CVE-2024-27905

The Apache Aurora task scheduling framework is vulnerable to an Exposure of Sensitive Information to an Unauthorized Actor (CWE-200). An endpoint exposing internal details to unauthenticated users functions as a padding oracle , enabling an anonymous attacker to construct a valid authentication c...

CVE-2021-41773

CVE-2021-41773 is a path traversal vulnerability in Apache HTTP Server 2.4.49 affecting how path normalization maps URLs to files under Alias-like directives. The issue could allow access to files outside configured directories; if CGI scripts are enabled for those paths, remote code execution is...

CVE-2024-22873

Tencent Blueking CMDB versions v3.2.x through v3.9.x are vulnerable to a Server-Side Request Forgery (SSRF) in the event subscription function located at the /service/subscription.go endpoint. An attacker can exploit this by sending a crafted POST request to access internal requests. To mitigate ...

CVE-2015-9251

The jQuery library, in versions before 3.0.0 , is vulnerable to Cross-site Scripting (XSS) attacks. The flaw occurs when a cross-domain Ajax request is performed without specifying the dataType option, which can cause the browser to execute text/javascript responses. This vulnerability has been i...

CVE-2024-27497

The Linksys E2000 wireless router (Ver.1.0.06 build 1) contains an authentication bypass vulnerability caused by a flaw in the authentication procedure. Specifically, the position.js file improperly writes session keys, allowing an attacker to access files that call to this script and obtain acti...

CVE-2016-0777

CVE-2016-0777 pertains to an information leak and buffer overflow in OpenSSH client roaming (roaming_bytes reading memory) affecting OpenSSH 5.x, 6.x, and 7.x prior to 7.1p2. Exploitation would allow a remote server to obtain memory contents (e.g., private keys) via a roaming request. Connected d...

CVE-2012-1667

CVE-2012-1667 affects ISC BIND 9.x before patched releases (examples: 9.7.6-P1, 9.8.3-P1, 9.9.1-P1; and 9.4-ESV/9.6-ESV before listed P1s). The vulnerability arises from improper handling of resource records with a zero-length RDATA, enabling remote DNS servers to trigger a DoS (daemon crash or d...

CVE-2024-25202

The Phpgurukul User Registration & Login and User Management System 1.0 is vulnerable to a Cross Site Scripting (XSS) flaw in its search bar functionality. The vulnerability specifically affects files search-result.php , search-visitor.php , and potentially search-bar.php . This flaw allows an at...

CVE-2024-27048

CVE-2024-27048 : Linux kernel wifi (brcm80211) vulnerability where kzalloc() may return NULL for pmk_op, risking a NULL dereference. The fix returns -ENOMEM from brcmf_pmksa_v3_op() when kzalloc() fails for pmk_op, mitigating local-exploit risk. Connected advisories ( MiracleLinux AXSA and IBM li...

CVE-2019-10082

CVE-2019-10082 affects Apache HTTP Server 2.4.18–2.4.39, where fuzzed network input could cause read-after-free in http/2 session shutdown. Impact: remote, unauthenticated triggering memory faults in httpd workers, enabling potential DoS and other consequences. Connected sources indicate remediat...

CVE-2023-29180

CVE-2023-29180 is a NULL pointer dereference in Fortinet FortiOS and FortiProxy that can cause a denial of service via specially crafted HTTP requests. Affected: FortiOS 7.2.0–7.2.4, 7.0.0–7.0.11, 6.4.0–6.4.12, 6.2.0–6.2.14, 6.0.0–6.0.16; FortiProxy 7.2.0–7.2.3, 7.0.0–7.0.10, 2.0.0–2.0.12, 1.2.0–...

CVE-2024-26483

Kirby CMS is vulnerable to an unrestricted file upload vulnerability in the Profile Image module (specifically affecting user avatars). The root cause is the absence of validation for file types or extensions during the upload process. This allows authenticated Panel users to upload unexpected fi...

