CVE-2017-0199

CVE-2017-0199 affects Microsoft Office client suites (Office 2007 SP3, 2010 SP2, 2013 SP1, 2016) and Windows platforms (Vista SP2, Server 2008 SP2, 7 SP1, 8.1). The vulnerability allows remote code execution via a crafted document, exploiting how Office components interact with the Windows API an...

CVE-2018-16550

CVE-2018-16550 affects TeamViewer 10.x–13.x. A remote attacker can bypass the brute‑force authentication protection by skipping the Cancel step, making it easier to determine the default 4‑digit PIN. The vulnerability is documented with a CVSS v3 base score of 9.8 (CRITICAL) and vector AV:N/AC:L/...

CVE-2024-25828

The cmseasy content management system (CMS), specifically version V7.7.7.9 , is vulnerable to an arbitrary file deletion vulnerability within the lib/admin/template_admin.php file. This security flaw is categorized as a Path Traversal (CWE-27) issue. The impact allows for the unauthorized deletio...

CVE-2024-27047

CVE-2024-27047 affects the Linux kernel: net: phy: fix phy_get_internal_delay accessing an empty array. The issue occurs when a driver calls phy_get_internal_delay without defining delay_values and rx-/tx-internal-delay-ps is 0 in device-tree, risking a NULL pointer dereference and kernel oops. A...

CVE-2021-3618

ALPACA (CVE-2021-3618) is an application-layer protocol content confusion attack affecting multiple assets (e.g., nginx, vsftpd, sendmail) where TLS servers configured for different protocols with compatible certificates can allow a MITM attacker to redirect subdomain traffic to another, potentia...

CVE-2024-5157

CVE-2024-5157 affects Google Chrome/Chromium: a use-after-free in the Scheduling component allows a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. The vulnerability is present in Chromium/GChromium pre-125.0.6422.76; exploitation could yield full code execut...

CVE-2024-22988

The ZKBio WDMS software (versions prior to 9.0.2 Build 20250526 , including specific mentions of v.8.0.5 ) is vulnerable to a design/logic flaw in the /files/backup/ component. An attacker can exploit this by downloading database backups because the filenames are based on a predictable timestamp ...

CVE-2023-42877

A security vulnerability in macOS allows an application to modify protected parts of the file system . This issue was addressed through improved checks and is fixed in macOS Sonoma 14.1 , macOS Monterey 12.7.1 , and macOS Ventura 13.6.1 . No specific exploit information or root cause details are ...

CVE-2024-23124

The CVE-2024-23124 issue affects Autodesk AutoCAD via ASMIMPORT228A.dll when parsing STP files, causing an Out-of-Bounds Write that can crash, corrupt data, or allow arbitrary code execution in the current process. Public sources (e.g., ZDI) describe this as a remote code execution vulnerability ...

CVE-2019-0708

CVE-2019-0708 (BlueKeep) is a remote code execution vulnerability in Windows Remote Desktop Services (RDP). Affected: Windows 7, Windows Server 2008 R2/2008 era deployments; vulnerable components include the RDP service. Root cause: use-after-free in RDP handling that enables unauthenticated, net...

CVE-2021-47044

In the Linux kernel, the following vulnerability has been resolved: sched/fair: Fix shift-out-of-bounds in loadbalance Syzbot reported a handful of occurrences where an sd-nrbalancefailed can grow to much higher values than one would expect. A successful loadbalance resets it to 0; a failed one...

CVE-2024-26967

The CVE-2024-26967 issue affects the Linux kernel’s clock driver for the Qualcomm camcc-sc8280xp (drivers/clk/qcom/camcc-sc8280xp). Root cause: frequency table arrays lacked terminating empty element, risking out-of-bounds access when traversed by functions such as qcom_find_freq() or qcom_find_f...

CVE-2023-42928

CVE-2023-42928 affects Apple iOS/iPadOS; root cause: impaired bounds checks; impact: an app may be able to gain elevated privileges; remediation: patch in iOS 17.1 and iPadOS 17.1.

CVE-2024-2193

CVE-2024-2193 is a Speculative Race Condition (SRC) vulnerability affecting modern CPU architectures that support speculative execution, such as those susceptible to Spectre V1 . An unauthenticated attacker can leverage race conditions to access speculative executable code paths, potentially lead...

CVE-2011-2523

CVE-2011-2523 affects vsftpd 2.3.4, where a compromised distribution contained a backdoor that, when a login uses a username including :), opens a root shell on TCP port 6200. Public PoCs and exploits (e.g., OS command injection/backdoor modules) demonstrate remote command execution via the backd...

CVE-2024-22393

Apache Answer (versions up to 1.2.1 ) is vulnerable to a Pixel Flood attack (CWE-434 ) caused by a lack of file type and dimension checks. An authenticated user can upload a small image (e.g., 5KB) with falsified EXIF metadata declaring massive dimensions (e.g., 64,250 x 64,250 pixels). When the ...

