CVE-2021-45105

Summary of CVE-2021-45105 (Log4j2) : Affected Log4j 2.x versions 2.0-alpha1 through 2.16.0 (except 2.12.3 and 2.3.1) are vulnerable to denial of service via uncontrolled recursion triggered by self-referential lookups in Thread Context Map data. The root cause is improper handling of self-referen...

CVE-2021-38003

CVE-2021-38003 affects Chromium/Chrome’s V8 engine before version 95.0.4638.69. Description and multiple advisories confirm an inappropriate implementation in V8 that could enable remote code execution via crafted HTML, with exploitation noted in the wild (per Arch Linux ASA notes). Affected comp...

CVE-2021-31979

CVE-2021-31979 is a Windows kernel elevation-of-privilege vulnerability that affects multiple kernel components, with confirmed in-the-wild activity. Affected areas include NTOS kernel, Win32k, and ntfs.sys, indicating local privilege escalation via kernel-level flaws. Public documentation in the...

CVE-2021-31955

CVE-2021-31955 is a Windows kernel information-disclosure vulnerability in ntoskrnl.exe related to the SuperFetch feature. By sending a SystemSuperfetchInformation query via NtQuerySystemInformation, an attacker can obtain the kernel address of the current process’s EPROCESS, which also contains ...

CVE-2020-2021

CVE-2020-2021 (PAN-OS SAML authentication bypass) : Affects PAN-OS where SAML is enabled and the Identity Provider certificate validation is disabled. The root cause is improper verification of SAML signatures, enabling an unauthenticated, network-accessible attacker to access protected resources...

CVE-2021-30762

CVE-2021-30762 is a WebKit/Apple WebKit use-after-free issue that affects this component in iOS/WebKit, caused by memory management flaws. The vulnerability could allow arbitrary code execution when processing malicious web content, with Apple noting active exploitation in the wild for related We...

CVE-2015-2590

CVE-2015-2590 is an unspecified vulnerability affecting Oracle Java SE (6u95, 7u80, 8u45) and Java SE Embedded (7u75, 8u33) with impact to confidentiality, integrity, and availability via unknown vectors in the Libraries component. Public details in the initial description are limited; connected ...

CVE-2008-3259

OpenSSH vulnerability CVE-2008-3259 affects OpenSSH before 5.1. On affected platforms, when X11UseLocalhost is disabled, SSHD sets SO_REUSEADDR which can allow local users to hijack the X11 forwarding port by binding to a single IP address (demonstrated on HP-UX). The provided description notes t...

CVE-2024-26924

The CVE describes a race in Linux kernel netfilter nft_set_pipapo where removal of a key could unmapped a different, non-deactivated element, leaving a stale element reachable and potentially causing a crash. The fix adds a check to ensure the fully matching key maps to the previously inactive el...

CVE-2022-20699

CVE-2022-20699 affects Cisco Small Business RV160/RV260/RV340/RV345 Series Routers. The available connected materials indicate a stack-based buffer overflow in the RV340 SSL VPN functionality, leading to unauthenticated remote code execution with root-level impact on the device. Metasploit also d...

CVE-2020-13927

Apache Airflow CVE-2020-13927: An authentication bypass existed in the Experimental API where unauthenticated requests could be processed by default in older Airflow versions. The issue was mitigated by changing the default from allowing all API requests to denying them by default starting with A...

CVE-2021-21975

CVE-2021-21975 (vROps SSRF) affects VMware vRealize Operations Manager API prior to 8.4. An attacker with network access can abuse SSRF via /casa/nodes/thumbprints to read internal resources and steal administrative credentials; when combined with CVE-2021-21983 (post-auth file write) this chain ...

CVE-2020-29583

CVE-2020-29583 (Zyxel hard-coded credentials) The Zyxel vulnerability concerns an undocumented user account, “zyfwp,” with an unchangeable password found in the firmware of multiple Zyxel devices. The account can grant admin access via SSH or the web interface. Affected devices include Zyxel USG/...

CVE-2019-11539

CVE-2019-11539 is a post-auth command injection vulnerability in Pulse Secure VPN appliances (Pulse Connect Secure and Pulse Policy Secure) that can be exploited by an authenticated attacker via the admin web interface to inject and execute commands. Connected sources confirm the flaw requires ad...

CVE-2019-0859

CVE-2019-0859 (Windows Win32k Privilege Escalation) : A local privilege escalation vulnerability in the Win32k component of Microsoft Windows arises from Win32k failing to properly handle objects in memory, enabling an attacker to run code in kernel mode. Several connected sources corroborate thi...

CVE-2021-46905

CVE-2021-46905 : Linux kernel vulnerability where a NULL-pointer dereference was introduced in net: hso during tty device unregistration after a minor was released. The issue arose because the serial device table could be accessed post-release of the minor by hso_serial_tty_unregister(), leading ...

CVE-2021-22600

CVE-2021-22600 is a local kernel vulnerability in the Linux packet migration path. A double-free in packet_set_ring() within net/packet/af_packet.c can be exploited by a local user via crafted syscalls, enabling either denial of service or privilege escalation. Connected sources confirm the under...

