CVE-2011-2767

CVE-2011-2767 affects mod_perl 2.0 through 2.0.10. Root cause: there is no configuration option that permits Perl code for admin control of HTTP request processing without also letting unprivileged users run Perl in the Apache process context. Impact: attackers can execute arbitrary Perl code by ...

CVE-2011-1823

The CVE-2011-1823 entry concerns the vold volume manager daemon in Android (Android 3.0 and 2.x up to 2.3.4). The vulnerability arises from trusting PF_NETLINK messages, enabling a local attacker to execute arbitrary code and gain root privileges via a negative index that bypasses a maximum-only ...

CVE-2019-2938

CVE-2019-2938 affects MySQL Server (InnoDB) in Oracle MySQL. Affected versions include 5.7.27 and earlier and 8.0.17 and earlier; exploitation over network could cause a hang or crash (DoS) with high privileges. CVSSv3 base score 4.4. Patches are available; advisory ALSA-2020-1333 recommends upgr...

CVE-2025-32433

The CVE-2025-32433 issue affects Erlang/OTP’s SSH server and is caused by a flaw in SSH message handling during authentication, enabling an unauthenticated attacker to execute arbitrary commands with the SSH daemon’s privileges (potentially root). Affected OTP versions include OTP-27.3.2?3, OTP-2...

CVE-2009-2446

CVE-2009-2446 affects MySQL server: format string vulnerabilities in libmysqld dispatch_command (sql_parse.cc) in MySQL 4.0.0–5.0.83. Exploited by remote authenticated users to crash mysqld (DoS) via crafted database name in COM_CREATE_DB or COM_DROP_DB. Remediation: upgrade to patched MySQL vers...

CVE-2016-7048

CVE-2016-7048 affects PostgreSQL: the interactive installer in PostgreSQL versions prior to 9.3.15, 9.4.x before 9.4.10, and 9.5.x before 9.5.5 could allow remote attackers to execute arbitrary code by abusing HTTP to download software. The vulnerability arises during the installer’s download pha...

CVE-2023-40132

CVE-2023-40132 affects Google Android through RingtoneManager.setActualDefaultRingtoneUri. The vulnerability arises from a missing permission check when accessing content providers, allowing a local escalation of privilege by bypassing read permissions. Impact is described as local privilege esca...

CVE-2023-38606

CVE-2023-38606 affects Apple’s kernel across iOS, iPadOS, macOS, tvOS and watchOS; the issue allows an app to modify a sensitive kernel state. The vulnerability was addressed with updated state management and patches, with fixes in macOS Monterey 12.6.8, iOS 15.7.8/iPadOS 15.7.8, iOS 16.6/iPadOS ...

CVE-2023-21830

CVE-2023-21830 is a network-attackable CORBA/Serialization vulnerability affecting Oracle Java SE and GraalVM Enterprise Edition. Affected: Oracle Java SE 8u351 and 8u351-perf; GraalVM EE 20.3.8 and 21.3.4 (and related components). Exploitation requires network access with no authentication, pote...

CVE-2021-2022

CVE-2021-2022 is a vulnerability in Oracle MySQL Server (component: InnoDB) that affects MySQL Server versions 5.6.50 and earlier, 5.7.32 and earlier, and 8.0.22 and earlier. The issue is exploitable by a highly privileged attacker who can access the affected server over network via multiple prot...

CVE-2020-11996

CVE-2020-11996 affects Apache Tomcat versions 10.0.0-M1 to 10.0.0-M5, 9.0.0.M1 to 9.0.35, and 8.5.0 to 8.5.55, where a specially crafted sequence of HTTP/2 requests could trigger high CPU and make the server unresponsive. Multiple connected advisories confirm this DoS through HTTP/2 traffic. Publ...

