CVE-2024-27070

Summary (CVE-2024-27070): The Linux kernel f2fs subsystem is affected by a use-after-free in f2fs_filemap_fault. The root cause is that vmf->vma may be not alive after filemap_fault(), causing an invalid access to vmf->vma->vm_flags in trace_f2fs_filemap_fault. The fix is to keep vm_flag...

CVE-2021-47034

In the Linux kernel, the following vulnerability has been resolved: powerpc/64s: Fix pte update for kernel memory on radix When adding a PTE a ptesync is needed to order the update of the PTE with subsequent accesses otherwise a spurious fault may be raised. radixsetpteat does not do this for...

CVE-2024-35933

CVE-2024-35933 affects the Linux kernel Bluetooth btintel path. The root cause is a NULL pointer dereference in btintel_read_version when hci_cmd_sync_complete() is triggered and skb is NULL, leading to hdev->req_skb being NULL. The issue can enable local exploitation scenarios as described in...

CVE-2022-22693

Technical details for CVE-2022-22693 are not provided in the supplied documents; the connected ThreatPost item discusses CVE-2022-22963, not this CVE. Monitor for updates.

CVE-2024-22871

The Clojure programming language (versions 1.20 to 1.12.0-alpha5) contains a vulnerability related to the deserialization of untrusted data . An attacker can exploit the clojure.core$partial$fn__5920 function to trigger a denial of service (DoS) . This issue affects software using the org.clojure...

CVE-2024-26962

CVE-2024-26962 — Linux kernel (dm-raid/raid456 deadlock during reshape) Root cause: when a RAID-456 reshape is in progress, IO across the reshape position may wait for reshape progress. In the dm-raid path, certain states (read-only array, MD_RECOVERY_WAIT, MD_RECOVERY_FROZEN) caused reshape to f...

CVE-2024-26996

Summary: CVE-2024-26996 relates to a use-after-free in the Linux kernel USB gadget NCM implementation. When the NCM function is active and the usb0 interface is brought down, an error in usb_ep_enable() may cause in_ep/out_ep to remain disabled. During ncm_disable(), gether_disconnect() is not ca...

CVE-2024-25251

The code-projects Agro-School Management System version 1.0 is vulnerable to Incorrect Access Control (CWE-284). This flaw allows for potential unauthorized actions due to improper permission enforcement within the management system. The severity is rated as HIGH with a CVSS 3.1 score of 8.8 , in...

CVE-2024-50555

CVE-2024-50555 : Affected product is Elementor Website Builder (WordPress) up to version 3.29.0. The vulnerability is a Stored Cross-Site Scripting (XSS) flaw arising from improper input neutralization during web page generation. Multiple connected sources confirm the same issue and list the affe...

CVE-2024-4059

CVE-2024-4059 describes an out-of-bounds read in the V8 API used by Google Chrome/Chromium prior to 124.0.6367.78. The vulnerability enables a remote attacker to leak cross-site data via a crafted HTML page. Affected component is the Chromium-derived web browser stack (V8 API). The documented imp...

CVE-2015-3306

CVE-2015-3306 affects ProFTPD before patches for 1.3.5, via the mod_copy module. Unauthenticated attackers can use SITE CPFR/CPTO to copy files anywhere on the server and can read/write arbitrary files, enabling remote code execution and information disclosure. Public exploits and proofs (e.g., e...

CVE-2024-35082

The J2EEFAST v2.7.0 Java EE enterprise-class rapid development platform contains a SQL injection vulnerability. The root cause is a lack of external input SQL statement validation within the findPage function in SysOperLogMapper.xml . An attacker can exploit this flaw to execute unauthorized SQL ...

CVE-2025-26415

CVE-2025-26415 is listed in the Pixel Update Bulletin (April 2025) as an Elevation of Privilege affecting Google Assistant, with a Critical severity. The issue is tied to a logic/implementation flaw in the Google Assistant component, enabling local escalation of privilege without user interaction...

CVE-2023-47422

An access control issue in the /usr/sbin/httpd component of multiple Tenda products allows an attacker to bypass authentication on any endpoint by using a crafted URL . This vulnerability affects the following specific firmware versions: Tenda TX9 V1 V22.03.02.54 Tenda AX3 V3 V16.03.12.11 Tenda A...

CVE-2024-1552

CVE-2024-1552 involves incorrect code generation on 32-bit ARM devices, potentially causing undefined behavior. Public references show affected Mozilla products including Firefox (pre-123 and ESR 115.8, and Firefox ESR 115.8) and Thunderbird 115.8.x line, with multiple advisories (CentOS, Debian ...

CVE-2024-56145

Craft CMS is affected by CVE-2024-56145 due to a code execution vector triggered when php.ini register_argc_argv is enabled. Reports indicate an RCE vulnerability exists in affected versions, with remediation via upgrading to Craft CMS 3.9.14, 4.13.2, or 5.5.2. If upgrading is not possible, the r...

