CVE-2026-44815

CVE-2026-44815 is a stack-based buffer overflow in the Windows DHCP Client that enables remote code execution over the network. Affected component: Windows DHCP Client; root cause is a stack-based overflow. Consequences are remote code execution with high impact, as indicated by the CVSS vector (...

CVE-2024-38124

CVE-2024-38124 is a Windows Netlogon Elevation of Privilege vulnerability. The provided exploitation context shows an attacker with network access on an AD domain can craft Netlogon messages to impersonate machines (including DCs), enabling privilege escalation and potential full AD compromise. A...

CVE-2022-25647

CVE-2022-25647 affects com.google.code.gson:gson before 2.8.9, which is vulnerable to Deserialization of Untrusted Data via the writeReplace() method in internal classes, potentially enabling DoS. Public advisories (e.g., Debian DSA-5227-1) confirm the flaw and recommend upgrading to 2.8.9 or new...

CVE-2019-19792

CVE-2019-19792 affects ESET Cyber Security for macOS up to version 6.8.300.0 . The issue is a permissions flaw that lets a local attacker escalate privileges by appending data to root-owned files. Exploitation details are not provided beyond the described escalation path. Remediation in the conne...

CVE-2024-11320

CVE-2024-11320 affects Pandora FMS versions 700 through 777.4, where a misconfiguration in the LDAP authentication mechanism enables a command injection that can lead to remote code execution on the server. The Nuclei/NVD entries consistently describe arbitrary command execution via LDAP command ...

CVE-2022-23073

Recipes (the Recipes application) is affected in versions 1.0.5–1.2.5 by a Stored XSS in the copy-to-clipboard functionality used on the food list page. The root cause is insufficient escaping of user-provided data in the Name field when creating a new Food, allowing a malicious payload to be sto...

CVE-2017-7921

CVE-2017-7921 concerns Hikvision IP cameras (multiple series listed in the CVE description) that expose an improper authentication flaw. The weakness allows an unauthenticated user to escalate privileges and access sensitive information, potentially including camera configuration, credentials, an...

CVE-2024-27289

CVE-2024-27289 affects the Go pgx PostgreSQL driver. Before 4.18.2, a SQL injection can occur when using the non-default simple protocol with a minus immediately before a numeric placeholder and a second placeholder for a string on the same line, with both values user-controlled. The issue is fix...

CVE-2023-22067

CVE-2023-22067 affects Oracle Java SE CORBA and related components (Oracle Java SE: 8u381/8u381-perf; Oracle GraalVM for JDK: 17.0.x, 20.0.2; plus Hotspot-backed Java deployments). The issue allows unauthenticated network access via CORBA to compromise data integrity (unauthorized updates) and is...

CVE-2023-4431

CVE-2023-4431 describes an out-of-bounds memory access in Google Chrome Fonts that allowed a remote attacker to perform an out-of-bounds memory read via a crafted HTML page. The issue affects Chrome/Chromium prior to version 116.0.5845.110. The CVSS v3.1 vector indicates network access, low attac...

CVE-2023-25000

CVE-2023-25000 : HashiCorp Vault’s Shamir secret sharing uses precomputed table lookups and is vulnerable to cache-timing attacks during seal/unseal. An attacker observing many unseal operations locally could reduce the search space for recovering Shamir shares. Affected: Vault’s Shamir implement...

CVE-2022-21215

CVE-2022-21215 is an SSRF vulnerability in Airspan/Mimosa MMP stack. Affected: MMP before v1.0.3; PTP C-series before v2.8.6.1; PTMP C-series/A5x before v2.5.4.1. Root cause: improper server-side request handling allows an attacker to force the server to access internal routes and cloud-hosting p...

CVE-2021-30640

CVE-2021-30640 describes a vulnerability in the JNDI Realm of Apache Tomcat that allows an attacker to authenticate using variations of a valid username and/or bypass some LockOut Realm protections. Affected are Tomcat releases: 10.0.0-M1 through 10.0.5, 9.0.0.M1 through 9.0.45, and 8.5.0 through...