CVE-2011-0419

CVE-2011-0419 is a stack consumption/DoS vulnerability in the APR library’s fnmatch implementation (apr_fnmatch.c) and, for some platforms, in libc’s fnmatch.c. It affects APR < 1.4.3 and Apache HTTP Server

CVE-2020-25685

CVE-2020-25685 affects dnsmasq up to version 2.83. The issue arises from how forward.c:reply_query() matches replies to forwarded queries: it uses a weak hash of the query name, allowing an off-path attacker to forge replies by exploiting hash collisions. This vulnerability enables DNS cache pois...

CVE-2014-4210

CVE-2014-4210 is an unspecified WebLogic SSRF vulnerability affecting Oracle WebLogic Server in Oracle Fusion Middleware 10.0.2.0 and 10.3.6.0. It allows remote attackers to affect confidentiality via Web Services/WebLogic SSRF vectors. Public details describe an SSRF that could bypass network re...

CVE-2010-3129

CVE-2010-3129 affects uTorrent versions 2.0.3 and earlier, with an untrusted search path vulnerability that allows DLL hijacking via a Trojan horse DLL placed in the same folder as a .torrent or .btsearch file. The issue can enable arbitrary code execution for local users and possibly remote atta...

CVE-2000-1124

The CVE-2000-1124 entry describes a local privilege-escalation flaw in IBM AIX 4.3.x: a buffer overflow in the piobe command caused by long environmental variables. The affected component is the piobe command on IBM AIX 4.3.x; the underlying issue is a buffer overflow allowing local users to gain...

CVE-2024-28863

CVE-2024-28863 affects the npm package graph for Node.js via the node-tar library. The issue: node-tar prior to version 6.2.1 imposes no limit on the number of sub-folders created during folder extraction, enabling an attacker to produce a path with many sub-folders that can consume memory and cr...

CVE-2024-26583

CVE-2024-26583 affects the Linux kernel TLS path. The issue is a race between async crypto notify completion and socket close, where the submitting thread could exit before the crypto handler finishes, risking touching data after it has been freed. The fix routes around this by reducing complex l...

CVE-2021-25219

CVE-2021-25219 affects ISC BIND; a flaw in response processing allows abuse of the lame cache, degrading resolver performance and potentially causing DoS. Affected ranges include BIND 9.3.0–9.11.35, 9.12.0–9.16.21, 9.9.3-S1–9.11.35-S1, 9.16.8-S1–9.16.21-S1, and 9.17.0–9.17.18 (development/joint b...

CVE-2025-29824

CVE-2025-29824 is a Use-After-Free vulnerability in the Windows Common Log File System Driver (CLFS) kernel driver, caused by a race condition in W32PROCESS handling via WaitForInputIdle that enables local privilege escalation to SYSTEM. Microsoft patched this in April 2025 (KB5044284). Public ex...

CVE-2023-3823

CVE-2023-3823 affects PHP versions 8.0.x before 8.0.30, 8.1.x before 8.1.22, and 8.2.x before 8.2.8. The issue stems from libxml global state tracking of configuration (e.g., external entities); in shared-process scenarios (e.g., ImageMagick in the same process), this state can be altered and per...

CVE-2022-29548

CVE-2022-29548 is a reflected Cross-Site Scripting (XSS) vulnerability in the WSO2 Management Console affecting API Manager and related products (e.g., API Manager 2.2.0, 2.5.0, 2.6.0, 3.0.0–3.2.0, 4.0.0; API Manager Analytics; API Microgateway; Data Analytics Server; Enterprise Integrator; IS as...

CVE-2021-38406

CVE-2021-38406 affects Delta Electronics DOPSoft 2 (versions ≤ 2.00.07). It is caused by improper validation of user-supplied data when parsing specific project files, leading to multiple out-of-bounds write instances and potential code execution in the attacker’s context. The issue is documented...

CVE-2018-5741

CVE-2018-5741 concerns ISC BIND 9 and its update-policy feature for Dynamic DNS (DDNS). The issue stems from incorrect documentation of krb5-subdomain and ms-subdomain rule types in the Administrator Reference Manual, which could lead operators to believe their configured policies are more restri...