CVE-2024-27049

CVE-2024-27049 is a Linux kernel issue affecting the wifi/mt76 driver for MT7925e. The root cause is a use-after-free in the shared IRQ handling (free_irq) when a device is deregistered. A patch set around the commit “[PATCH] Debug shared irqs” adds a test to ensure the shared IRQ handler won’t a...

CVE-2022-28615

CVE-2022-28615 affects Apache HTTP Server 2.4.53 and earlier, where a read beyond bounds can occur in ap_strcmp_match() when given a very large input buffer. The issue may affect third‑party modules or lua scripts that call this function. Advisories in connected documents reference an official fi...

CVE-2024-26968

CVE-2024-26968 relates to the Linux kernel’s clock driver for Qualcomm IPQ9574 (clk: qcom: gcc-ipq9574). The issue is that frequency table arrays were not properly terminated with an empty element, which could lead to an out-of-bounds access when traversed by functions such as qcom_find_freq() or...

CVE-2024-24788

A malformed DNS message in response to a query can cause the Lookup functions to get stuck in an infinite loop , potentially leading to a Denial of Service. This vulnerability is identified with CWE-835 (Loop with Unreachable Exit Condition). While specific software versions are not detailed in t...

CVE-2024-27071

CVE-2024-27071 affects the Linux kernel backlight hx8357 driver. The root cause was a missing NULL check for ik pins in hx8357_probe(), which could lead to a NULL pointer dereference. The connected Astra Linux advisory confirms the issue is resolved in Linux kernel and cites the fix in hx8357_pro...

CVE-2024-27456

The rack-cors (Rack CORS Middleware) ruby gem (version 2.0.1 ) is affected by an insecure file permission flaw. The .rb files distributed with the gem are set to 0666 permissions by default, making them world-writable . This improper use of standard permissions allows users with low privileges to...

CVE-2024-12907

CVE-2024-12907 affects Kentico CMS 7, where a Reflected XSS can be triggered by manipulating a specific GET parameter sent to the /CMSMessages/AccessDenied.aspx endpoint. The description notes that Kentico 7 reached end of support in 2016, and Kentico 8 has been tested and does not contain this v...

CVE-2024-26995

The CVE-2024-26995 issue affects the Linux kernel USB Type-C controller (tcpdm) code path, specifically pd_set handling in usb: typec: tcpm. The root cause is an off-by-one error where nr_snk_pdo and nr_src_pdo are incremented one time too many, causing loop index misalignment during Power Negoti...

CVE-2025-23013

CVE-2025-23013 affects pam-u2f, a PAM module for U2F/U2F devices (e.g., YubiKey) used on Linux/macOS. The issue: pam-u2f does not properly handle PAM_IGNORE return values, allowing local privilege escalation or authentication bypass under certain configurations. Attack requires unprivileged acces...

CVE-2024-27042

Technical details about CVE-2024-27042 are not provided in the connected documents. No product/version specifics are disclosed here. Monitor for updates.

CVE-2024-27356

An arbitrary file download vulnerability exists in the administrator panel of GL.iNet microprogramming software due to the use of an unreliable search path during the export of logs. Attackers can exploit this flaw to download files, such as logs, and gain unauthorized access to protected informa...

CVE-2023-52649

CVE-2023-52649 refers to a Linux kernel issue where the DRM VKMS LUT reading could read beyond the LUT array when lut_index points to the last floor entry. The fix guards against the ceil LUT index reading past the end by using the floor LUT index value, preventing an out-of-bounds access. Public...

CVE-2024-27033

The CVE-2024-27033 issue affects the Linux kernel’s f2fs filesystem code. The root cause described in the sources is a panic when verify_blkaddr() could be triggered due to a fault injected into f2fs_is_valid_blkaddr(), prompting removal of an unnecessary f2fs_bug_on() call. The advisory notes th...

CVE-2024-27031

CVE-2024-27031 (Linux kernel) : The NFS read path (nfs_netfs_issue_read) locked with xa_lock while submitting pages for writeback, but did not disable interrupts during iteration, creating a deadlock risk if an interrupt runs and touches the xa_lock. The fix replaces manual iteration with xa_for_...

CVE-2024-26998

CVE-2024-26998 affects the Linux kernel serial subsystem, specifically the core path handling the circular buffer in the 8250 serial port code. The root cause is a mismatch between the buffer pointer state and head/tail positions during shutdown: the circular buffer is cleared (NULLified) under a...

CVE-2024-35083

The J2EEFAST enterprise-class rapid development platform (version 2.7.0 ) contains a SQL injection vulnerability. The root cause is a lack of validation for external input SQL statements within the findPage function located in the SysLoginInfoMapper.xml file. An attacker can exploit this flaw to ...

CVE-2024-36039

The PyMySQL pure-Python MySQL client library (versions through 1.1.0 ) is vulnerable to SQL injection when processing untrusted JSON input . The root cause is that the JSONHandler component fails to escape keys during the escape_dict process. This vulnerability could allow an attacker to gain una...

CVE-2024-52005

CVE-2024-52005 affects Git via ANSI escape sequence injections in the sideband channel. A PoC demonstrates exploitation; affected versions include pre-2.48.1, 2.47.3, 2.46.5, 2.45.4, and 2.44.3. Impacts include hiding/misrepresenting output, fake security prompts, social‑engineering payloads, and...

