CVE-2022-20914

CVE-2022-20914 affects Cisco Identity Services Engine (ISE) via the External RESTful Services (ERS) API. The root cause is excessive verbosity in a REST API output, enabling an authenticated attacker (with ERS admin credentials) to retrieve sensitive information, including admin credentials for a...

CVE-2021-28960

CVE-2021-28960 affects Zoho ManageEngine Desktop Central prior to build 10.0.683. The vulnerability arises from improper handling of an input command in on-demand operations, enabling unauthenticated command injection. This could allow an attacker to execute arbitrary commands on the affected sys...

CVE-2021-25214

CVE-2021-25214 affects BIND’s named when processing a malformed IXFR, causing named to terminate on the next refresh of the transferred zone. Concrete details across connected advisories show affected BIND ranges and the specific fixes: ALT Linux and others report updates that address CVEs 25214/...

CVE-2015-0228

Apache HTTP Server mod_lua contains a Denial of Service vulnerability in lua_websocket_read (lua_request.c) affecting versions up to 2.4.12. A remote attacker can crash a child process by sending a crafted WebSocket Ping frame after a Lua script has invoked wsupgrade. The provided documents confi...

CVE-2013-4786

CVE-2013-4786 is an IPMI 2.0 vulnerability where RAKP authentication can leak HMAC data, enabling an attacker with IPMI network access to obtain password hashes and potentially hijack or replay BMC sessions. CERT notes that an unauthenticated attacker on the BMC network can predict session identi...

CVE-2024-45801

CVE-2024-45801 – DOMPurify prototype pollution/XSS issue : DOMPurify can bypass depth checks via special nesting and, separately, through prototype pollution weakening depth validation. The GHSA advisory details a prototype-pollution chain where Object.prototype.tagNameCheck and Object.prototype....

CVE-2024-26586

In CVE-2024-26586, the Linux kernel mlxsw: spectrum_acl_tcam component could experience stack corruption when a net device has more than 16 ACLs in an ACL group, due to an outdated PAGT register layout that could not reflect firmware-reported group sizes on Spectrum-2 and newer ASICs. The root ca...

CVE-2023-20273

CVE-2023-20273 concerns Cisco IOS XE Software Web UI. A vulnerability in the Web UI input validation allows an authenticated, remote attacker to inject commands with root privileges, potentially compromising the underlying OS. CVSS v3.1 base score 7.2 (HIGH); attack vector NETWORK, privileges req...

CVE-2023-35355

CVE-2023-35355 is a Windows elevation-of-privilege vulnerability affecting the Windows Cloud Files Mini Filter Driver. The CVE is rated CVSSv3.1 base 7.8 (LOCAL exploit, LOW privileges required, no user interaction, HIGH impact to confidentiality, integrity, and availability) per Microsoft. Conne...

CVE-2026-25253

OpenClaw/OpenClaw (clawdbot/Moltbot) vulnerability CVE-2026-25253 arises from the Control UI reading gatewayUrl from the URL query and auto-opening a WebSocket to the attacker’s endpoint with the stored token, enabling token exfiltration and potential full gateway compromise. Root cause: applySet...

CVE-2022-23305

CVE-2022-23305 concerns Apache Log4j 1.x when configured with JDBCAppender: an SQL statement is built from a PatternLayout-converted value (notably %m), allowing an attacker to craft input to alter and potentially execute SQL. The issue is specific to Log4j 1.x if JDBCAppender is used; JDBCAppend...

CVE-2021-3712

The CVE-2021-3712 issue affects OpenSSL where ASN1_STRING data may not be NUL-terminated if constructed directly (or via ASN1_STRING_set0), causing read-buffer overreads when many OpenSSL print/name-constraining paths handle such ASN.1 strings. Exploitation could crash the application (DoS) or di...