CVE-2018-11784

CVE-2018-11784 affects Apache Tomcat: the default servlet could be tricked into generating redirects to arbitrary URIs when handling requests like /foo, enabling open redirect. Affected branches include 9.0.x (9.0.0.M1–9.0.11), 8.5.x (8.5.0–8.5.33), and 7.0.x (7.0.23–7.0.90). Root cause is how th...

CVE-2024-57699

Netplex Json-smart 2.5.0–2.5.1 is affected: parsing deeply nested JSON inputs can cause stack exhaustion (DoS) due to unbounded nesting in recursive parsing, tied to an incomplete fix for CVE-2023-1370. The impact is denial of service; exploitation details, exploit status, and a specific remediat...

CVE-2022-3171

CVE-2022-3171 describes a parsing issue in protobuf-java core and lite where inputs containing multiple non-repeated embedded messages with repeated or unknown fields can flip objects between mutable and immutable forms, causing long garbage-collection pauses and DoS. Affected versions are protob...

CVE-2019-11041

CVE-2019-11041 affects PHP EXIF parsing (exif_read_data) and can read past the allocated buffer, enabling information disclosure or crash. Affected PHP versions are 7.1.x < 7.1.31, 7.2.x < 7.2.21, and 7.3.x

CVE-2022-4203

OpenSSL CVE-2022-4203 is a read buffer overrun in X.509 name-constraint checking that can be triggered after certificate chain verification, potentially crashing the TLS agent and causing a denial of service (memory disclosure was only theoretical in early advisories). It affects TLS clients and ...

CVE-2020-5741

Plex Media Server on Windows prior to version 1.19.3 is affected by CVE-2020-5741: an authenticated attacker can trigger unsafe Python pickle deserialization (Dict file) during camera-upload related processing, leading to remote code execution as the OS user who runs Plex. Public references descr...

CVE-2017-5754

CVE-2017-5754 is the Meltdown vulnerability: a speculative-execution side-channel in kernels could allow a local attacker to read privileged memory. Apple documents show Meltdown affecting Kernel on iOS/macOS/watchOS with related entries (e.g., CVE-2017-5754) and list mitigation via security upda...

CVE-2025-65046

CVE-2025-65046 is a Microsoft Edge (Chromium-based) spoofing vulnerability. The connected sources corroborate a spoofing flaw in Edge with low overall base score (CVSS v3.1: 3.1, low impact on confidentiality/integrity/availability; user interaction required; network attack vector; high attack co...

CVE-2025-24400

CVE-2025-24400 affects the Jenkins Eiffel Broadcaster Plugin (versions 2.8.0–2.10.2). The vulnerability arises because the plugin uses the credential ID as the cache key during signing operations, allowing an attacker who can create a credential with the same ID in a different credentials store t...

CVE-2021-25214

CVE-2021-25214 affects BIND’s named when processing a malformed IXFR, causing named to terminate on the next refresh of the transferred zone. Concrete details across connected advisories show affected BIND ranges and the specific fixes: ALT Linux and others report updates that address CVEs 25214/...

CVE-2019-14814

CVE-2019-14814 affects the Linux kernel Marvell WiFi driver (mwifiex) - a heap-based buffer overflow in the Marvell WiFi chip driver, present in all kernel versions up to but excluding 5.3. This can allow local users to crash the system or, potentially, execute arbitrary code. Public advisories (...

CVE-2024-26586

CVE-2024-26586 (Linux kernel) : The issue is a stack corruption risk in mlxsw spectrum ACL TCAM handling when there are more than 16 ACLs in an ACL group. In Spectrum-2+ ASICs, firmware reports a larger ACL count than the PAGT register can hold, risking stack corruption during forwarding. The fix...

CVE-2023-42753

CVE-2023-42753 is a Linux kernel netfilter nftables/IPSET issue caused by a missing IP_SET_HASH_WITH_NET0 macro, leading to incorrect CIDR_POS calculations and potential slab out-of-bounds access. Local unprivileged users could trigger memory corruption or crashes; privilege escalation is possibl...