CVE-2024-25410

flusity-CMS version 2.33 is vulnerable to an Unrestricted Upload of File with Dangerous Type within the update_setting.php component. This vulnerability allows for the upload of files with dangerous types, which can lead to significant integrity impacts. Exploitation details are not provided in t...

CVE-2022-25377

Appwrite versions 0.5.0 through 0.12.x before 0.12.2 are vulnerable to a directory traversal vulnerability in the ACME-challenge endpoint . This flaw allows remote attackers to read arbitrary local files by using ../ sequences. The vulnerability specifically requires the existence of the APP_STOR...

CVE-2023-7165

The JetBackup WordPress plugin (versions prior to 2.0.9.9 ) is vulnerable to sensitive information exposure due to a lack of index files in certain configurations. This allows malicious actors with web server access to perform public directory listing and leak sensitive backup files . To remediat...

CVE-2024-27002

CVE-2024-27002 affects the Linux kernel mediatek clock controllers. Root cause: a mutual dependency between mt8183-mfgcfg and genpd during probing could deadlock with a runtime PM path. The fix: perform a runtime PM get on controllers during probe to ensure clk_register() does not acquire the gen...

CVE-2024-27455

The Bentley ALIM Web application is vulnerable to a security flaw where specific configuration settings can cause the exposure of a user's ALIM session token when attempting to download files. This issue affects Assetwise ALIM Web versions prior to 23.00.04.04 and Assetwise Information Integrity ...

CVE-2024-53862

CVE-2024-53862 affects Argo Workflows (Kubernetes) where, in --auth-mode=client, archived workflows could be retrieved with a fake token due to a missing auth check, and in --auth-mode=sso all archived workflows could be retrieved with a valid token. The vaulting component that should validate to...

CVE-2024-27010

CVE-2024-27010 is about a Linux kernel net/sched deadlock in mirred on classful egress qdiscs, fixed by introducing an owner field in the qdisc (preventing recursive locking). The connected Broadcom/Miracle/KOSS advisories include a note (AXSA:2025-9528/NASL) that Brocade Fabric OS before 10.0.0 ...

CVE-2024-27011

CVE-2024-27011 is a Linux kernel memleak fix in netfilter nf_tables. Root cause: a combination of delete element and delete set from the abort path could restore twice the refcount of a mapping when the transaction object is not used for element removal. The fix adds a check for inactive elements...

CVE-2024-25262

The TeX Live software distribution is affected by a heap buffer overflow in the ttfLoadHDMX:ttfdump function within the texlive-bin package (commit c515e). An attacker can exploit this vulnerability by providing a crafted TTF file , potentially causing the application to crash and resulting in a ...

CVE-2024-26352

flusity-CMS version v2.33 is vulnerable to a Cross-Site Request Forgery (CSRF) via the /core/tools/add_places.php component. This vulnerability allows an attacker to perform unauthorized requests on behalf of a user. To mitigate this risk, it is recommended to disable access to the affected compo...

CVE-2024-24309

The Survey TMA (ecomiz_survey_tma) module for PrestaShop , versions up to 2.0.0 by Ecomiz, contains a design/logic flaw allowing unauthenticated guests to download personal information without restriction. This vulnerability results in the exposure of sensitive information to unauthorized actors....

CVE-2023-6585

The WP JobSearch WordPress plugin, versions prior to 2.3.4 , is vulnerable to an arbitrary file upload flaw because it fails to validate uploaded files. This oversight allows unauthenticated attackers to upload malicious files, such as PHP scripts , to the server, which can lead to remote code ex...

CVE-2024-27392

The CVE-2024-27392 entry concerns the Linux kernel nvme subsystem. A double-free occurred in ns_update_nuse() where kfree() ran after nvme_identify_ns() failed, freeing nvme_id_ns twice and triggering KASAN. The root cause is freeing the struct after identify_ns failure; the fix is to skip kfree(...

CVE-2024-0855

The Spiffy Calendar WordPress plugin, in versions prior to 4.9.9 , contains a Broken Access Control vulnerability. The root cause is a failure to validate the event_author parameter, which allows any user to modify this field when creating an event. This can be used to deceive users or administra...

CVE-2024-27003

CVE-2024-27003 affects the Linux kernel clock framework. The issue arises when printing clk_state via debugfs without proper runtime PM synchronization, risking deadlock if a thread resuming a device also resumes in another thread. The fix removes the now-superfluous clk_pm_runtime_get/put calls ...

CVE-2024-22917

The Kashipara Dynamic Lab Management System (version V1.0 ) is susceptible to a SQL injection vulnerability. This flaw allows a remote attacker to execute arbitrary code by providing a specially crafted script. While the vulnerability is confirmed across multiple sources, there is currently no in...

CVE-2024-25770

The libming Flash (SWF) output library (version 0.4.8 ) contains a memory leak vulnerability located in the /libming/src/actioncompiler/listaction.c file. The root cause is the failure to free dynamically allocated heap memory, which can be exploited by an attacker to cause a denial of service . ...