CVE-2016-7048

CVE-2016-7048 affects PostgreSQL: the interactive installer in PostgreSQL versions prior to 9.3.15, 9.4.x before 9.4.10, and 9.5.x before 9.5.5 could allow remote attackers to execute arbitrary code by abusing HTTP to download software. The vulnerability arises during the installer’s download pha...

CVE-2011-0419

CVE-2011-0419 is a stack consumption/DoS vulnerability in the APR library’s fnmatch implementation (apr_fnmatch.c) and, for some platforms, in libc’s fnmatch.c. It affects APR < 1.4.3 and Apache HTTP Server

CVE-2023-37920

CVE-2023-37920 affects the Python Certifi package: Certifi before 2023.07.22 includes the e-Tugra root certificates, which were removed in 2023.07.22 due to security concerns. The vulnerability is documented with high/critical impact in CVSS vectors across sources, and advisories across multiple ...

CVE-2021-23369

CVE-2021-23369 affects handlebars.js prior to 4.7.7. It allows remote code execution when compiling templates from untrusted sources due to how certain compiling options are handled. The vulnerability is described in vendor advisories (e.g., IBM bulletin referencing Node.js handlebars module) and...

CVE-2018-11784

CVE-2018-11784 affects Apache Tomcat: the default servlet could be tricked into generating redirects to arbitrary URIs when handling requests like /foo, enabling open redirect. Affected branches include 9.0.x (9.0.0.M1–9.0.11), 8.5.x (8.5.0–8.5.33), and 7.0.x (7.0.23–7.0.90). Root cause is how th...

CVE-2021-25337

CVE-2021-25337 is an Samsung-only vulnerability in the clipboard content provider (system_server) that allowed untrusted apps to read/write arbitrary files via improper access control before SMR Mar-2021 Release 1. The issue stems from missing access checks in the SemClipboardProvider.insert path...

CVE-2020-25613

CVE-2020-25613 affects Ruby’s WEBrick HTTP server: transfer-encoding header handling was not sufficiently validated, potentially allowing HTTP Request Smuggling by an attacker bypassing a misconfigured reverse proxy. The issue is present in Ruby versions up to 2.5.8, 2.6.x up to 2.6.6, and 2.7.x ...

CVE-2012-2336

The PHP programming language interpreter (component sapi/cgi/cgi_main.c ) is vulnerable to a denial of service (resource consumption) when configured as a CGI script (php-cgi ). The root cause is the improper handling of query strings lacking an = (equals sign) character, which allows remote atta...

CVE-2023-52439

CVE-2023-52439 is a Linux kernel UIO subsystem use-after-free vulnerability. The issue occurs in a race between core-1 (uio_unregister_device) and core-2 (uio_open) where device_unregister frees idev, then core-2 may still access idev, leading to use-after-free and potential double free of idev v...

CVE-2022-41723

CVE-2022-41723 describes a denial-of-service in the HPACK decoder triggered by a malicious HTTP/2 stream, causing excessive CPU use. Public documents list affected ecosystems across Go HTTP/2/x/net implementations and various distributions (e.g., Red Hat OpenStack platforms, Astra Linux, CBLMarin...

CVE-2026-32933

AutoMapper (a .NET object-object mapper) is vulnerable in versions prior to 15.1.1 and 16.1.1 to a Denial of Service via uncontrolled recursion during deep object graph mapping, which can exhaust thread stack memory and trigger a StackOverflowException, terminating the process. The issue is mitig...

CVE-2025-27363

CVE-2025-27363 affects FreeType versions 2.13.0 and earlier, with an out-of-bounds write when parsing font subglyphs for TrueType GX and variable fonts. The vulnerable code writes up to 6 signed long integers past a too-small heap buffer after an incorrect cast, potentially enabling arbitrary cod...

CVE-2012-2531

CVE-2012-2531 concerns Microsoft IIS. Public description indicates IIS 7.5 stores credentials in the Operational log with weak permissions, enabling local users to read credentials (Password Disclosure Vulnerability). Connected sources reference an IIS FTP information-disclosure issue (MS12-073) ...

