CVE-2024-27076

CVE-2024-27076 affects the Linux kernel in the media: imx: csc/scaler path. The root cause is a memory leak in v4l2_ctrl_handler: memory allocated in v4l2_ctrl_handler_init was not freed on release. The patch fixes this by freeing the allocated memory on release, mitigating a local-vector memory ...

CVE-2023-46967

Enhancesoft osTicket version 1.18.0 contains a Cross-Site Scripting (XSS) vulnerability within the sanitize function . This flaw allows a remote attacker to escalate privileges by submitting a crafted support ticket . While several sources confirm the existence of this vulnerability and its abili...

CVE-2010-3972

Summary (CVE-2010-3972): A heap-based buffer overflow in the FTP service of Microsoft IIS (ftpsvc.dll) on IIS 7.0/7.5 enables remote code execution or DoS via a crafted FTP command. Affects Microsoft IIS FTP Service; root cause is improper handling of Telnet IAC data in TELNET_STREAM_CONTEXT::OnS...

CVE-2024-26981

CVE-2024-26981 affects the Linux kernel nilfs2 implementation. The flaw is an out-of-bounds access in nilfs_set_de_type: the index into nilfs_type_by_mode is computed as (mode & S_IFMT) >> S_SHIFT, but the array size is defined as S_IFMT >> S_SHIFT, which can produce an OOB when mode ...

CVE-2022-34309

CVE-2022-34309 affects IBM CICS TX Standard and Advanced 11.1. The vulnerability arises from the use of weaker-than-expected cryptographic algorithms, which could allow an attacker to decrypt highly sensitive information. IBM’s advisories indicate that IBM CICS TX Standard and IBM CICS TX Advance...

CVE-2024-26961

CVE-2024-26961 affects the Linux kernel, related to mac802154_llsec_key_del freeing key resources outside the required RCU grace period. The issue can lead to a use-after-free when llsec_lookup_key() traverses the key list in parallel with a deletion. The provided connected documents describe the...

CVE-2024-27074

The CVE-2024-27074 entry concerns a Linux kernel memory leak in the media go7007 path. Specifically, in go7007_load_encoder the bounce object (go->boot_fw) is allocated but not deallocated, and is freed later via kfree(go) after the call chain saa7134_go7007_init -> go7007_boot_encoder -&gt...

CVE-2024-26966

In CVE-2024-26966, the Linux kernel clk driver for Qualcomm MMCC (mmcc-apq8084) fixed missing termination of frequency table arrays. The root cause was that frequency tables lacked a terminating empty element, risking out-of-bounds access when traversed by qcom_find_freq() or qcom_find_freq_floor...

CVE-2024-1672

Google Chrome and other Chromium-based browsers (including Microsoft Edge and Opera) are vulnerable to a Content Security Policy (CSP) bypass due to an inappropriate implementation. A remote attacker can exploit this by using a crafted HTML page to bypass security restrictions. The vulnerability ...

CVE-2024-27038

The CVE-2024-27038 issue is a NULL dereference in clk_core_get() during hw dereferencing of clk->core. A NULL hw is produced when __clk_get_hw() returns NULL, and clk_core_get() dereferences hw->core. The fix, described in the kernel patch and reflected in Astra Linux/IBM advisories, change...

CVE-2024-26974

CVE-2024-26974 affects the Linux kernel crypto/qat driver. A race during PCI AER error recovery could cause a use-after-free of the reset_data container used for completion notification after a device restart, triggering a KFENCE use-after-free notice. The fix alters memory lifetime: the containe...

CVE-2024-1673

CVE-2024-1673 affects Google Chrome/Chromium: a use-after-free in Accessibility in the renderer prior to 122.0.6261.57 can allow a remote attacker to potentially cause heap corruption via specific UI gestures. Affected product: Chromium/Chrome (Accessibility component) with root cause described a...

