CVE-2026-15916

CVE-2026-15916 is a Missing Authorization vulnerability in the Drupal core Image module that allows forceful browsing, leading to information disclosure. The module does not sufficiently check access to image style derivatives when files are served via a file stream other than private://. The ris...

CVE-2025-1736

CVE-2025-1736 affects PHP 8.1.x before 8.1.32, 8.2.x before 8.2.28, 8.3.x before 8.3.19, and 8.4.x before 8.4.5. The issue is caused by insufficient validation of end-of-line characters in user-supplied headers, which may prevent certain headers from being sent or cause headers to be misinterpret...

CVE-2025-32395

CVE-2025-32395 affects Vite (frontend tooling for JavaScript). The vulnerability arises when a dev server is exposed to the network on Node/Bun (not Deno) and a request-target containing a # is processed, bypassing server.fs.deny due to req.url handling. Affected versions prior to 6.2.6, 6.1.5, 6...

CVE-2019-0232

CVE-2019-0232 affects Apache Tomcat CGI Servlet when enableCmdLineArguments is enabled, allowing remote code execution via crafted HTTP requests on Windows. Affected: Tomcat 7.0.0–7.0.93, 8.5.0–8.5.39, 9.0.0.M1–9.0.17. The vulnerability stems from how the CGI environment builds command-line param...

CVE-2008-4770

CVE-2008-4770 affects RealVNC VNC Viewer components (CMsgReader::readRect) and allows remote code execution via crafted RFB protocol data. Affected editions include VNC Free Edition 4.0–4.1.2, Enterprise E4.0–E4.4.2, and Personal P4.0–P4.4.2, with exploitation tied to encoding type handling in th...

CVE-2021-1789

The CVE-2021-1789 entry refers to a type-confusion vulnerability in WebKitGTK and WebKit prior to 2.30.6 that could allow remote attackers to execute arbitrary code by processing malicious web content. Connected advisories (Arch Linux ASA-202103-24/ASA-202103-25 and ALAS/ALPINE entries) confirm t...

CVE-2023-52455

Mode C: CVE-2023-52455 relates to the Linux kernel IOMMU handling where a 0-length IOVA region in the iommu-addresses property could lead to IOVA rbtree corruption and display IOMMU mapping failures when framebuffer is absent. The documented fix adds a kernel check to skip IOVA reservation when t...

CVE-2020-15075

OpenVPN Connect for macOS is affected: installer versions 3.2.6 and older may corrupt system files via symlinks in /tmp. Root cause described as improper access to /tmp symlinks enabling modification of critical files. Public documents describe impact as potential file corruption but do not provi...

CVE-2023-31122

CVE-2023-31122 is an out-of-bounds read vulnerability in Apache HTTP Server’s mod_macro affecting versions up to 2.4.57. Connected advisories (Debian, AlmaLinux, Amazon Linux, CIRCL sighting) confirm multiple distro advisories have issued patches and upgrades (e.g., Debian 2.4.59 fixes; AlmaLinux...

CVE-2020-14871

CVE-2020-14871 is a pre-authentication stack-based buffer overflow in the Solaris PAM library (parse_user_name) that can be triggered via SSH keyboard-interactive authentication. Affected: Oracle Solaris (versions including 10 and 11; some Solaris 9/11.0 configurations listed in sources). Root ca...

CVE-2018-16487

CVE-2018-16487 is a prototype pollution vulnerability in lodash versions below 4.17.11, where merge/mergeWith/defaultsDeep can modify Object.prototype. IBM-focused bulletins in the Connected Documents confirm this CVE is present in IBM-related advisories and list affected IBM products (e.g., IBM ...

CVE-2014-6287

The vulnerability CVE-2014-6287 affects Rejetto HTTP File Server (HFS) 2.3x prior to 2.3c. It stems from the findMacroMarker function in parserLib.pas, where a null-byte sequence (%00) in a search action allows remote attackers to execute arbitrary code. Public exploits and Metasploit modules exi...