CVE-2024-35855

CVE-2024-35855 : Linux kernel issue in mlxsw spectrum_acl_tcam caused a local use-after-free during activity update. The bug happens when the rule activity update traverses configured rules and reads ventry->entry, which can be concurrently changed by the rehash path. The fix closes the race b...

CVE-2024-8068

CVE-2024-8068 affects Citrix Session Recording. According to Citrix’s security bulletin CTX691941, affected versions include Current Release prior to hotfix 2407 (24.5.200.8) and LTSR releases: 1912 LTSR before CU9 (19.12.9100.6), 2203 LTSR before CU5 (22.03.5100.11), and 2402 LTSR before CU1 (24...

CVE-2024-27354

A vulnerability exists in phpseclib versions 1.x before 1.0.23, 2.x before 2.0.47, and 3.x before 3.0.36. The root cause is insufficient validation of user data within the isPrime() and randomPrime() functions, specifically when processing large numbers. An attacker can exploit this by constructi...

CVE-2024-23126

CVE-2024-23126 affects Autodesk AutoCAD through CC5Dll.dll when parsing CATPART files, causing a stack-based overflow. The description and multiple sources indicate exploitation can crash the process, read sensitive data, or execute arbitrary code in the context of the current process. A ZDI advi...

CVE-2019-10092

The CVE-2019-10092 entry concerns Apache HTTP Server 2.4.0–2.4.39 with a limited cross-site scripting in the mod_proxy error page. The vulnerability lets an attacker craft a link on the error page that could mislead users by pointing to a page of the attacker’s choosing, but exploitation requires...

CVE-2017-9798

The Apache HTTP Server is vulnerable to a use-after-free issue, commonly referred to as Optionsbleed , affecting versions through 2.2.34 and 2.4.27 . A remote, unauthenticated attacker can send a specially crafted OPTIONS HTTP request to read secret data from the process memory. This vulnerabilit...

CVE-2022-2602

CVE-2022-2602 is a Linux kernel vulnerability in io_uring related to a use-after-free in the Unix garbage collection path. Multiple connected sources confirm a local, kernel-side issue (io_uring UAF) that can be exploited to crash the kernel and, in PoC scenarios, enable privilege escalation by r...

CVE-2024-26886

The Linux kernel contains a vulnerability in the af_bluetooth component where attempting to perform sock_lock on .recvmsg can cause a deadlock . To resolve this and avoid a Use-After-Free (UAF) , the kernel uses sk_receive_queue.lock on bt_sock_ioctl instead of sock_sock. Affected systems include...

CVE-2024-25723

The ZenML Server component in the ZenML machine learning package (Python) is vulnerable to remote privilege escalation due to an improper access control mechanism. The /api/v1/users/{user_name_or_id}/activate REST API endpoint allows unauthorized access if a valid username is provided along with ...

CVE-2022-12345

Technical details for CVE-2022-12345 are not provided in the supplied documents. No affected products, root cause, impact, or remediation are disclosed here. Monitor for official updates.

CVE-2024-25344

ITFlow.org versions prior to commit v.432488eca3998c5be6b6b9e8f8ba01f54bc12378 are vulnerable to a Cross-Site Scripting (XSS) flaw and a Cross-Site Request Forgery (CSRF) vulnerability. The XSS issue allows a remote attacker to execute arbitrary code and obtain sensitive information via several c...

CVE-2024-27064

CVE-2024-27064 : Linux kernel nf_tables memory leak when nft_netdev_register_hooks() fails. The fix moves nft_stats_alloc() to after successful registration, preventing leaks of nft_stats if registration aborts. Connected Astra Linux advisory mirrors this description for kernel 5.x series, confir...

CVE-2022-29860

CVE-2022-29860 is described in connected documents as a TLS-related vulnerability affecting Avaya switches (TLS reassembly heap overflow) with a very high CVSS (9.8). Affected devices include Avaya ERS series; remediation is tied to vendor/Extreme Networks updates and guidance (Avaya/Extreme Netw...