CVE-2025-26465

The CVE-2025-26465 issue affects OpenSSH when VerifyHostKeyDNS is enabled. A remote attacker could perform a MITM impersonation by abusing error-code handling during host-key verification, with success contingent on exhausting the client’s memory resources. Affected context is OpenSSH implementat...

CVE-2024-25850

The Netis WF2780 (version v2.1.40144 ) is susceptible to a command injection vulnerability via the wps_ap_ssid5g parameter. This flaw allows for the execution of arbitrary commands on the device. While the vulnerability is confirmed, the provided documents do not specify a patched version or a di...

CVE-2024-25065

Apache OFBiz (versions prior to 18.12.12 ) is vulnerable to a path traversal flaw caused by incorrect restrictions on the path to the restricted-access catalog. This vulnerability allows a remote attacker to bypass the authentication process and potentially access files and directories stored out...

CVE-2024-27078

CVE-2024-27078 affects the Linux kernel component media: v4l2-tpg . The issue is a resource leak in the tpg_alloc error paths where allocated resources were not always deallocated, leading to memleaks because tpg_free was only called when tpg_alloc returned 0. The patch ensures deallocation occur...

CVE-2017-0144

CVE-2017-0144 is the SMBv1 Remote Code Execution vulnerability in Windows SMB server (EternalBlue). Connected sources confirm exploitation activity (e.g., DLTMiner/WannaCry-era campaigns) and identification as a high-severity network-based RCE affecting multiple Windows editions. The root cause i...

CVE-2023-52620

CVE-2023-52620 – Linux kernel nf_tables timeout handling : The vulnerability stems from nf_tables in netfilter where timeout parameters for anonymous sets were not disallowed, even though they were never used from userspace. It is a local, low–severity issue per CVSSv3.1 (base 2.5) with potential...

CVE-2023-50379

The Apache Ambari management platform is vulnerable to a code injection flaw in versions prior to 2.7.8 . A Cluster Operator can exploit this vulnerability by manipulating requests to inject malicious code, potentially leading to root privileges over the cluster's main host and the execution of a...

CVE-2024-24478

Wireshark versions prior to 4.2.0 are vulnerable to a denial of service (DoS) attack. The issue resides in the BGP dissector within the packet-bgp.c file, specifically in the dissect_bgp_open function, where an integer overflow occurs while processing extended BGP parameter formats. This flaw can...

CVE-2022-34310

The CVE-2022-34310 issue affects IBM CICS TX Standard and Advanced 11.1, where weaker-than-expected cryptographic algorithms could allow an attacker to decrypt highly sensitive information. Public documents confirm affected products and versions (IBM CICS TX Standard and IBM CICS TX Advanced, 11....

CVE-2024-27044

The CVE CVE-2024-27044 affects the Linux kernel DRM/AMD display path. A NULL pointer dereference vulnerability occurs in dcn10_set_output_transfer_func() where the stream pointer is used before a NULL check, as reported in the patch note for drivers/gpu/drm/amd/amdgpu/../display/dc/hwss/dcn10/dcn...

CVE-2024-26989

CVE-2024-26989: Linux kernel vulnerability on arm64 hibernate (swsusp_save) caused by saving MEMBLOCK_NOMAP pages due to kernel_page_present logic mishandling when can_set_direct_map() is false. Connected docs confirm the root cause: changes to pfn_valid() logic; fix: drop the !can_set_direct_map...

CVE-2023-52650

CVE-2023-52650 affects the Linux kernel's drm/tegra subsystem (dsi). The vulnerability arises from a missing check for the return value of of_find_device_by_node(), risking a NULL pointer dereference. The issue has a formal fix in the kernel: add the check and return an error when of_find_device_...

CVE-2024-2611

This vulnerability affects Firefox versions prior to 124, Firefox ESR prior to 115.9, and Thunderbird prior to 115.9. The root cause is a missing delay when the pointer lock mechanism is utilized, which could allow a malicious webpage to deceive a user into granting permissions. No specific explo...