CVE-2024-57889

CVE-2024-57889 is resolved in the Linux kernel via a patch to the pinctrl-mcp23s08 driver. The issue occurred when using MCP23xxx IO expanders to receive IRQs, where regmap locking (mutex) around regmap_update_bits_base was invoked from a context that held a spinlock in __setup_irq(), leading to ...

CVE-2020-1935

CVE-2020-1935 affects Apache Tomcat across multiple branches: 9.0.0.M1–9.0.30, 8.5.0–8.5.50, and 7.0.0–7.0.99. It stems from HTTP header parsing that can mishandle end-of-line and Transfer-Encoding, enabling HTTP Request Smuggling when Tomcat sits behind certain reverse proxies. Impact is informa...

CVE-2023-45802

CVE-2023-45802 describes a memory‑leak condition in HTTP/2 handling: when a client resets a stream, memory deallocation is deferred until connection close, allowing a connection to accumulate memory usage over time. Astra Linux security notes reproduce the issue description and cite a fix in Apac...

CVE-2024-57791

CVE-2024-57791 affects the Linux kernel net/smc component. The vulnerability arises when draining clc data: the length field in smc_clc_msg_hdr, sourced from the network, may be trusted and if it exceeds buflen in smc_clc_wait_msg, a deadloop can occur. The connected documents describe the patch ...

CVE-2024-5642

CVE-2024-5642 affects CPython 3.9 and earlier where CPython allows an empty list for SSLContext.set_npn_protocols(), an invalid value for the OpenSSL API. The underlying issue is a buffer over-read when NPN is used, related to CVE-2024-5535 (OpenSSL). The vulnerability is characterized as low sev...

CVE-2024-9468

CVE-2024-9468 is a memory corruption vulnerability in Palo Alto Networks PAN-OS that allows an unauthenticated attacker to crash PAN-OS via a crafted data-plane packet, causing a denial-of-service and maintenance-mode state. Affected: PAN-OS software (data plane handling). Root cause: memory corr...

CVE-2023-52436

CVE-2023-52436 affects the Linux kernel in the f2fs file system. The issue arises when setting an extended attribute (xattr) because the xattr list was not guaranteed to be zeroed in unused space; the fix explicitly terminates the xattr list to avoid relying on zeroed unused space. The descriptio...

CVE-2024-45700

CVE-2024-45700 affects Zabbix servers with DoS via uncontrolled resource exhaustion: specially crafted requests trigger excessive memory allocation and CPU-intensive decompression, leading to service crash. Connected advisories show distro-specific fixes: Debian 11 packages updated to 1:5.0.46+df...

CVE-2024-56681

CVE-2024-56681 : In the Linux kernel, the bcm crypto driver’s ahash_hmac_init path can return success even if the underlying ahash_init call fails (e.g., -ENOMEM). This describes a failure to propagate initialization errors from ahash_init, potentially leaving the HMAC/AHASH state inconsistently ...

CVE-2021-4104

CVE-2021-4104 affects JMSAppender in Log4j 1.2 when it is explicitly configured to use JMSAppender. A deserialization of untrusted data can occur if an attacker can write Log4j configuration and supply TopicBindingName and TopicConnectionFactoryBindingName, causing JMSAppender to perform JNDI req...

CVE-2021-40449

CVE-2021-40449 is a Win32k use-after-free local privilege escalation in GreResetDCInternal. The vulnerability arises when a user‑mode callback hook on the driver’s PDEV path (DrvEnablePDEV) can trigger a subsequent ResetDC call, freeing the original device context and causing a kernel‑mode use‑af...

CVE-2024-45817

The CVE-2024-45817 entry concerns the Xen hypervisor on x86, where deadlock can occur in vlapic_error() when handling errors from the APIC status ring. The description states that error conditions are reported in a status register and that the OS may receive an interrupt for new errors; configuri...