CVE-2021-44077

CVE-2021-44077 affects Zoho ManageEngine ServiceDesk Plus prior to 11306, ServiceDesk Plus MSP prior to 10530, and SupportCenter Plus prior to 11014. The issue enables unauthenticated remote code execution via /RestAPI servlet endpoints and ImportTechnicians in Struts configuration. Evidence in t...

CVE-2021-31199

CVE-2021-31199 is a Windows Elevation of Privilege vulnerability in the Microsoft Enhanced Cryptographic Provider. The CVE affects Windows components and is driven by local exploitation (local access required) with low privileges needed, and no user interaction, but yields high impact on confiden...

CVE-2020-3541

CVE-2020-3541 affects Cisco Webex on Windows (Webex Meetings Client/Desktop App/Teams). The root cause is unsafe logging of authentication requests, allowing an authenticated, local attacker to read log files in the application directory and access sensitive information. Impact is information dis...

CVE-2019-0193

CVE-2019-0193 affects Apache Solr via the DataImportHandler (DIH) module. The vulnerability arises because DIH can read a request parameter dataConfig containing a DIH configuration, which can include scripts, enabling code injection. The issue is mitigated by requiring enabling the Java system p...

CVE-2025-0107

CVE-2025-0107 – Palo Alto Networks Expedition OS command injection . The connected templates confirm an OS command injection in Palo Alto Networks Expedition that allows an unauthenticated attacker to execute arbitrary OS commands as the www-data user, leading to disclosure of usernames, cleartex...

CVE-2021-34448

CVE-2021-34448 is a memory corruption vulnerability in the Microsoft Windows Scripting Engine (IE/JavaScript). Exploitation can be remote via a crafted web page or email, enabling code execution at the logged-on user level. Public analyses reference exploitation in the wild and Microsoft Patch Tu...

CVE-2017-3881

CVE-2017-3881 is a Cisco IOS/IOS XE vulnerability in the Cluster Management Protocol (CMP) handling. Two factors enable exploitation: (1) CMP-specific Telnet options were not restricted to internal cluster communications and could be processed over any Telnet session; (2) malformed CMP-specific T...

CVE-2023-28782

Described vulnerability CVE-2023-28782 affects Gravity Forms WordPress plugin versions

CVE-2021-43818

CVE-2021-43818 affects python-lxml’s HTML Cleaner (lxml.html). Before 4.6.5, the HTML cleaner lets crafted script content pass through, including scripts in SVG data URLs, enabling potential XSS in security-relevant contexts. A fix is available in lxml 4.6.5; upgrade to receive the patch. The con...

CVE-2014-3153

The CVE-2014-3153 issue affects the Linux kernel futex_requeue path (kernel/futex.c) through version 3.14.5. A local unprivileged user can exploit FUTEX_REQUEUE with two identical futex addresses to gain privileges or modify waiter state, causing potential privilege escalation and memory impact. ...

CVE-2023-41080

CVE-2023-41080 is an Open Redirect vulnerability in Apache Tomcat’s ROOT web application when using FORM authentication. Affected are Tomcat versions across multiple lines: 8.5.0–8.5.92, 9.0.0-M1–9.0.79, 10.0.0-M1–10.0.12, and 11.0.0-M1–11.0.0-M10. The root cause is improper handling of redirect ...

CVE-2023-2745

CVE-2023-2745 — WordPress Core

CVE-2021-43890

CVE-2021-43890 is a Windows AppX Installer spoofing vulnerability. An attacker could craft a malicious package to be opened by a user, leveraging the ms-appinstaller URI handler to spoof trusted UI and execute code at the user’s level after social engineering (phishing). Attacks have been associa...

CVE-2019-0585

CVE-2019-0585 is a remote code execution vulnerability in Microsoft Word/Office products caused by improper handling of objects in memory. Exploitation could occur via specially crafted Word files, potentially in contexts like email/preview panes, with the attacker gaining the same user rights as...

CVE-2014-0117

The vulnerability CVE-2014-0117 affects the Apache HTTP Server, specifically the mod_proxy behavior in the 2.4.x line prior to 2.4.10. When a reverse proxy is enabled, a remote attacker can craft an HTTP Connection header to trigger a denial of service (child process crash). This is documented ac...

CVE-2020-12271

CVE-2020-12271 is a SQL injection vulnerability in Sophos XG Firewall SFOS against the backend PostgreSQL database. Affected products include SFOS versions on Sophos XG Firewalls (configured with Administration HTTPS or WAN-exposed User Portal). The root cause is improper validation of user-suppl...

CVE-2016-3309

CVE-2016-3309 is a Windows kernel Win32k elevation-of-privilege vulnerability. A local attacker could gain SYSTEM privileges by exploiting a pool/handle-management issue in win32k, enabling code execution in kernel mode. Connected sources document an exploit (win32kfull!bFill pool overflow) and i...

