause a missing seal. The effect is local elevation of privilege with no extra user interaction required, per the documents. The available sources consistently describe the issue’s presence in ashmem-dev.cpp and its...

CVE-2006-5051

A signal handler race condition exists in OpenSSH (specifically the sshd server) affecting versions before 4.4 (unless patched) and a regression in versions 8.5p1 through 9.7p1 . The flaw occurs when a client fails to authenticate within the LoginGraceTime (default 120 seconds), causing the SIGAL...

CVE-2024-4990

CVE-2024-4990 (Yii2

CVE-2024-30078

Technical details about CVE-2024-30078 are not publicly available in the provided documents. No specifics on affected driver, root cause, or remediation are present; monitor for updates from vendor/security advisories.

CVE-2023-42945

A permissions issue in macOS Sonoma allows an application to gain unauthorized access to Bluetooth . This vulnerability was addressed by implementing additional restrictions and is fixed in macOS Sonoma 14.1 . No specific details regarding the root cause, exploit vectors, or in-the-wild exploitat...

CVE-2020-1938

CVE-2020-1938 (Tomcat AJP vulnerability) : The issue affects Apache Tomcat where the AJP Connector, enabled by default in several legacy releases, could be reached through untrusted networks. An attacker could exploit the configured AJP path to read arbitrary files in the web application and pote...

CVE-2024-25247

The Niushop B2B2C V5 e-commerce system is vulnerable to a SQL Injection flaw in the /app/api/controller/Store.php component. The root cause is the improper neutralization of special elements, which allows attackers to execute arbitrary SQL commands by manipulating the latitude and longitude param...

CVE-2024-26865

CVE-2024-26865 involves a use-after-free in the Linux kernel’s RDS TCP path (reqsk_timer_handler) that can occur when a per-netns listener is created, a reqsk is formed, the process exits, and the netns is dismantled before the timer expires. The issue is fixed by a patch (commit 740ea3c4a0b2) wh...

CVE-2024-24401

Nagios XI version 2024R1.0.1 is vulnerable to an authenticated SQL injection via the /nagiosxi//config/monitoringwizard.php endpoint. This flaw allows a remote attacker to execute arbitrary SQL queries, leading to admin account creation and full remote code execution (RCE). The vulnerability has ...

CVE-2024-1557

Memory safety bugs present in Firefox 122. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox 123...

CVE-2024-53990

The CVE-2024-53990 issue affects the AsyncHttpClient (AHC) library where an auto-enabled CookieStore silently replaces cookies with the same name from the cookie jar. This can cause cookies from one user to be used in another user’s requests, creating potential unauthorized data exposure in multi...

CVE-2023-7245

The nodejs framework in OpenVPN Connect versions 3.0 through 3.4.3 (Windows) and 3.0 through 3.4.7 (macOS) is vulnerable to arbitrary code execution. The root cause is a misconfiguration that fails to neutralize instructions in dynamically executed code, allowing a local user to execute code with...

CVE-2023-7203

The Smart Forms WordPress plugin, in versions prior to 2.6.87 , is vulnerable to broken access control and Cross-Site Request Forgery (CSRF) . The root cause is a lack of authorization for various AJAX actions and missing CSRF checks, which allows users with roles as low as subscriber to perform ...

CVE-2024-25366

A Buffer Overflow vulnerability exists in mz-automation.de libiec61859 v.1.4.0 . A remote attacker can exploit the mmsServer_handleGetNameListRequest function within the mms_getnamelist_service component to cause a denial of service . To mitigate this risk, users of version 1.4.0 should consider ...

CVE-2024-12798

CVE-2024-12798 corresponds to an ACE vulnerability in JaninoEventEvaluator via QOS.CH logback-core, affecting Java applications that rely on logback-core configurations. The connected IBM Security Bulletin pages enumerate the CVE under IBM API Connect context and explicitly list CVE-2024-12798 am...

CVE-2024-25141

The apache_airflow_providers_mongo component in Apache Airflow is vulnerable to a trust management issue due to improper certificate validation . When SSL is enabled for the Mongo Hook , the default settings unexpectedly and undocumentedly include the allow_insecure option, which prevents certifi...

CVE-2024-25196

A buffer overflow vulnerability exists in the nav2_controller process of Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble versions. The flaw is triggered by providing a crafted .yaml file , which leads to a buffer overflow during processing. Practical consequences include potential...

CVE-2024-5921

CVE-2024-5921 : Palo Alto Networks GlobalProtect app suffers from insufficient certificate validation, allowing the client to connect to arbitrary servers. This can enable a local non-admin user or an attacker on the same subnet to install malicious root certificates and subsequently execute malw...

CVE-2024-25751

The Tenda AC9 v.3.0 dual-band wireless router, specifically running firmware version v.15.03.06.42_multi , is susceptible to a Stack Based Buffer Overflow vulnerability. The root cause is a failure to validate the size of buffer inputs when processing data via the fromSetSysTime function. A remot...

CVE-2020-24422

Adobe Creative Cloud Desktop Application (Windows) 5.2 and earlier, and 2.1 and earlier, is affected by an uncontrolled search path vulnerability that could allow arbitrary code execution in the context of the current user. Exploitation requires the user to open a malicious file. A patch is avail...

CVE-2024-25288

The SLIMS (Senayan Library Management Systems) 9 Bulian version v9.6.1 is vulnerable to SQL Injection via the pop-scope-vocabolary.php file. This vulnerability arises from the improper neutralization of special elements used in an SQL command, potentially allowing for exploitation. While no patch...

CVE-2024-26944

CVE-2024-26944 affects the Linux kernel, specifically a use-after-free in btrfs when handling device replacements during zone finish. The issue is a use-after-free in do_zone_finish() caused by dereferencing a freed btrfs_device in the mapping during the dev_replace workflow (btrfs_dev_replace_st...

CVE-2016-10708

OpenSSH sshd before 7.4 is vulnerable to a denial of service caused by a NULL pointer dereference when processing an out-of-sequence NEWKEYS message (kex.c/packet.c). This affects the OpenSSH server; exploitation leads to daemon crash as demonstrated by Honggfuzz. Affected products include OpenSS...