CVE-2018-17199

In Apache HTTP Server 2.4.x up to 2.4.37, the vulnerability CVE-2018-17199 is caused by mod_session_cookie: the session expiry time is checked before decoding the session, so expiry is ignored for mod_session_cookie sessions. This means session expiry may not be enforced for affected sessions. Th...

CVE-2024-23134

CVE-2024-23134 corresponds to a use-after-free in Autodesk AutoCAD triggered by parsing a malicious IGS file (tbb.dll). Multiple connected sources (ZDI advisory, Red Hat, NVD, CVE lists) confirm remote code execution potential when an affected IGS file is opened or viewed, with user interaction o...

CVE-2019-0217

This CVE affects Apache HTTP Server 2.4.x up to 2.4.38, where a race condition in mod_auth_digest could allow an authenticated user to act as another user and bypass access control. The issue is tied to running in threaded MPMs; the underlying cause is a race condition in authentication handling....

CVE-2024-24474

QEMU before 8.2.0 has an integer underflow, and resultant buffer overflow, via a TI command when an expected non-DMA transfer length is less than the length of the available FIFO data. This occurs in espdonodma in hw/scsi/esp.c because of an underflow of asynclen...

CVE-2025-22145

Carbon (PHP DateTime extension) has a vulnerability where unsanitized input passed to Carbon::setLocale could lead to arbitrary file include if a PHP file is uploaded in a folder that is includable. This affects users of the Carbon extension and is mitigated by fixes in Carbon release 3.8.4 and 2...

CVE-2024-4741

The OpenSSL library is vulnerable to a use after free condition when calling the SSL_free_buffers API function. The issue arises because the internal buffer used for processing incoming network records may be freed while still in use: either when a record header has been processed but the body is...

CVE-2024-27025

CVE-2024-27025 concerns the Linux kernel: a NULL return from nla_nest_start() could lead to NULL pointer dereference if not checked. The patch inserts a NULL check and sets errno consistent with other call sites, preventing a potential crash. Public references show the issue resolved in the kerne...

CVE-2025-13223

A Type Confusion vulnerability exists in the V8 engine of Google Chrome (prior to version 142.0.7444.175 ). This flaw stems from type mixing errors or type obfuscation , which can be exploited by a remote attacker to trigger heap corruption via a specially crafted HTML page. This vulnerability is...

CVE-2024-23094

Flusity-CMS v2.33 is vulnerable to a Cross-Site Request Forgery (CSRF) vulnerability affecting the component /cover/addons/info_media_gallery/action/edit_addon_post.php. This flaw allows for unauthorized actions via the specified component. As of the provided documentation, no patched version has...

CVE-2023-42116

Exim SMTP vulnerability CVE-2023-42116 is a stack-based buffer overflow in handling NTLM challenge data, allowing unauthenticated remote code execution. Affected software: Exim (MTA). Root cause: insufficient validation of user-supplied data length prior to copying into a fixed-length stack buffe...

CVE-2024-23133

CVE-2024-23133 affects Autodesk AutoCAD Desktop Software due to a vulnerability in parsing a malicious STP file (ASMDATAX228A.dll). The issue is described as a memory corruption via a write access violation, and, in combination with other vulnerabilities, could lead to code execution in the conte...

CVE-2024-23130

Summary (CVE-2024-23130): A memory corruption vulnerability arises when parsing malicious SLDASM or SLDPRT files in Autodesk applications via ODXSW_DLL.dll, potentially enabling code execution in the current process. The issue is described across multiple advisories (notably ZDI reports for Autod...

CVE-2024-27029

CVE-2024-27029 affects the Linux kernel’s DRM AMDGPU path: mmhub client id out-of-bounds access, caused by improper handling of cid 0x140. Reports across multiple advisories (SUSE live patch for SLE 15 SP6, OpenVAS/UUbuntu advisories) confirm this as a kernel vulnerability with high impact (local...