CVE-2023-52370

A stack overflow vulnerability exists in the network acceleration module of Huawei EMUI , an Android-based mobile operating system. The flaw is caused by a buffer copy operation that does not properly check the size of the input. Successful exploitation of this vulnerability may result in unautho...

CVE-2024-30203

In Emacs versions prior to 29.3 , the Gnus component incorrectly treats inline MIME contents as trusted. This vulnerability stems from the MIME protocol implementation's inclusion of functions from unverified and uncontrolled areas. Exploitation of this flaw could allow a perpetrator to induce a ...

CVE-2024-24479

A Buffer Overflow in Wireshark versions prior to 4.2.0 allows a remote attacker to cause a denial of service (DoS) . The vulnerability resides in the wsutil/to_str.c and format_fractional_part_nsecs components. Note that the vendor disputes this claim, stating that neither release 4.2.0 nor any o...

CVE-2022-1388

CVE-2022-1388 affects F5 BIG-IP iControl REST authentication. Affected: BIG-IP 16.1.x before 16.1.2.2; 15.1.x before 15.1.5.1; 14.1.x before 14.1.4.6; 13.1.x before 13.1.5; and all 12.1.x and 11.6.x. Root cause per CNVD/CISA: authentication bypass via iControl REST, enabling unauthenticated acces...

CVE-2024-27077

CVE-2024-27077 affects the Linux kernel via a memleak in media: v4l2-mem2mem, specifically in v4l2_m2m_register_entity where entity->name is allocated but not freed on subsequent error paths. The patch adds deallocation of entity->name in error-handling paths to prevent the leak. Public adv...

CVE-2024-12801

CVE-2024-12801 describes a Server-Side Request Forgery (SSRF) in SaxEventRecorder by QOS.CH logback up to 1.5.12 on the Java platform, enabling forging requests via compromised XML configuration via modification of the DOCTYPE declaration. The connected IBM Security Bulletin for this CVE lists af...

CVE-2024-27046

CVE-2024-27046 is a Linux kernel vulnerability affecting the nfp: flower path. The issue occurs when kmalloc_array() in nfp_fl_lag_do_work() returns NULL under memory pressure, which can lead to a NULL pointer dereference when accessing acti_netdevs. The accompanying patch adds a check for alloca...

CVE-2024-25974

The OpenOlat LMS by Frentix GmbH (versions 18.1.5 and lower ) is vulnerable to a stored Cross-Site Scripting (XSS) vulnerability within the Media Center . An authenticated user with no special privileges can upload a malicious SVG image containing an XSS payload. Once uploaded, this file can be s...

CVE-2023-52360

Huawei HarmonyOS EMUI version 12.0.0 is affected by a logic vulnerability within the baseband . Successful exploitation of this flaw may result in compromised system integrity . While the specific root cause mechanism is not detailed beyond the logic flaw description, the vulnerability is associa...

CVE-2024-36012

CVE-2024-36012 affects the Linux kernel Bluetooth stack (msft): slab-use-after-free in msft_do_close() when msft_data is freed in msft_unregister via hci_release_dev(). The fix ties msft_data lifetime to hdev and frees it in hci_release_dev(), preventing use-after-free in msft->filter_lock. Af...

CVE-2024-24795

The Apache HTTP Server is vulnerable to HTTP response splitting across multiple modules. An attacker capable of injecting malicious response headers into backend applications can exploit this flaw to perform HTTP desynchronization attacks . This issue specifically affects Ubuntu 14.04 LTS , as no...

CVE-2024-7701

CVE-2024-7701 concerns Percona Toolkit1 3.6.0, where use of a password hash with insufficient computational effort enables encryption brute-forcing. The available sources identify the affected component (percona-toolkit 3.6.0) and the general vulnerability class, but do not provide deeper root-ca...