CVE-2023-42115

Exim’s SMTP service (port 25) is affected by CVE-2023-42115: an AUTH-less out-of-bounds write that enables remote code execution via improper validation of user-supplied data, allowing code execution under the service account. The vulnerability details and impact are stated in multiple sources (E...

CVE-2024-26349

The flusity-CMS software, specifically version v2.33 , is vulnerable to a Cross-Site Request Forgery (CSRF) attack. The flaw exists in the /core/tools/delete_translation.php component, which can allow an attacker to perform unauthorized actions on behalf of a user without their knowledge or conse...

CVE-2024-24476

A buffer overflow in Wireshark versions prior to 4.2.0 allows a remote attacker to cause a denial of service . The vulnerability exists in the pan/addr_resolv.c file within the ws_manuf_lookup_str() function during size component handling. While the vendor disputes the impact, stating no releases...

CVE-2024-27045

Summary: CVE-2024-27045 affects the Linux kernel DRM AMD display path (amdgpu_dm). The vulnerability is a potential buffer overflow in dp_dsc_clock_en_read() caused by unsafe snprintf usage. The patch tightens the snprintf output limit from 30 to 10 bytes, mitigating overflow. The issue is tied t...

CVE-2024-25846

The Product Catalog (CSV, Excel) Import module (simpleimportproduct ) for PrestaShop , developed by MyPrestaModules, is vulnerable in versions

CVE-2024-25875

Enhavo CMS v0.13.1 is vulnerable to a Cross-Site Scripting (XSS) flaw within its Header module . The root cause is insufficient input validation in the Undertitle text field, which allows an attacker to inject and execute arbitrary web scripts or HTML via a crafted payload. This could potentially...

CVE-2024-26964

Mode C: CVE-2024-26964 is present in MiracleLinux advisories (AXSA-2024-8481:17) and is described as a Linux kernel USB (xhci) issue: kzalloc() null path could lead to crash in xhci_map_urb_for_dma. The MiracleLinux advisories for AXSA-2024-8481 list affected products and advise upgrading to Mira...

CVE-2022-23242

TeamViewer Linux versions before 15.28 fail to delete the connection password after a process crash, enabling remote reuse of the pre-crash password if an attacker knows the crash event and TeamViewer ID or has local authenticated access. This CVE is grounded in the NVD entry for CVE-2022-23242; ...

CVE-2024-26983

CVE-2024-26983 is a Linux kernel issue about freeing xbc memory in bootconfig. The root cause was memblock_free() being used during xbc_exit() when memory may have already been handed to the buddy allocator, causing use-after-free (UAF) on certain architectures (e.g., CONFIG_ARCH_KEEP_MEMBLOCK di...

CVE-2023-49114

A DLL hijacking vulnerability exists in Qognify VMS Client Viewer version 7.1 and higher . This flaw allows local users to execute arbitrary code and obtain higher privileges by strategically placing a malicious DLL, provided certain pre-conditions are met. While the underlying cause is an uncont...

CVE-2024-27444

The langchain_experimental (LangChain Experimental) component in LangChain before version 0.1.8 (specifically versions before 0.0.52) is vulnerable to arbitrary code execution. The root cause is that certain Python attributes—including ——import” , ——subclasses” , ——builtins” , ——globals” , ——geta...

CVE-2023-49034

ProjeQtOr version 11.0.2 is vulnerable to a Cross-Site Scripting (XSS) flaw. The root cause is the improper neutralization of input during web page generation within the checkvalidHtmlText function, specifically affecting the ack.php and security.php files. A remote attacker can leverage this by ...

CVE-2024-26542

A Cross Site Scripting (XSS) vulnerability exists in Bonitasoft, S.A (specifically versions prior to 7.14.8 , 7.15.7 , 8.0.3 , and 9.0.2 ). The flaw allows an attacker to execute arbitrary code by sending a crafted payload to the Groups Display name field. To mitigate this risk, users should upda...

CVE-2023-40477

CVE-2023-40477 affects WinRAR (Recovery Volume processing). The issue stems from insufficient validation of user-supplied data during recovery-volume handling, enabling a memory access past the end of an allocated buffer and potentially remote code execution in the context of the target process. ...

CVE-2024-53125

CVE-2024-53125 (Linux kernel BPF): A patch fixes an issue in bpf: sync_linked_regs() where subreg_def could be overwritten during range propagation, causing verifier rewrites when BPF_F_TEST_RND_HI32 is set. The patch ensures subreg_def is preserved, preventing incorrect hi32 handling and potenti...

CVE-2019-10098

The Apache HTTP Server versions 2.4.0 to 2.4.39 are vulnerable to an open redirect flaw in the mod_rewrite component. Specifically, redirects configured with mod_rewrite that are intended to be self-referential can be manipulated by encoded newlines , causing the server to redirect users to an un...

CVE-2024-26627

The Linux kernel contains a vulnerability in the scsi: core component where the scsi_host_busy() function is called while holding the host lock during the scsi_eh_wakeup() process. In scenarios involving multiple hardware queues (N) and significant queue depths (M), this can lead to excessive ite...