CVE-2024-26594

In Astra Linux advisories for ksmbd, the Linux kernel vulnerability CVE-2024-26594 is described as: ksmbd validates the mechanism token during session setup and reports an error when the token is invalid. The bulletin confirms the issue is resolved, but it does not specify a patch version or affe...

CVE-2018-1301

CVE-2018-1301 affects the Apache HTTP Server (httpd) prior to 2.4.30, caused by an out-of-bounds access after a size limit is reached when reading the HTTP header. Impact described as a crash (low risk for normal usage). Affected component is httpd’s HTTP header parsing; root cause is an out-of-b...

CVE-2023-42859

CVE-2023-42859 affects macOS where an app may modify protected parts of the file system. Root cause details aren’t explicitly provided beyond this risk. The issue is fixed in macOS Sonoma 14.1 and also addressed in macOS Monterey 12.7.1 and macOS Ventura 13.6.1. CVSS context among sources indicat...

CVE-2020-1380

CVE-2020-1380 : Internet Explorer Scripting Engine memory corruption vulnerability in which memory objects mishandled by the scripting engine (jscript9.dll) can allow remote code execution in the context of the current user..attack vector: web-based via crafted websites or hosting IE rendering en...

CVE-2023-52454

CVE-2023-52454 affects the Linux kernel nvmet-tcp path. A host sending an H2CData command with an invalid DATAL can cause a kernel panic or a NULL pointer dereference in nvmet_tcp_build_pdu_iovec(), as evidenced by the crash trace in nvmet_tcp_io_work. The fix raises a fatal error when DATAL is n...

CVE-2022-42898

CVE-2022-42898 concerns integer overflow in PAC parsing within MIT Kerberos 5 (krb5) via the krb5_pac_parse function in lib/krb5/krb/pac.c. Affected: krb5 before 1.19.4 and 1.20.x before 1.20.1; 32-bit platforms may trigger remote code execution in KDC, kadmind, or a GSS/Kerberos application serv...

CVE-2019-12989

CVE-2019-12989 affects Citrix SD-WAN 10.2.x prior to 10.2.3 and NetScaler SD-WAN 10.0.x prior to 10.0.8. An unauthenticated attacker can exploit an SQL injection caused by improper input validation in specific components, potentially leading to arbitrary SQL execution against the backend database...

CVE-2018-8581

CVE-2018-8581 is described as a Microsoft Exchange Server elevation of privilege vulnerability (PrivExchange). Connected documents include exploit/testing content showing a Maryland-style mailbox-Delegation approach to impersonate other users by manipulating inbox delegation, effectively enabling...

CVE-2018-13042

The CVE affects 1Password for Android (version 6.8) where two exported activities, OpenYoloDeleteActivity and OpenYoloRetrieveActivity, can be started by an external app, causing the 1Password UI to crash (Denial of Service). The vulnerability is tied to the exported components, which can be trig...

CVE-2023-21036

The CVE-2023-21036 issue affects Google Pixel devices' Markup tool (BitmapExport.java) where a logic error prevents proper truncation of image data after edits, potentially leaving remnants of the original image in cropped/edited PNGs. Public sources (NVD/NVD entry, CVE lists) describe a local, p...

CVE-2021-42237

CVE-2021-42237 – Sitecore XP is an insecure deserialization vulnerability affecting Sitecore Experience Platform 7.5 to 8.2 Update-7, enabling remote code execution without authentication. Concrete details across connected docs show vulnerable versions include Sitecore XP 7.5.x (7.5.0–7.5.2) and ...

CVE-2018-15982

CVE-2018-15982 is a use-after-free vulnerability in Adobe Flash Player (versions 31.0.0.153 and earlier, and 31.0.0.108 and earlier) that allows remote code execution when a memory reference is released but remains in a vector due to a faulty reference in the com.adobe.tvsdk.mediacore.metadata pa...

CVE-2021-44521

CVE-2021-44521 affects Apache Cassandra when enable_user_defined_functions: true, enable_scripted_user_defined_functions: true, and enable_user_defined_functions_threads: false. The documented unsafe configuration can allow an attacker with cluster-level permissions to create user-defined functio...

CVE-2017-9120

CVE-2017-9120 affects PHP 7.x through 7.1.5, due to an Integer overflow in mysqli_real_escape_string that can trigger a denial of service (buffer overflow and application crash). The connected documents confirm this root cause and impact across multiple advisories and listings (e.g., CVE-2017-912...

CVE-2013-1690

CVE-2013-1690 affects Mozilla Firefox prior to 22.0, Firefox ESR 17.x prior to 17.0.7, Thunderbird prior to 17.0.7, and Thunderbird ESR 17.x prior to 17.0.7. Root cause is improper handling of onreadystatechange events with page reload, enabling a crafted web page to cause a denial-of-service (cr...

CVE-2022-22587

CVE-2022-22587 is an Apple IOMobileFrameBuffer memory corruption vulnerability that could allow code execution with kernel privileges. The issue is cited as fixed in iOS 15.3, iPadOS 15.3, macOS Big Sur 11.6.3, and macOS Monterey 12.2. Apple’s advisory notes a report that it may have been activel...