CVE-2023-49960

The Indo-Sol PROFINET-INspektor NT (version 2.4.0 and earlier ) is vulnerable to a path traversal vulnerability in the httpuploadd service of its firmware. A remote attacker can exploit this by sending a crafted filename parameter to the /upload endpoint, allowing them to write to arbitrary files...

CVE-2024-53980

RIOT OS vulnerability affecting CC2538 radio reception. A malicious actor can send a IEEE 802.15.4 packet with a spoofed length byte (and optionally spoofed FCS), causing the receiver to enter an endless loop. The root cause is the CRC position check: before PR #20998 the code used the full 8 bit...

CVE-2024-27359

Certain WithSecure products are vulnerable to a Denial of Service (DoS) because the engine scanner can enter an infinite loop when processing an archive file. This issue stems from insufficient input validation , which can be exploited by a remote attacker. Affected products include WithSecure Cl...

CVE-2025-27462

CVE-2025-27462 refers to the Windows PV drivers in XenServer/Citrix Hypervisor where several PV interfaces (XenCon s, XenIface, XenBus) expose no security descriptors, making them accessible to unprivileged users. The CVE is tied to the Windows PV drivers for XenServer 8.x; Linux guests are unaff...

CVE-2025-0518

CVE-2025-0518 affects FFmpeg 7.1 and is due to an unchecked return value causing an out-of-bounds read in libavfilter/af_pan.C. The issue is addressed by the FFmpeg commit b5b6391d64807578ab872dc58fb8aa621dcfc38a, which provides the fix. Discovery credited to Simcha Kosman. Public references in c...

CVE-2021-46958

CVE-2021-46958 : The Linux kernel fixes a race in btrfs where a transaction abort during a commit can race with an ongoing fsync and the kthread, causing use-after-free of the log_root_tree. The vulnerability can trigger IO errors, forced read-only state, and log/superblock write failures as show...

CVE-2024-42089

CVE-2024-42089 affects the Linux kernel’s ASoC: fsl-asoc-card driver. The root cause is that priv->pdev was assigned after it was used in fsl_asoc_card_audmux_init(), risking a NULL dereference because priv is zero-initialised. The fix moves the priv->pdev assignment to the start of the pro...

CVE-2024-23135

Autodesk AutoCAD is affected by a use-after-free in parsing SLDPRT files within ASMkern228A.dll, enabling code execution in the current process. Several sources describe CVE-2024-23135 as a remote code execution vulnerability exploitable via a malicious SLDPRT file; one advisory notes that user i...

CVE-2024-23137

Autodesk AutoCAD contains CVE-2024-23137: a maliciously crafted STP or SLDPRT file processed by ODXSW_DLL.dll can cause uninitialized memory access, enabling code execution in the current process. Multiple related advisories (including ZDI-24-745 and RH notices) describe this as a parsing/initial...

CVE-2024-23129

CVE-2024-23129 describes a memory corruption vulnerability in Autodesk AutoCAD when parsing certain 3D model files (3DM, STP, SLDASM) via opennurbs.dll. The root cause is a write access violation during file parsing, which, in the context of the current process, could lead to code execution. Publ...

CVE-2022-29861

CVE-2022-29861 is a HTTP header parsing stack overflow in Avaya switches (TLStorm 2.0). THN lists Avaya ERS3500/3600/4900/5900 series among affected devices; NCSC-2022-0321 confirms remote code execution potential on Avaya/Extreme-rebranded devices. Mitigation involves applying vendor updates; Ex...

CVE-2023-40577

CVE-2023-40577 affects Prometheus Prometheus Alertmanager. The issue allows an attacker with POST permission on the /api/v1/alerts endpoint to cause arbitrary JavaScript execution in users of Alertmanager (stored XSS). The vulnerability is tied to the Alertmanager component handling incoming aler...