CVE-2025-24400

The Jenkins Eiffel Broadcaster Plugin versions 2.8.0 through 2.10.2 (both inclusive) are vulnerable to a cache confusion issue. The plugin improperly uses the credential ID as a cache key during signing operations. This allows an attacker to create a malicious credential with the same ID as a leg...

CVE-2019-14814

CVE-2019-14814 affects the Linux kernel Marvell WiFi driver (mwifiex) - a heap-based buffer overflow in the Marvell WiFi chip driver, present in all kernel versions up to but excluding 5.3. This can allow local users to crash the system or, potentially, execute arbitrary code. Public advisories (...

CVE-2018-19322

The CVE-2018-19322 issue affects GIGABYTE APP Center and related components (GDrv; GPCIDrv; AORUS GRAPHICS ENGINE; XTREME GAMING ENGINE; OC GURU II) with IO port read/write access exposed by these low‑level drivers. The documented impact is local privilege elevation via arbitrary IO port operatio...

CVE-2017-14746

CVE-2017-14746 is a use-after-free vulnerability in the Samba SMB1 server component. The issue arises when Samba 4.x files or services process certain SMB1 requests, allowing a remote attacker to crash the server or execute arbitrary code. Public advisories consistently describe an SMB1 handling ...

CVE-2024-26582

CVE-2024-26582 is a Linux kernel vulnerability in the TLS subsystem. The issue stems from net/tls: tls_decrypt_sg not taking a reference on pages from clear_skb, which allows the put_page() in tls_decrypt_done to release those pages and trigger a use-after-free when reading a partially-read skb i...

CVE-2023-41060

CVE-2023-41060 describes a kernel-type confusion vulnerability that is fixed in macOS Sonoma 14, iOS 17, and iPadOS 17. The root cause is a type confusions issue in the kernel that can allow a remote attacker to execute code with kernel privileges. Affected platforms, per public records, include ...

CVE-2019-2503

The connected advisory ALAS-2019-1292 documents CVE-2019-2503 as a MySQL/MariaDB Server: Connection Handling vulnerability. Affected are Oracle MySQL Server components with versions 5.6.42 and prior, 5.7.24 and prior, and 8.0.13 and prior. The issue can allow a low-privileged attacker on the netw...

CVE-2010-3129

CVE-2010-3129 affects uTorrent versions 2.0.3 and earlier, with an untrusted search path vulnerability that allows DLL hijacking via a Trojan horse DLL placed in the same folder as a .torrent or .btsearch file. The issue can enable arbitrary code execution for local users and possibly remote atta...

CVE-2026-4282

CVE-2026-4282 describes a flaw in Keycloak where the SingleUseObjectProvider is not properly isolated by type and namespace. An unauthenticated attacker can forge authorization codes, potentially leading to creation of admin-capable access tokens and privilege escalation. The available documents ...

CVE-2026-21517

CVE-2026-21517 affectancy: Windows App for Mac is impacted by an improper link resolution before file access ("link following"). The underlying issue allows an authorized local attacker to escalate privileges. The CVSS 3.1 base metrics indicate Local attack vector, high impact on confidentiality,...

CVE-2023-21752

CVE-2023-21752 is a Windows Backup Service Elevation of Privilege vulnerability affecting Windows 11 (build 10.0.22000). Exploitation is possible to gain SYSTEM privileges, potentially delete data or render the service unavailable. A public PoC and details exist (Exploit-DB entry: Windows 11 10.0...

CVE-2018-5741

CVE-2018-5741 concerns ISC BIND 9 and its update-policy feature for Dynamic DNS (DDNS). The issue stems from incorrect documentation of krb5-subdomain and ms-subdomain rule types in the Administrator Reference Manual, which could lead operators to believe their configured policies are more restri...

CVE-2009-3103

The srv2.sys kernel driver in the SMBv2 protocol implementation of Windows Vista (SP1/SP2) and Windows Server 2008 (SP1, pre-R2) is vulnerable to an array index error . A remote attacker can send a specially crafted NEGOTIATE PROTOCOL REQUEST packet containing an & (ampersand) character in the Pr...

