CVE-2023-45866

CVE-2023-45866 affects BlueZ Bluetooth HID Hosts. The description states that an unauthenticated Peripheral role HID Device could initiate, establish an encrypted connection, and send HID keyboard reports, potentially injecting HID messages when there is no user interaction in the Central role to...

CVE-2022-21724

CVE-2022-21724 affects the official PostgreSQL JDBC Driver (libpgjava) used by pgjdbc. The vulnerability stems from the driver instantiating plugin classes based on connection properties (authenticationPluginClassName, sslhostnameverifier, socketFactory, sslfactory, sslpasswordcallback) without v...

CVE-2013-6282

The CVE-2013-6282 issue affects the Linux kernel on ARM v6k/v7 where get_user and put_user do not validate certain addresses, enabling an unprivileged user to read/write arbitrary kernel memory. Exploitation was reported in the wild on Android devices in late 2013. Affected kernel versions includ...

CVE-2022-21186

The CVE-2022-21186 issue affects @acrontum/filesystem-template versions prior to 0.0.2. The root cause is lack of sanitization of the href field in the fetchRepo API on external input, enabling Arbitrary Command Injection. Reported impact is high severity: potential remote code execution with net...

CVE-2020-9272

CVE-2020-9272 concerns ProFTPD 1.3.7 with an out-of-bounds read in the FTP server’s mod_cap component, triggered via the cap_to_text function in cap_text.c. The vulnerability is network‑based (remote attacker over the protocol) with no authentication required and could lead to information disclos...

CVE-2020-8450

CVE-2020-8450 affects Squid prior to 4.10, caused by incorrect buffer management in reverse-proxy mode, allowing a remote client to trigger a buffer overflow. Connected advisories confirm a fix was released (e.g., updates to Squid 4.11+/4.10-era patches) across multiple distributions (CloudLinux,...

CVE-2025-22228

CVE-2025-22228 is reported in IBM Netcool Operations Insight. The issue arises from BCryptPasswordEncoder.matches(CharSequence,String) returning true for passwords longer than 72 characters if the first 72 characters are identical, enabling an authentication bypass under certain inputs. Affected ...

CVE-2022-43551

CVE-2022-43551 is a vulnerability in curl’s HSTS check that could allow bypassing HSTS and forcing a cleartext HTTP transfer. The issue occurs when the URL hostname uses IDN characters that are later ASCII-encoded during IDN processing (e.g., U+3002 IDEOGRAPHIC FULL STOP instead of U+002E). Curl ...

CVE-2022-2601

The CVE-2022-2601 issue is a vulnerability in grub2’s font rendering path: a crafted pf2 font causes an overflow in grub_font_construct_glyph(), which can allocate too small a buffer for a glyph and trigger a heap-based out-of-bounds write. This vulnerability can be exploited to bypass Secure Boo...

CVE-2022-23307

CVE-2022-23307 concerns a deserialization vulnerability in the Chainsaw component of Apache Log4j 1.x (Chainsaw bundled with Log4j 1.2.x). The root cause is unsafe deserialization of untrusted data via Chainsaw, allowing potential code execution. Multiple Atlassian products initially bundled Chai...

CVE-2024-49744

CVE-2024-49744 targets Android, specifically the AccountManagerService.checkKeyIntentParceledCorrectly path. The issue arises from unsafe deserialization that can bypass parcel mismatch mitigation, enabling local elevation of privilege with no extra privileges beyond those already present; exploi...

CVE-2023-36563

CVE-2023-36563 refers to a Microsoft WordPad Information Disclosure vulnerability. The connected materials confirm that exploitation could disclose NTLM hashes when a user opens a specially crafted file or if an attacker has access to the host, with signs of exploitation in the wild cited by Patc...

CVE-2023-41993

CVE-2023-41993 is a WebKit code‑execution vulnerability affecting Apple platforms where processing web content could trigger arbitrary code execution. The public record notes the issue was fixed in macOS Sonoma 14 and is associated with Safari/WebKit processing paths. Apple documents indicate the...