CVE-2024-27818

Apple fixed CVE-2024-27818 by addressing a memory-handling issue that could allow a local attacker to cause an app to terminate unexpectedly or execute arbitrary code. The vulnerability affects iOS 17.5, iPadOS 17.5, and macOS Sonoma 14.5; exploitation requires local access and user interaction. ...

CVE-2023-6584

The WP JobSearch WordPress plugin, in versions prior to 2.3.4 , contains an authentication bypass vulnerability. This flaw allows an attacker to log in as any user on the platform by only providing the target user's email address . To resolve this issue, users are recommended to update the plugin...

CVE-2024-54130

CVE-2024-54130 affects NASA’s ION-DTN BPv7 (BPv7) where receiving a bundle with Destination EID dtn:none on version 4.1.3 triggers a segmentation fault, causing the node to become unresponsive to incoming bundles and resulting in a Denial of Service (DoS). The issue is documented as fixed in vers...

CVE-2024-26975

CVE-2024-26975 affects the Linux kernel powercap/intel_rapl MMIO RAPL path. A NULL pointer dereference occurs when probing intel_rapl on platforms whose CPU ID is not in intel_rapl_common’s model list, because defaults_msr may be uninitialized after the cited commit. The fix adds a sanity check t...

CVE-2024-27447

The pretix platform, in versions prior to 2024.1.1 , is vulnerable to Improper Input Validation (CWE-20). The root cause is the inadequate validation of files uploaded by users. This flaw could allow an attacker to upload malicious files and achieve arbitrary code execution . While the severity i...

CVE-2018-1283

In Apache httpd (mod_session) versions 2.4.0–2.4.29, when SessionEnv forwarding is enabled to CGI applications, a remote attacker can influence their content by sending a crafted Session header. This arises from mod_session forwarding data using the HTTP_SESSION variable name, which overlaps with...

CVE-2020-28026

Exim 4 before 4.94.2 contains a vulnerability (CVE-2020-28026) described as Improper Neutralization of Line Delimiters in DSN contexts. In non-default configurations using DSN, ORCPT= can insert a newline into a spool header file, enabling unauthenticated remote attackers to execute arbitrary com...

CVE-2024-23320

Apache DolphinScheduler is vulnerable to an Improper Input Validation vulnerability in versions prior to 3.2.1 . An authenticated user can execute arbitrary, unsandboxed JavaScript on the server by submitting crafted input. Specifically, the vulnerability stems from missing validation in the gene...

CVE-2024-22543

A privilege escalation vulnerability exists in the Linksys Router E1700 running firmware version 1.0.04 (build 3) . Authenticated attackers can exploit this flaw by sending a crafted GET request to the /goform/ URI or by utilizing the ExportSettings function. The impact allows for unauthorized pr...

CVE-2025-62813

CVE-2025-62813 corresponds to a vulnerability in LZ4 processing of untrusted frames (CVE-2025-62813) that can cause a denial of service or other unspecified impact. Connected advisories show affected packages across Linux distributions: LZ4 (versions less than 1.9.4-2 on Amazon Linux 2/ALAS2 and ...

CVE-2024-24027

A SQL Injection vulnerability exists in Likeshop versions prior to 2.5.7 . The root cause is the improper neutralization of special elements used in an SQL command within the DistributionMemberLogic::getFansLists function. This flaw allows attackers to execute arbitrary SQL commands, potentially ...

CVE-2024-25579

CVE-2024-25579 is an OS command injection in ELECOM wireless LAN routers (notably WRC-1167GS2-B/H-B, WRC-2533GS2-B/W/V-B, WRC-X3200GST3-B, WRC-G01-W) that allows a network-adjacent attacker with administrative privileges to run arbitrary OS commands via a crafted request. Affected versions: WRC-1...

CVE-2023-27163

CVE-2023-27163 affects Request-Baskets versions up to 1.2.1. The issue is a Server-Side Request Forgery (SSRF) via the /api/baskets/{name} endpoint, where the forward_url parameter can direct requests to internal or restricted resources. Ambitious attackers can leverage this to access internal ne...

CVE-2024-28085

The wall utility in util-linux (versions up to 2.40) is vulnerable to a flaw where it fails to filter escape sequences received via argv command-line arguments. Because wall is often installed with setgid tty permissions, unprivileged local users can send these sequences to other users' terminals...

CVE-2024-23127

Autodesk CVE-2024-23127 affects AutoCAD via parsing MODEL/SLDPRT/SLDASM files, triggering a heap-based overflow in ODXSW_DLL.dll and libodxdll.dll. The vulnerability can allow a crash, data leakage of sensitive information, or arbitrary code execution in the current process. Exploitation context ...

CVE-2024-27068

CVE-2024-27068 – Linux kernel (Mediatek lvts_thermal): The vulnerability is a memory leak in an error path where, if devm_krealloc() fails, the efuse resource is leaked. The issue has been fixed by freeing the leaked efuse to prevent resource exhaustion. The CVE is described as a local-attack vec...