CVE-2023-20963

CVE-2023-20963 affects Android WorkSource: a parcel/unparcel mismatch can enable local privilege escalation with no additional execution privileges required. Affected versions include Android 11–13 (11, 12, 12L, 13); patch information is in the March 2023 Android Security Bulletin, with mitigatio...

CVE-2021-25219

CVE-2021-25219 affects ISC BIND; a flaw in response processing allows abuse of the lame cache, degrading resolver performance and potentially causing DoS. Affected ranges include BIND 9.3.0–9.11.35, 9.12.0–9.16.21, 9.9.3-S1–9.11.35-S1, 9.16.8-S1–9.16.21-S1, and 9.17.0–9.17.18 (development/joint b...

CVE-2025-14847

MongoDB vulnerability CVE-2025-14847 (MongoBleed) arises from mismatched length fields in zlib decompression headers, allowing unauthenticated read of uninitialized heap memory. Affected versions include MongoDB Server 3.6.x and 4.x lines (various latest vulnerable builds), 5.0.x, 6.0.x, 7.0.x, 8...

CVE-2025-59775

A Server-Side Request Forgery (SSRF) vulnerability exists in Apache HTTP Server on Windows when AllowEncodedSlashes is enabled and MergeSlashes is disabled. This flaw allows an attacker to potentially leak NTLM hashes to a malicious server through SSRF via malicious requests or content. The vulne...

CVE-2024-5458

CVE-2024-5458 affects PHP:8.1.x before 8.1.29, 8.2.x before 8.2.20, and 8.3.x before 8.3.8. The issue is a code logic error in URL validation using FILTER_VALIDATE_URL in filtering functions (e.g., filter_var), where certain URL forms cause the username:password portion to be misclassified as val...

CVE-2022-40139

CVE-2022-40139 involves improper validation of rollback mechanism components in Trend Micro Apex One and Apex One as a Service. An administrator who has access to the product’s management console can instruct affected clients to download an unverified rollback package, potentially enabling remote...

CVE-2011-3639

CVE-2011-3639 affects the Apache HTTP Server mod_proxy when using reverse proxy configurations (RewriteRule/ProxyPassMatch). The initial fix for CVE-2011-3368 did not fully address the issue, allowing a remote attacker to connect to an intranet/hidden server by sending HTTP/0.9 with a malformed U...

CVE-2022-44698

CVE-2022-44698 is a Windows SmartScreen security feature bypass that enables bypass of Mark-of-the-Web protections via specially crafted files. The public data confirms exploitation in the wild and active exploitation historically cited by multiple sources (CISA KEV, KrebsOnSecurity). The underly...

CVE-2022-24562

IOTransfer 4.3.1.1561 exposes an unauthenticated remote-access flaw in the Airserv component. An attacker can send GET/POST requests to Airserv and gain arbitrary read/write access to the entire filesystem with admin privileges, enabling potential data theft and remote code execution. The issue i...

CVE-2025-24146

The Messages application in macOS is vulnerable to a privacy issue where deleting a conversation may expose user contact information within system logging. This occurs due to insufficient redaction of sensitive data. The vulnerability is addressed in macOS Sequoia 15.3 , macOS Sonoma 14.7.3 , and...

CVE-2022-25168

CVE-2022-25168 affects Apache Hadoop's FileUtil.unTar(File, File) API, which does not escape the input file name before passing it to the shell. This enables command injection. In Hadoop, this vulnerability has been identified in the InMemoryAliasMap.bootstrap transfer path (local user context), ...

CVE-2020-25685

CVE-2020-25685 affects dnsmasq up to version 2.83. The issue arises from how forward.c:reply_query() matches replies to forwarded queries: it uses a weak hash of the query name, allowing an off-path attacker to forge replies by exploiting hash collisions. This vulnerability enables DNS cache pois...