CVE-2020-11724

CVE-2020-11724 affects OpenResty up to version 1.15.8.3 (and presumably earlier OpenResty/nginx Lua module builds) where ngx_http_lua_subrequest.c allows HTTP request smuggling via ngx.location.capture. The NVD entry documents CVSS scores (2.0/5.0 and 3.1/7.5) with network access and no authentic...

CVE-2022-34485

CVE-2022-34485 concerns memory-corruption-related vulnerabilities in Mozilla Firefox. The data shows Firefox versions earlier than 102 are affected, attributed to issues uncovered by the Mozilla Fuzzing Team, with the potential to execute arbitrary code due to memory corruption. The primary affec...

CVE-2020-8619

CVE-2020-8619 affects ISC BIND9: versions 9.11.14–9.11.19, 9.14.9–9.14.12, and 9.16.0–9.16.3 are vulnerable. The root cause is an asterisk (*) in an empty non-terminal location in the DNS graph, which can trigger an assertion in rbtdb.c and cause denial of service. Exploitation would require zone...

CVE-2010-3867

ProFTPD’s mod_site_misc before 1.3.3c is affected by multiple directory-traversal vulnerabilities exploitable by remote authenticated users via SITE MKDIR, SITE RMDIR, SITE SYMLINK, or SITE UTIME to create/delete directories, create symlinks, or modify file timestamps. The CVE entry is corroborat...

CVE-2018-15494

CVE-2018-15494: Dojo Toolkit’s DataGrid in Dojo before 1.14 is vulnerable to unescaped string injection, enabling cross‑site scripting. Affected component is dojox/Grid/DataGrid; impact is client-side script execution in the context of the hosting page. The public fix is to upgrade to Dojo 1.14 o...

CVE-2016-10033

PHPMailer CVE-2016-10033 affects the isMail transport in PHPMailer prior to 5.2.18, where an attacker can craft the Sender property to inject an extra parameter to the mail() call and achieve remote code execution on the web server. Related entries note the issue as a fix in PHPMailer versions 5....

CVE-2011-3389

CVE-2011-3389 is the BEAST information-disclosure vulnerability in TLS/SSL CBC-mode encryption, allowing a network attacker to glean plaintext headers under certain configurations (e.g., when CBC with chained IVs is used and the attacker can inject/observe traffic). The connected documents show m...

CVE-2024-12130

CVE-2024-12130 is a Rockwell Automation Arena (Arena Simulation) vulnerability described as an out-of-bounds read during parsing of DOE files, enabling arbitrary code execution when a user opens a malicious DOE file or visits a crafted resource. Documents consistently reference Arena/ Arena Simul...

CVE-2023-39332

CVE-2023-39332 concerns Node.js: certain node:fs path operations permit traversal when paths are provided as non-Buffer Uint8Array objects. The vulnerability contrasts with existing mitigations for string paths and Buffer paths (CVE-2023-30584 and CVE-2023-32004). The issue arises in environments...

CVE-2020-25696

The CVE-2020-25696 issue affects the PostgreSQL psql interactive terminal. A flaw in psql’s \gset handling during queries can allow an attacker to execute arbitrary code with the OS account running psql, compromising confidentiality, integrity, and availability. Affected PostgreSQL client/server ...

CVE-2018-6970

Summary of CVE-2018-6970 (VMware Horizon): A out-of-bounds read in the Message Framework library affects VMware Horizon components. Affected products/versions include Horizon 6 (before 6.2.7), Horizon 7 (before 7.5.1), and Horizon Client (4.x before 4.8.1). The flaw may allow a less-privileged us...

CVE-2011-4723

CVE-2011-4723 affects the D-Link DIR-300 router. The vulnerability is information disclosure due to cleartext password storage in the device, enabling context-dependent attackers to obtain sensitive credentials. Root cause is lack of password hashing/storage of passwords in plaintext. Public sour...

