CVE-2021-31166

CVE-2021-31166 : A use-after-free in Microsoft’s HTTP Protocol Stack (http.sys) enables remote code execution. The issue occurs in http!UlpParseContentCoding: a local LIST_ENTRY is built and then moved into the Request structure without nulling the local list, leaving entries dangling and allowin...

CVE-2015-1635

CVE-2015-1635 (HTTP.sys RCE) affects Microsoft Windows HTTP.sys on Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold/R2. The vulnerability enables remote code execution via crafted HTTP requests, caused by improper parsing in HTTP.sys. Public references i...

CVE-2020-27708

Origin Client contains a privilege-escalation vulnerability that could allow a non-administrative user to obtain Administrator or System rights, enabling control of the system and actions reserved for high-privileged users. The CVE-2020-27708 entry is corroborated by multiple connected sources (N...

CVE-2025-20064

CVE-2025-20064 describes improper input validation in the UEFI FlashUcAcmSmm module for Intel reference platforms, enabling local privilege escalation and potential local code execution. The vulnerability requires a privileged system software adversary, with no user interaction, and is characteri...

CVE-2024-53197

CVE-2024-53197 is an Linux kernel vulnerability in the USB audio driver (ALSA usb-audio). A malformed USB device can report a bNumConfigurations value larger than the initial allocation in usb_get_configuration, enabling out-of-bounds accesses later (e.g., during usb_destroy_configuration). The i...

CVE-2019-9670

CVE-2019-9670 affects Synacor Zimbra Collaboration Suite (mailboxd) prior to 8.7.11p10, where Autodiscover/Autodiscover.xml processing is vulnerable to XML External Entity (XXE) injection. The root cause is XXE-safe processing not being enforced during XML parsing, enabling an attacker to retriev...

CVE-2024-57898

Technical details for CVE-2024-57898 are not provided in the supplied documents. Public information about affected products, impact, or fixes is unavailable here; monitor vendor advisories for updates.

CVE-2023-25747

CVE-2023-25747 concerns a use-after-free in Mozilla’s libaudio that specifically affected Firefox for Android. The underlying issue was mitigated by disabling the AAudio backend when running on Android API levels below 30. Affected software is Firefox for Android, with vulnerable versions cited a...

CVE-2021-3493

Summary: CVE-2021-3493 is a Linux kernel overlayfs privilege-escalation issue where overlayfs does not properly validate file capabilities against user namespaces, enabling local privilege escalation on systems using unprivileged user namespaces with Ubuntu overlay patches. The vulnerability is r...

CVE-2024-36465

CVE-2024-36465 affects Zabbix where a low-privilege regular user with API access can abuse an SQL injection in include/classes/api/CApiService.php via the groupBy parameter to execute arbitrary SQL commands. The underlying issue is improper handling of the groupBy input, enabling an attacker to c...

CVE-2024-26592

CVE-2024-26592 affects the Linux kernel ksmbd component. The vulnerability is a use-after-free (UAF) in ksmbd_tcp_new_connection() caused by a race between handling a new TCP connection and its disconnection, leading to a UAF on struct tcp_transport. Connected Astra/OSS docs confirm the issue and...

CVE-2018-4878

Adobe Flash Player vulnerability CVE-2018-4878 is a use-after-free in the DRM/Primetime-related code (DRMManager initialize) that could allow remote arbitrary code execution. Affected products are Flash Player before 28.0.0.161; exploitation in the wild was reported in early 2018. Exploitation of...

CVE-2022-22963

CVE-2022-22963 affects Spring Cloud Function: in versions 3.1.6, 3.2.2 and older unsupported releases, routing-expression using SpEL can be crafted by a user to trigger remote code execution and access local resources. The root cause is unsafe evaluation of SpEL within the HTTP request routing he...

CVE-2021-1732

CVE-2021-1732 is a Windows Win32k local privilege escalation vulnerability. The root cause is a flaw in how the WndExtra field is handled as an offset, enabling an out-of-bounds write that grants SYSTEM privileges. Public exploit activity exists in multiple GitHub repos that demonstrate a local p...

CVE-2020-3452

CVE-2020-3452 affects Cisco ASA Software and Cisco Firepower Threat Defense (FTD) web services. The issue is due to improper input validation of URLs in HTTP requests, enabling unauthenticated, remote attackers to perform directory traversal and read files from the web services filesystem (enable...

CVE-2024-57804

CVE-2024-57804 affects the Linux kernel SCSI mpi3mr driver (drivers/scsi/mpi3mr/mpi3mr_fw.c) via the SAS transport. When multiple PHYs are disabled/enabled quickly, persistent and current SAS IO unit/Expander config pages can become corrupted due to incorrect memory handling. The mitigation imple...

CVE-2017-9841

CVE-2017-9841 (PHPUnit) affects the Util/PHP/eval-stdin.php component of PHPUnit. The vulnerability allows remote code execution when an HTTP POST request starts with the string "<?php" (or with a leading '

CVE-2025-23419

CVE-2025-23419 affects nginx where multiple server blocks share an IP/port and an attacker can reuse TLS session tickets or the SSL session cache to bypass client certificate authentication on the default server. The issue stems from how session resumption is handled when the default server perfo...