CVE-2020-15117

Synergy before version 1.12.0 is vulnerable to a denial of service where a kMsgHelloBack packet with a client name length of 0xffffffff can crash the server if available memory is under 4 GB. The issue is mitigated when the server has more than 4 GB of memory. Upstream and distribution advisories...

CVE-2020-5741

Plex Media Server on Windows prior to version 1.19.3 is affected by CVE-2020-5741: an authenticated attacker can trigger unsafe Python pickle deserialization (Dict file) during camera-upload related processing, leading to remote code execution as the OS user who runs Plex. Public references descr...

CVE-2014-8985

Microsoft Internet Explorer 11 contains a memory corruption vulnerability (CVE-2014-8985) that can be exploited remotely by visiting a crafted site, potentially enabling arbitrary code execution or memory-based denial of service. Public exploits exist; exploitation details are not provided in the...

CVE-2020-35730

Roundcube Webmail contains a cross-site scripting (XSS) vulnerability in rcube_string_replacer.php (linkref_addindex). An attacker can embed JavaScript in a plain-text email link reference, leading to script execution in the victim’s browser. Affected: Roundcube <1.2.13, <1.3.16 for 1.3.x, ...

CVE-2025-49113

CVE-2025-49113 affects Roundcube Webmail (Roundscube core) with PHP Object Deserialization via the unvalidated _from parameter in actions/settings/upload.php. The issue allows remote code execution by an authenticated user. Public advisories confirm RCE implications and that patches were released...

CVE-2024-5798

CVE-2024-5798 concerns Vault and Vault Enterprise failing to properly validate the JWT aud/role-bound audience claims in the Vault JWT auth method, potentially allowing an invalid login when audience/claims don’t match. The issue is mitigated by upgrading to fixed releases: Vault 1.17.0, 1.16.3, ...

CVE-2024-2467

CVE-2024-2467 is a timing-based side-channel vulnerability in the perl-Crypt-OpenSSL-RSA package affecting legacy PKCS#1 v1.5 padding. The issue can enable plaintext recovery over a network under a Bleichenbacher-style attack if an attacker can send many trial messages. Publicly documented fixes ...

CVE-2023-21930

CVE-2023-21930 affects Oracle Java SE and GraalVM Enterprise Edition (JSSE component) on Java 8u361, 11.0.18, 17.0.6, 20 and GraalVM 20.3.9/21.3.5/22.3.1. An unauthenticated attacker with network access over TLS can compromise data confidentiality and integrity; exploitation is possible via TLS h...

CVE-2022-22770

The CVE-2022-22770 issue affects TIBCO AuditSafe Web Server in versions ≤ 1.1.0, where an unauthenticated, network-remote attacker can call API methods on the affected system. The root cause is an authorization/configuration flaw in the Web Server component that permits arbitrary API method execu...

CVE-2020-13154

Zoho ManageEngine Service Plus (on-premises) before 11.1 build 11112 is affected. Affected component: getFileProtectionSettings in AjaxServlet allows low-privilege authenticated users to disclose the File Protection password. Root cause details are not expanded beyond the information Disclosure d...

CVE-2020-2752

CVE-2020-2752 affects the Oracle MySQL Client (C API). Publicly documented affected versions are 5.6.47 and earlier, 5.7.27 and earlier, and 8.0.17 and earlier. The vulnerability can be triggered by a network-accessing attacker via multiple protocols with low privileges and may lead to a Hang or ...

CVE-2021-38406

CVE-2021-38406 affects Delta Electronics DOPSoft 2 (versions ≤ 2.00.07). It is caused by improper validation of user-supplied data when parsing specific project files, leading to multiple out-of-bounds write instances and potential code execution in the attacker’s context. The issue is documented...

CVE-2021-37701

CVE-2021-37701 (node-tar) affects the tar handling in node-tar where symlink-based directory cache poisoning enables arbitrary file creation/overwrite during extraction. The vulnerability arises from insufficient protection when an archive contains a directory followed by a symlink that shares th...