CVE-2024-56431

CVE-2024-56431 affects libtheora (Theora) via oc_huff_tree_unpack in huffdec.c, up to Theora 1.0 7180717, with an invalid negative left shift. This is noted as disputed by third parties regarding real security impact (e.g., an app may not crash). Several Nessus/OpenSUSE/SUSE advisories reference ...

CVE-2023-32388

CVE-2023-32388 affects Apple platforms (watchOS 9.5; macOS Ventura 13.4; macOS Big Sur 11.7.7; macOS Monterey 12.6.6; iOS 15.7.6 and iPadOS 15.7.6; iOS 16.5 and iPadOS 16.5). The issue is a privacy vulnerability where private data redaction in log entries could be bypassed, enabling an app to byp...

CVE-2026-34986

CVE-2026-34986 affects the Go JOSE library. Prior to versions 4.1.4 and 3.0.5, decrypting a JWE object can cause a panic when the alg field indicates a key-wrapping algorithm (any ending with KW, except A128GCMKW/A192GCMKW/A256GCMKW) and encrypted_key is empty. The panic occurs in cipher.KeyUnwra...

CVE-2020-3433

Cisco AnyConnect Secure Mobility Client for Windows is affected by a local DLL hijacking vulnerability in the IPC channel. An authenticated attacker with valid Windows credentials can craft IPC messages to the AnyConnect process, leading to remote code execution with SYSTEM privileges due to insu...

CVE-2023-32353

CVE-2023-32353 affects Apple iTunes for Windows prior to version 12.12.9. The issue is described as a logic fault addressed by improved checks, with the fix implemented in iTunes 12.12.9 for Windows. The resulting impact is the potential for elevation of privileges. Affected software: Apple iTune...

CVE-2022-28330

CVE-2022-28330 affects Apache HTTP Server 2.4.53 and earlier on Windows, describing an out-of-bounds read when processing requests with the mod_isapi module. Public references in ALAS advisories indicate the fix is included in httpd 2.4.54 (and related ALT Linux advisories). Mitigation requires u...

CVE-2019-10164

Summary (validated): PostgreSQL 10.x before 10.9 and 11.x before 11.4 are vulnerable to a stack-based buffer overflow triggered when a user changes their own password. An authenticated user can exploit this to potentially execute arbitrary code with the PostgreSQL OS account. Multiple connected s...

CVE-2025-24032

PAM-PKCS#11 (Linux-PAM) vulnerability CVE-2025-24032 affects pam_pkcs11-0.6.0 and later up to 0.6.12/0.6.13 era, where the default cert_policy of none may bypass private-key signature checks. An attacker could create a token containing the user’s public data (e.g., certificate) and a known PIN an...

CVE-2023-5678

CVE-2023-5678 describes a DoS risk from excessive time spent validating X9.42 DH keys/parameters. The issue affects OpenSSL DH-based operations such as DH_generate_key(), DH_check_pub_key(), DH_check_pub_key_ex(), EVP_PKEY_public_check(), and related checks invoked by DH-related functions. OpenSS...

CVE-2023-20105

Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) are affected by CVE-2023-20105, a privilege-escalation flaw stemming from improper handling of password change requests. An authenticated attacker with Read-only credentials can craft a web-management request and alte...

CVE-2021-31010

CVE-2021-31010 is a sandbox-bypass vulnerability affecting Apple platforms, reported in Core Telephony on macOS Catalina. It involves a deserialization issue that may bypass sandbox restrictions. The issue is fixed in Security Update 2021-005 Catalina (and related updates for iOS 12.5.5, iOS 14.8...

CVE-2014-0224

CVE-2014-0224 describes an OpenSSL ChangeCipherSpec (CCS) handling flaw that can enable a Man-in-the-Middle to force use of weak key material in TLS/SSL sessions, allowing traffic decryption or modification between vulnerable client and server. The initial OpenSSL disclosures specify affected ser...

CVE-2024-9680

CVE-2024-9680 is a use-after-free in the Animation timelines that enables code execution in the content process. Affected Mozilla products include Firefox and Thunderbird with the following vulnerable versions: Firefox < 131.0.2; Firefox ESR < 128.3.1; Firefox ESR < 115.16.1; Thunderbird...