CVE-2024-25730

The Hitron CODA-4582 and CODA-4589 wireless modems are vulnerable to a design flaw involving insufficient entropy in their default Pre-Shared Keys (PSKs). The devices generate these keys by concatenating a 5-digit hexadecimal value with the "Hitron" substring, limiting the total possibilities to ...

CVE-2024-24720

An information disclosure vulnerability exists in the Forgot password function of Innovaphone PBX versions prior to 14r1 . The flaw allows an attacker to enumerate whether a specific user exists on the system by observing discrepant information and different responses provided in the server's rep...

CVE-2021-40854

Product/affected: AnyDesk Desktop (Windows). Vulnerability: Local privilege escalation via the Open Chat Log feature, which can launch a privileged Notepad process to spawn other applications. Root cause: Privilege escalation path through a trusted UI component enabling elevated process creation....

CVE-2021-47006

The Linux kernel is vulnerable to a flaw in the breakpoint_handler() function within the arch/arm/kernel/hw_breakpoint.c module. The issue stems from an incorrect check of the return value, specifically where a previous commit failed to include a necessary check for the event->overflow_handler...

CVE-2024-27051

CVE-2024-27051 centers on the Linux kernel’s cpufreq/brcmstb-avs-cpufreq code. The underlying issue is that cpufreq_cpu_get could return NULL, risking a NULL dereference. The fix adds a check and returns 0 on error, as described in the advisory lines: “cpufreq_cpu_get may return NULL. To avoid NU...

CVE-2024-26969

In CVE-2024-26969, the Linux kernel clk: qcom: gcc-ipq8074 fix terminates frequency table arrays with an empty element to prevent out-of-bounds access when traversed by qcom_find_freq() or qcom_find_freq_floor(). The change adds the missing terminating entry to affected arrays. Impact described: ...

CVE-2023-41506

The Student Enrollment In PHP v1.0 system contains an arbitrary file upload vulnerability within the Update/Edit Student's Profile Picture (or Avatar) function. This flaw allows an attacker to upload a specially crafted PHP file , which can result in the execution of arbitrary code on the server....

CVE-2024-25198

Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble versions are affected by a use-after-free vulnerability in the amcl_node.cpp file. The root cause is an inappropriate pointer order during the execution of laser_scan_filter_.reset() and tf_listener_.reset(). To remediate this, it is...

CVE-2024-36011

CVE-2024-36011 affects the Linux kernel where the Bluetooth HCI code could dereference a NULL pointer in hci_le_big_sync_established_evt(). The vulnerability is local (per CVSS vector: AV:L, AC:L, PR:L, UI:N) with a MEDIUM base score of 5.5 and an ADMIN/availability impact of HIGH. The connected ...

CVE-2024-26958

CVE-2024-26958 is a Linux kernel vulnerability in the NFS direct write path that could cause use-after-free (refcount underflow) when completing nfs_direct_request twice in a row. A patch fixes the double-completion scenario; the CVSS 3.1 base score is 7.8 (High) with Local attack and High impact...

CVE-2024-27355

The phpseclib library (versions 1.x before 1.0.23, 2.x before 2.0.47, and 3.x before 3.0.36) is vulnerable to a denial of service (DoS) attack. The root cause is a deficiency in how the library processes the ASN.1 object identifier of a certificate; a crafted sub identifier can lead to excessive ...

CVE-2019-9511

CVE-2019-9511 is an HTTP/2 denial-of-service issue observed in multiple products where an attacker manipulates HTTP/2 window size and stream prioritization to force queuing of data in 1-byte chunks, potentially exhausting CPU/memory. Connected advisories confirm affected components include nginx ...

CVE-2024-27030

CVSS context: Local impact, high/critical data integrity risk when interrupts race. Affected component: octeontx2-af in the Linux kernel. Root cause: PF→AF interrupt vector and VF→AF vector registered to the same interrupt handler, enabling a race when two interrupts arrive on two CPUs simultaneo...