CVE-2008-3317

Maian Search 1.1 and earlier are affected by an authentication bypass in admin/index.php: remote attackers can gain admin access by sending an arbitrary search_cookie cookie. This is caused by improper validation of the cookie, enabling bypass without exploiting other components. The vulnerabilit...

CVE-2023-46805

CVE-2023-46805 describes an authentication bypass in the web component of Ivanti Connect Secure (ICS) and Ivanti Policy Secure gateways (9.x and 22.x). The vulnerability allows an unauthenticated or improperly authenticated actor to access restricted resources by bypassing access controls, per CV...

CVE-2019-2938

CVE-2019-2938 affects MySQL Server (InnoDB) in Oracle MySQL. Affected versions include 5.7.27 and earlier and 8.0.17 and earlier; exploitation over network could cause a hang or crash (DoS) with high privileges. CVSSv3 base score 4.4. Patches are available; advisory ALSA-2020-1333 recommends upgr...

CVE-2025-1734

CVE-2025-1734 affects PHP’s HTTP stream wrapper header parsing: headers missing a colon are treated as valid, potentially letting applications accept invalid headers. Affected branches include PHP 8.1.x before 8.1.32, 8.2.x before 8.2.28, 8.3.x before 8.3.19, and 8.4.x before 8.4.5. Mitigations/u...

CVE-2017-11357

CVE-2017-11357 affects Progress Telerik UI for ASP.NET AJAX; RadAsyncUpload input is not properly restricted, enabling remote attackers to upload arbitrary files or trigger code execution. The vulnerability is described as an insecure direct object reference in RadAsyncUpload, with impact stated ...

CVE-2022-25631

CVE-2022-25631 affects Symantec Endpoint Protection (SEP) Client/Endpoint Protection before 14.3 RU6 (14.3.9210.6000). The vulnerability is described as a local elevation of privilege, arising from insufficient access control that could allow a privileged attacker to compromise the SEP client. Pu...

CVE-2021-3468

CVE-2021-3468 affects the Avahi package: versions 0.6 through 0.8 contain a flaw where the event signaling termination of a client connection on the Avahi Unix socket is mishandled in client_work, allowing a local attacker to trigger an infinite loop. The primary impact is availability, with the ...

CVE-2003-0693

CVE-2003-0693 describes a buffer management error in OpenSSH prior to 3.7, in buffer_append_space, where freeing the incorrect amount of memory can corrupt the heap and enable remote code execution. This is a remote, unauthenticated vulnerability with a high impact (CVE-2003-0693). Connected advi...

CVE-2023-42753

CVE-2023-42753 is a Linux kernel netfilter nftables/IPSET issue caused by a missing IP_SET_HASH_WITH_NET0 macro, leading to incorrect CIDR_POS calculations and potential slab out-of-bounds access. Local unprivileged users could trigger memory corruption or crashes; privilege escalation is possibl...

CVE-2021-2022

CVE-2021-2022 is a vulnerability in Oracle MySQL Server (component: InnoDB) that affects MySQL Server versions 5.6.50 and earlier, 5.7.32 and earlier, and 8.0.22 and earlier. The issue is exploitable by a highly privileged attacker who can access the affected server over network via multiple prot...

CVE-2025-49132

Prior to version 1.11.11 , the Pterodactyl game server management panel is vulnerable to unauthenticated Remote Code Execution (RCE) . The root cause is a Local File Inclusion (LFI) vulnerability in the /locales/locale.json endpoint, where the locale and namespace query parameters are passed to P...

CVE-2022-24726

The CVE-2022-24726 entry affects Istio’s control plane (istiod) where a request processing error in the validating webhook, exposed publicly on TLS port 15017, can crash the control plane when a specially crafted message is processed. Affected versions have been patched in Istio releases 1.13.2, ...