CVE-2022-29178

CVE-2022-29178 affects Cilium prior to versions 1.9.16, 1.10.11, and 1.11.15, which contain an incorrect default permissions vulnerability. Users in group ID 1000 could access Cilium’s API via the host Unix domain socket, potentially impacting integrity and availability. A fix is available in ver...

CVE-2022-0235

CVE-2022-0235 affects the node-fetch package and is described as a vulnerability that could result in Exposure of Sensitive Information to an Unauthorized Actor. The connected document(s) confirm this CVE ID and provide contextual metrics (e.g., CVSS scores from NVD and related references), but d...

CVE-2019-0221

CVE-2019-0221 affects Apache Tomcat across multiple major lines (Tomcat 9.0.0.M1–9.0.0.17, 8.5.0–8.5.39, 7.0.0–7.0.93). The underlying issue is that the SSI printenv command echoes user-provided data without escaping, enabling cross-site scripting (XSS). SSI is disabled by default and intended fo...

CVE-2020-8022

CVE-2020-8022 describes an Incorrect Default Permissions flaw in the tomcat packaging for SUSE-related products (SUSE Enterprise Storage 5, various SLE/SAP/OpenStack Cloud variants, and related SUSE builds). The issue allows a local attacker to escalate from group tomcat to root. Affected Tomcat ...

CVE-2017-15107

CVE-2017-15107 affects dnsmasq DNSSEC implementation prior to fix in later releases. Connected sources describe that wildcard synthesized NSEC records could be misinterpreted, causing incorrect validation of non-existence for hostnames that actually exist. The vulnerability is associated with dns...

CVE-2016-3714

CVE-2016-3714 affects ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1. An improper input validation flaw in the EPHEMERAL, HTTPS, MVG, MSL, TEXT, SHOW, WIN, and PLT coders allows a remote attacker to execute arbitrary code via shell metacharacters in a crafted image (ImageTragick). The vulnera...

CVE-2025-38236

CVE-2025-38236 concerns a Linux kernel af_unix use-after-free involving consecutive consumed OOB skbs in unix_stream_read_generic(), triggered when OOB data is read but the corresponding skb remains on the recv queue. The root cause is the handling of consumed OOB skbs and the SO_PEEK_OFF path, w...

CVE-2021-41861

The Red Hat and NVD entries describe CVE-2021-41861 as a vulnerability in Telegram for Android (versions 7.5.0–7.8.0) where image self-destruction is not properly implemented. After roughly two to four uses of the self-destruct feature, the UI misleadingly indicates that an image was deleted, but...

CVE-2022-27518

CVE-2022-27518 affects Citrix ADC and Citrix Gateway when configured as a SAML SP or SAML IdP. The vulnerability allows unauthenticated remote arbitrary code execution. Citrix’s security bulletin CTX474995 lists affected versions: ADC/Gateway 13.0 before 13.0-58.32; 12.1 before 12.1-65.25; 12.1-F...

CVE-2022-21742

CVE-2022-21742 affects Realtek USB FE/1GbE/2.5GbE/5GbE NIC family drivers. The root cause is a buffer overflow caused by insufficient parameter length verification in an API function, enabling an unauthenticated LAN attacker to disrupt services. The vulnerability is documented across multiple fee...

CVE-2024-23945

CVE-2024-23945 → CookieSigner exposes the correct cookie signature to end users when a signature mismatch occurs. Affected: Hive service component and Spark Hive-ThriftServer (versions tied to HIVE-9710 1.2.0 and SPARK-14987 2.0.0). Root cause: flawed CookieSigner logic allows exposure of the sig...

CVE-2024-23672

Summary: CVE-2024-23672 is a Denial of Service vulnerability in Apache Tomcat affecting multiple branches (11.0.0-M1…16, 10.1.0-M1…18, 9.0.0-M1…85, 8.5.0…98) where WebSocket clients could keep connections open, leading to increased resource consumption. The connected documents confirm the root ca...