CVE-2023-52602

CVE-2023-52602: In the Linux kernel, the JFS slab-out-of-bounds Read vulnerability occurs while searching the current page in the sorted entry table during dtSearch, leading to an out-of-bounds access. The issue was fixed by adding a bound check. The advisory notes that the return code was set to...

CVE-2020-8515

CVE-2020-8515 affects DrayTek Vigor2960, Vigor3900 and Vigor300B devices (various Beta firmware versions) via the cgi-bin/mainfunction.cgi endpoint. The root cause is unsafely processed shell metacharacters in POST requests, enabling remote code execution with root privileges without authenticati...

CVE-2022-41082

CVE-2022-41082 is the RCE component of Microsoft Exchange’s ProxyNotShell chain. It relies on a deserialization gadget in the PSRP backend that an authenticated attacker can reach after exploiting CVE-2022-41040 SSRF. Successful exploitation yields code execution as NT AUTHORITY\SYSTEM on vulnera...

CVE-2021-30661

CVE-2021-30661 is a use-after-free vulnerability in WebKit Storage that could lead to arbitrary code execution when processing malicious web content. Affected: WebKit/WebKitGTK/WebKit Storage components on Apple platforms (Safari/WebKit on macOS/iOS/iPadOS, and WebKitGTK implementations) as descr...

CVE-2024-42325

CVE-2024-42325 affects Zabbix: the API method user.get may disclose information by returning all users who share a group with the caller, including media and login attempts. The connected sources confirm this disclosure vector and map it to multiple vendor advisories. Publicly documented mitigati...

CVE-2026-35273

CVE-2026-35273 is a remote, unauthenticated RCE in Oracle PeopleSoft Enterprise PeopleTools Updates Environment Management (PSEMHUB) affecting PeopleTools 8.61 and 8.62. Vendor advisories describe the flaw as a high-severity, network-exposed vulnerability with CVSS v3.1 score 9.8. Exploitation ha...

CVE-2022-24521

CVE-2022-24521 is a Windows Windows Common Log File System Driver Privilege Escalation vulnerability. The CVE entry reports an elevation-of-privilege flaw in the CLFS driver; CVSS scores shown include a 2.0/2.0 base (MEDIUM) on NVD and a 3.1-based HIGH score from Microsoft, both indicating local ...

CVE-2020-25719

CVE-2020-25719 affects Samba AD DC and stems from how Kerberos name-based authentication handles PAC/SID data, potentially enabling domain-wide compromise if the PAC/SIDs are not strictly enforced. The description in connected documents reiterates that the flaw could allow attackers to confuse wh...

CVE-2016-5387

CVE-2016-5387 affects Apache httpd prior to 2.4.25, where RFC 3875 compliance allows untrusted HTTP_PROXY data to influence outbound proxy selection via a crafted Proxy header (the httpoxy issue). Public docs indicate the issue arises from the HTTP_PROXY environment variable being exposed to appl...

CVE-2021-20260

CVE-2021-20260 affects the Foreman project, specifically the Datacenter plugin, where the API exposes the password to an authenticated local attacker with the view_hosts permission. This yields potential impacts to confidentiality, integrity, and availability. The NVD entry rates it as high (CVSS...

CVE-2020-11651

SaltStack Salt (CVE-2020-11651) vulnerable in Salt before 2019.2.4 and 3000 before 3000.2: the salt-master ClearFuncs class does not properly validate method calls, enabling a remote, unauthenticated user to access certain methods, retrieve user tokens from the salt-master, and potentially run ar...

CVE-2020-0646

CVE-2020-0646 is a remote code execution vulnerability in Microsoft .NET Framework that arises from improper input validation and is triggered by crafting XOML data sent to SharePoint Workflows. Multiple connected sources confirm exploitable behavior via .NET back-end and XOML injection, enabling...

CVE-2021-25264

CVE-2021-25264 pertains to Sophos Endpoint for macOS, where a local attacker could execute arbitrary code with administrator privileges. The available sources consistently describe a local-privilege escalation affecting multiple macOS endpoint builds, but the connected documents do not provide ro...

CVE-2024-49571

Summary: CVE-2024-49571 affects the Linux kernel net/smc component. The vulnerability arises when processing a proposalMsg from a remote client: the fields iparea_offset and ipv6_prefixes_cnt are not trusted, and if iparea_offset exceeds its max value, it may access a wrong address and crash. Imp...

CVE-2024-28735

Summary: CVE-2024-28735 affects Unit4 Financials by Coda prior to 2023Q4. An authenticated user can bypass access control to change any user’s password via a crafted request (PoC shows POST /coda/rest/session/password with fields including user, newPassword, and target username). Impact: password...

CVE-2020-11985

CVE-2020-11985 – Apache HTTP Server spoofing via proxying with mod_remoteip and mod_rewrite is documented in the initial CVE entry and corroborated by connected sources. Affected behavior: an attacker could spoof their IP address for logs and PHP scripts when proxying through mod_remoteip with ce...