CVE-2020-3153

Cisco AnyConnect Secure Mobility Client for Windows is affected by CVE-2020-3153: an attacker with valid Windows credentials can exploit the installer IPC path handling to copy files to system directories with SYSTEM privileges, enabling privilege escalation (and DLL hijacking) via vpndownloader....

CVE-2025-29787

CVE-2025-29787 (zip crate) : In affected versions (1.3.0 up to before 2.3.0), the archive extraction path validation is bypassed for earlier symbolic links, allowing a crafted archive to overwrite arbitrary files when extracted. Impact includes potential overwrite of critical files and possible c...

CVE-2025-31115

The CVE-2025-31115 affects XZ Utils’ liblzma multithreaded .xz decoder (lzma_stream_decoder_mt) in versions 5.3.3alpha through 5.8.0. The issue can cause a crash with heap-use-after-free and writes to memory based on a NULL pointer plus an offset, impacting applications/libraries that invoke the ...

CVE-2006-4924

OpenSSH sshd (OpenSSH) vulnerable when using SSH protocol 1; specially crafted SSH1 packets with duplicate blocks can cause the sshd process to consume excessive CPU, enabling a denial of service. This affects OpenSSH versions prior to 4.4 and is linked to improper handling by the CRC compensatio...

CVE-2009-2198

CVE-2009-2198 affects Apple GarageBand prior to 5.1 on macOS. The issue stems from GarageBand reconfiguring Safari to accept all cookies regardless of domain, enabling easier tracking by remote servers. Documented impact is information disclosure via tracking; no explicit exploitation details are...

CVE-2022-26352

DotCMS ContentResource API (CVE-2022-26352) vulnerable to arbitrary file upload via POST /api/content in 3.0–22.02. An unsanitized filename in multipart form can cause directory traversal, saving files outside the intended storage. If anonymous content creation is enabled, an attacker could uploa...

CVE-2022-31107

CVE-2022-31107 is a Grafana OAuth account takeover vulnerability. It affects Grafana versions 5.3 through 9.0.3 and also 8.5.9, 8.4.10, and 8.3.10. A malicious user who can log in via a configured OAuth IdP can take over another Grafana user’s account if the attacker’s external user id and email ...

CVE-2024-56645

Technical details about CVE-2024-56645 are not provided in the supplied documents. Please monitor for updates from official advisories and vendor pages for affected products, impact, and mitigations.

CVE-2021-27765

The CVE-2021-27765 entry relates to BigFix components packaged with InstallShield. Concrete details from connected documents show that BigFix Server API installer (and related BigFix Console/Client installers) use InstallShield and are affected by CVE-2021-41526, which involves InstallScript acti...

CVE-2021-40539

CVE-2021-40539 affects Zoho ManageEngine ADSelfService Plus (6100-series and earlier) with a REST API authentication bypass that enables remote code execution. Public evidence shows active exploitation campaigns (GODZILLA webshell, NGLite backdoor, KdcSponge) and targeted activity reported by CIS...

CVE-2018-20062

CVE-2018-20062 affects ThinkPHP/NoneCMS with remote code execution via crafted filter parameter in s=index/\think\Request/input&filter=phpinfo&data=1. Public sources in connected docs identify vulnerable versions as ThinkPHP <= 5.0.23 (and 5.1.x

CVE-2019-2215

CVE-2019-2215 is a use-after-free in the Android binder driver (binder.c) that enables local privilege escalation from an app to the Linux kernel. The issue is local, with no user interaction required, and exploitation may lead to memory corruption, denial of service, or escalation per the cited ...

CVE-2026-50751

CVE-2026-50751 is a logic-flow weakness in certificate validation during the deprecated IKEv1 key exchange used by Check Point Remote Access VPN, Mobile Access, and Spark Firewall. The flaw allows an unauthenticated attacker to bypass user authentication and establish a VPN session without a vali...