CVE-2022-28987

Vulnerability summary: Zoho ManageEngine ADSelfService Plus (pre-6202, e.g., 6121) is affected by CVE-2022-28987. A crafted POST to /ServletAPI/accounts/login enables username enumeration by revealing differences in responses for existing versus non-existing users, via the Forgot Password/login f...

CVE-2020-35730

Roundcube Webmail contains a cross-site scripting (XSS) vulnerability in rcube_string_replacer.php (linkref_addindex). An attacker can embed JavaScript in a plain-text email link reference, leading to script execution in the victim’s browser. Affected: Roundcube <1.2.13, <1.3.16 for 1.3.x, ...

CVE-2025-47273

CVE-2025-47273 affects setuptools by a path traversal in PackageIndex prior to 78.1.1, allowing writing files to arbitrary locations with the process’s permissions and potentially enabling remote code execution in context. Affected: setuptools package (Python ecosystem). The issue is fixed in ver...

CVE-2022-23305

CVE-2022-23305 concerns Apache Log4j 1.x when configured with JDBCAppender: an SQL statement is built from a PatternLayout-converted value (notably %m), allowing an attacker to craft input to alter and potentially execute SQL. The issue is specific to Log4j 1.x if JDBCAppender is used; JDBCAppend...

CVE-2017-14746

CVE-2017-14746 is a use-after-free vulnerability in the Samba SMB1 server component. The issue arises when Samba 4.x files or services process certain SMB1 requests, allowing a remote attacker to crash the server or execute arbitrary code. Public advisories consistently describe an SMB1 handling ...

CVE-2012-5568

CVE-2012-5568 affects Apache Tomcat 7.0.x and enables a remote-denial-of-service via Slowloris-style partial HTTP requests. The vulnerability allows an attacker to keep connections open and exhaust resources, with a CVSS v2 base score of 5.0 in the initial metric (note: other sources list base sc...

CVE-2005-0219

CVE-2005-0219 : The connected sources describe multiple XSS vulnerabilities in Gallery 1.3.4-pl1, allowing remote attackers to inject arbitrary script/HTML via fields in add_comment.php (index), slideshow_low.php (set_albumName, slide_index, slide_full, slide_loop, slide_pause, slide_dir), and se...

CVE-2015-0228

Apache HTTP Server mod_lua contains a Denial of Service vulnerability in lua_websocket_read (lua_request.c) affecting versions up to 2.4.12. A remote attacker can crash a child process by sending a crafted WebSocket Ping frame after a Lua script has invoked wsupgrade. The provided documents confi...

CVE-2022-40139

CVE-2022-40139 involves improper validation of rollback mechanism components in Trend Micro Apex One and Apex One as a Service. An administrator who has access to the product’s management console can instruct affected clients to download an unverified rollback package, potentially enabling remote...

CVE-2020-7066

CVE-2020-7066 (PHP) : get_headers() with a user-supplied URL can truncate at a NULL byte, causing target confusion and possible data leakage to a wrong server. Affected: PHP 7.2.x < 7.2.29, 7.3.x < 7.3.16, 7.4.x

CVE-2023-20963

CVE-2023-20963 affects Android WorkSource: a parcel/unparcel mismatch can enable local privilege escalation with no additional execution privileges required. Affected versions include Android 11–13 (11, 12, 12L, 13); patch information is in the March 2023 Android Security Bulletin, with mitigatio...

CVE-2022-23730

CVE-2022-23730 is described across connected records as a public API error that allows bypassing API access control, with concrete mention of affecting LG WebOS (PT-2022-16235) and related entries (e.g., Red Hat/NVD refs). The sources do not provide specific vulnerable versions, exact root cause ...

CVE-2021-30640

CVE-2021-30640 describes a vulnerability in the JNDI Realm of Apache Tomcat that allows an attacker to authenticate using variations of a valid username and/or bypass some LockOut Realm protections. Affected are Tomcat releases: 10.0.0-M1 through 10.0.5, 9.0.0.M1 through 9.0.45, and 8.5.0 through...