CVE-2020-5135

CVE-2020-5135 is a buffer overflow in SonicOS affecting multiple releases (Gen 6: 6.5.4.7, 6.5.1.12, 6.0.5.3; SonicOSv: 6.5.4.v; Gen 7: 7.0.0.0). The vulnerability allows a remote attacker to cause Denial of Service and potentially execute arbitrary code by sending a malicious request to affected...

CVE-2024-57894

CVE-2024-57894 is rejected/not used per the Initial Description.

CVE-2021-22204

CVE-2021-22204 : ExifTool versions 7.44 and later are vulnerable to arbitrary code execution when parsing a malicious image due to improper neutralization of user data in the DjVu file format. Several connected sources confirm this remote code execution vector within ExifTool’s handling of DjVu c...

CVE-2020-15346

CVE-2020-15346 concerns Zyxel CloudCNM SecuManager 3.1.0–3.1.1. Public documentation in PT-2020-14379 identifies a vulnerability in the "/live/GLOBALS" API endpoint that exposes the CLOUDCNM key. There are no exploitation details in the provided sources. The affected software is Zyxel CloudCNM Se...

CVE-2025-21656

CVE-2025-21656 is a Linux kernel issue in topology printing (cpumap) where the vsnprintf-based formatting could mutate the cpumask during output, leading to inconsistent core visibility in the printed cpumap. The fix keeps the cpumask unchanged by caching it to a temporary variable before printin...

CVE-2021-36160

CVE-2021-36160 affects Apache HTTP Server mod_proxy_uwsgi. A crafted request URI-path can cause mod_proxy_uwsgi to read beyond allocated memory, triggering a DoS. The issue is reported for Apache httpd versions 2.4.30–2.4.48. Public sources in connected documents corroborate the impact as an out-...

CVE-2020-9484

CVE-2020-9484 is a deserialization flaw in Apache Tomcat that, under a specific FileStore PersistenceManager configuration and a crafted request, can trigger remote code execution. Affected are Tomcat versions 10.0.0-M1 to 10.0.0, 9.0.0.M1 to 9.0.41, 8.5.0 to 8.5.61, and 7.0.0 to 7.0.107 when the...

CVE-2019-10097

CVE-2019-10097 affects Apache HTTP Server 2.4.32–2.4.39 when mod_remoteip is configured to use a trusted intermediary proxy server via the PROXY protocol. A specially crafted PROXY header can trigger a stack buffer overflow or NULL pointer dereference, potentially crashing the server or impacting...

CVE-2022-29144

CVE-2022-29144 : Microsoft Edge (Chromium-based) has an Elevation of Privilege vulnerability. The NVD entry rates it as CVSS v3.1 base score 7.5 (HIGH) with vectors AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H. Exploitation involves no user privilege but requires user interaction, and the impact covers co...

CVE-2023-24535

CVE-2023-24535 is a vulnerability in the Go protobuf handling in google.golang.org/protobuf where parsing a text-format message containing a minus sign, whitespace, and no further input can cause a panic. The issue is described across multiple sources (OSV and NVD entries) with the same descripti...

CVE-2024-57917

CVE-2024-57917 : In the Linux kernel, the cpumask may be modified during printing of cpumap, causing mismatched lengths in kvasprintf-based formatting. The fix caches the cpumask to a temporary variable before cpumap_print_{list, cpumask}_to_buf() to keep it unchanged during printing. Impact is p...

CVE-2019-3568

CVE-2019-3568 is a buffer-overflow vulnerability in WhatsApp’s VOIP stack that enables remote code execution via a crafted sequence of RTCP packets targeted at a phone number. Affected apps/versions include: WhatsApp for Android pre‑2.19.134, WhatsApp Business for Android pre‑2.19.44, WhatsApp fo...

CVE-2017-10271

CVE-2017-10271 is an input validation/deserialization flaw in Oracle WebLogic Server (WLS Security) that enables unauthenticated remote code execution. Affected products/versions per entries include Oracle WebLogic Server 10.3.6.0.0, 12.1.3.0.0, 12.2.1.1.0, and 12.2.1.2.0. Public writeups and adv...

CVE-2022-28733

CVE-2022-28733 is a real grub2 vulnerability: an integer underflow in grub_net_recv_ip4_packets when processing IPv4 packets can cause a small rsm->total_len to wrap, potentially triggering a write past the end of a memory buffer. Public advisories (Debian DSA, Red Hat/NVD references) and vend...

CVE-2020-13671

CVE-2020-13671 affects Drupal Core. The issue arises from Drupal core not properly sanitizing certain uploaded filenames, causing files to be interpreted with an incorrect extension and served with the wrong MIME type or potentially executed as PHP under some hosting configurations. Affected vers...

CVE-2017-9805

CVE-2017-9805 affects the Apache Struts 2 REST plugin. The REST plugin uses an XStreamHandler with an XStream instance to deserialize XML without any type filtering, enabling remote code execution when processing crafted XML payloads. Affected versions are Struts 2.1.1–2.3.x before 2.3.34 and 2.5...