CVE-2019-15752

CVE-2019-15752 affects Docker Desktop Community Edition prior to 2.1.0.1. A local attacker can escalate privileges by placing a Trojan horse docker-credential-wincred.exe in %PROGRAMDATA%\DockerDesktop\version-bin\ as a low-privilege user, then rely on an admin/service user authenticating with Do...

CVE-2017-9765

The affected software is Genivia gSOAP (2.7.x and 2.8.x) with versions before 2.8.48. The underlying issue is an integer overflow in the soap_get function, allowing remote attackers to execute arbitrary code or cause a denial of service via a large XML document (Devil’s Ivy). Public disclosures a...

CVE-2022-1096

CVE-2022-1096 — Chrome/Chromium-type confusion in V8 ; a type confusion in V8 prior to Chrome 99.0.4844.84 could allow a remote attacker to cause heap corruption on a crafted HTML page. Affected products are Chromium-based browsers (e.g., Google Chrome, Microsoft Edge). Root cause: type confusion...

CVE-2024-26593

CVE-2024-26593: In the Linux kernel, i2c: i801: Fix block process call transactions. The issue was that the driver did not reset the block buffer index a second time before reading the incoming data, per Intel datasheets, causing reading the wrong portion of the block buffer. The advisory notes t...

CVE-2026-41907

The CVE affects the uuid implementation used to create RFC9562 UUIDs. Prior to version 14.0.0, v3, v5, and v6 allow silent partial writes by accepting external output buffers without rejecting out-of-range writes (small buffers or large offsets), enabling potential corruption of caller-provided b...

CVE-2023-4911

CVE-2023-4911 is a buffer overflow in the GNU C Library ld.so when processing GLIBC_TUNABLES, enabling local privilege escalation via malicious GLIBC_TUNABLES values when launching binaries with SUID. Affected: glibc, with versions older than 2.38-6 (per CBLMARINER:34733) and older listings notin...

CVE-2022-40684

CVE-2022-40684 is an authentication bypass affecting Fortinet products: FortiOS (versions 7.2.0–7.2.1 and 7.0.0–7.0.6), FortiProxy (7.2.0 and 7.0.0–7.0.6), and FortiSwitchManager (7.2.0 and 7.0.0). The flaw enables an unauthenticated attacker to perform administrative interface operations via spe...

CVE-2020-9281

CVE-2020-9281 is an XSS in CKEditor’s HTML Data Processor that allows remote script execution via a crafted protected comment (CKEditor syntax cke_protected). Affected are CKEditor 4.0–before 4.14. IBM DOORS/DOORS Web Access bullets include this CVE and note remediation: upgrade to CKEditor 4.17....

CVE-2014-1812

CVE-2014-1812 affects the Group Policy Preferences password handling in Windows (Vista SP2, Server 2008 SP2/R2, Windows 7 SP1, 8/8.1, Server 2012), where passwords distributed via SYSVOL could be decrypted by an authenticated remote attacker, enabling privilege escalation. The issue is caused by ...

CVE-2022-3140

CVE-2022-3140 affects The Document Foundation LibreOffice: 7.4.x before 7.4.1 and 7.3.x before 7.3.6. Root cause is insufficient validation of the vnd.libreoffice.command URI scheme, which could be used to call internal macros with arbitrary arguments. When a user clicks the crafted link or a doc...

CVE-2021-21707

CVE-2021-21707 affects PHP 7.3.x < 7.3.33, 7.4.x < 7.4.26, and 8.0.x

CVE-2022-1040

CVE-2022-1040 is a remote code execution via an authentication bypass in Sophos Firewall. The vulnerability affects the User Portal and Webadmin and is exploitable against v18.5 MR3 and earlier . Public details in connected sources describe an authentication bypass that allows an attacker to gain...

CVE-2020-1147

CVE-2020-1147 affects the .NET Framework, SharePoint Server, and Visual Studio. The root cause is improper handling of XML input, specifically a failure to validate the source markup during deserialization, which can lead to remote code execution. The vulnerability is characterized by the ability...