CVE-2021-46939

CVE-2021-46939 affects the Linux kernel where tracing changes to trace_clock_global() could deadlock due to recursive locking during tracing; the fix uses a trylock and retry semantics to avoid blocking. Public details in connected advisories (MiracleLinux UTSA, Nessus plugin) describe the same i...

CVE-2024-21412

CVE-2024-21412 is a Windows SmartScreen security feature bypass that lets a downloaded file, marked by the Mark of the Web (MoTW), execute without SmartScreen prompts when dealing with Internet Shortcut files. Connected sources cite in-the-wild activity (Water Hydra) and exploitation via spearphi...

CVE-2023-52434

CVE-2023-52434 affects Linux kernel SMB/CIFS: the vulnerability is in smb2_parse_contexts() used by SMB2_open (mount.cifs path). Root cause: insufficient validation of offsets/lengths before dereferencing create contexts, enabling an out-of-bounds access that could trigger a kernel oops when serv...

CVE-2016-3125

ProFTPD mod_tls TLSDHParamFile handling flaw (CVE-2016-3125) may cause a weaker DH key to be used. Affected: ProFTPD before 1.3.5b and before 1.3.6rc2. Remediation: upgrade to 1.3.5b+ or 1.3.6rc2+ (or newer) where patched. Notes from openSUSE/SUSE advisories confirm the fix in later releases.

CVE-2014-8361

CVE-2014-8361 affects Realtek SDK’s miniigd UPnP SOAP service. The root cause is improper input validation in the NewInternalClient handling, enabling a remote attacker to execute arbitrary code. The description notes exploitation in the wild through 2023. Related sources indicate this vulnerabil...

CVE-2026-56155

CVE-2026-56155 affects Active Directory Federation Services (AD FS) with insufficient granularity in access control, enabling an authorized local attacker to escalate privileges. Documents indicate a Privilege Escalation impact and note updates have been released by Microsoft to address the vulne...

CVE-2025-27591

The Below Linux system monitoring tool (versions prior to v0.9.0 ) is vulnerable to a local privilege escalation due to insecure log directory permissions. The service creates a world-writable directory at /var/log/below and a log file /var/log/below/error_root.log with 0666 permissions. This con...

CVE-2021-31618

CVE-2021-31618 affects the Apache httpd mod_http2 component. The issue is a NULL pointer dereference in the HTTP/2 header handling when size limits are violated, leading to denial of service by crashing the httpd worker process. Affected releases include mod_http2 1.15.17 and Apache httpd 2.4.47 ...

CVE-2021-31525

CVE-2021-31525 affects Go’s net/http (standard library). Affected are Go versions prior to 1.15.12 and 1.16.x prior to 1.16.4; processing very large HTTP header values in ReadRequest/ReadResponse can trigger a panic, causing denial of service on server, transport, or client in some configurations...

CVE-2020-10188

CVE-2020-10188 affects the telnetd server of netkit telnet (up to 0.17). The issue is a buffer overflow caused by incorrect bounds checks in handling short writes and urgent data (netclear/nextitem), enabling remote arbitrary code execution by unauthenticated attackers. Connected advisories confi...

CVE-2000-1124

The CVE-2000-1124 entry describes a local privilege-escalation flaw in IBM AIX 4.3.x: a buffer overflow in the piobe command caused by long environmental variables. The affected component is the piobe command on IBM AIX 4.3.x; the underlying issue is a buffer overflow allowing local users to gain...

CVE-2024-12292

GitLab CE/EE (versions 11.0–17.4.6, 17.5–17.5.4, 17.6–17.6.2) is affected by CVE-2024-12292 due to sensitive data passed in GraphQL mutations being retained in GraphQL logs. Root cause: logging of GraphQL mutation payloads potentially exposes confidential information. Impact: information disclosu...