CVE-2023-41053

CVE-2023-41053 affects Redis 7.0+ where SORT_RO can bypass ACL checks, potentially exposing keys not authorized by the ACL. The root cause is improper key identification for SORT_RO, enabling access to non-permitted keys under existing ACLs. Documented impact is an ACL bypass with local access re...

CVE-2022-23121

CVE-2022-23121 is a Netatalk remote code execution vulnerability (root context) caused by improper error handling in AppleDouble parsing in parse_entries. The issue is part of multiple Netatalk flaws (e.g., CVE-2022-23122, CVE-2022-23123, CVE-2022-23124, CVE-2022-23125) affecting 3.1.x releases; ...

CVE-2020-10745

CVE-2020-10745 affects Samba (notably AD DC) and is caused by abuse of compression in replies to NetBIOS over TCP/IP name resolution and DNS packets, leading to excessive CPU usage and a denial of service. The vulnerability impacts Samba versions prior to 4.10.17, 4.11.11, and 4.12.4. Remediation...

CVE-2026-33186

Summary: CVE-2026-33186 affects gRPC-Go prior to 1.79.3, where Authorization bypass could occur due to improper input validation of the HTTP/2 :path header. The server accepted non-canonical paths like Service/Method (missing leading slash), causing canonical “deny” rules in path-based authorizat...

CVE-2025-29926

CVE-2025-29926 affects XWiki Platform via the WikiManager REST API. In affected releases before fixes, any user could create a new wiki, potentially granting the user administrator privileges and enabling further farm-wide attacks. The REST API is not included in XWiki Standard by default and mus...

CVE-2025-26523

CVE-2025-26523 affects the RupeeWeb trading platform. The vulnerability arises from insufficient authorization controls on certain API endpoints that perform add and delete operations, enabling an authenticated remote attacker to modify information belonging to other user accounts. Documented imp...

CVE-2021-20325

CVE-2021-20325 documents a Red Hat-specific security regression for Apache HTTP Server in Red Hat Enterprise Linux 8.5.0. The issue arises from missing fixes for CVE-2021-40438 and CVE-2021-26691 in the 8.5.0 httpd packages, making new 8.5.0 installations susceptible to those CVEs (while upstream...

CVE-2019-11050

CVE-2019-11050 concerns the PHP EXIF extension: when parsing EXIF data via exif_read_data(), PHP versions 7.2.x below 7.2.26, 7.3.x below 7.3.13, and 7.4.0 allow data to read beyond the allocated buffer, leading to potential information disclosure or a crash. Connected advisories confirm the vuln...

CVE-2022-28464

CVE-2022-28464 affects Apifox up to version 2.1.6. The issue is a Cross Site Scripting (XSS) vulnerability that can lead to remote code execution. The connected documents consistently describe XSS as the root cause in Apifox’s web context, implying that attacker-controlled input may be processed ...

CVE-2022-27191

CVE-2022-27191 affects the golang.org/x/crypto/ssh package. Exploitable impact described in connected advisories: an attacker could crash a server under certain AddHostKey conditions. The vulnerability is tied to the x/crypto/ssh code path, with older Go crypto/ssh releases prior to 0.0.0-2022031...

CVE-2022-45179

LIVEBOX Collaboration vDesk (through v031) has a basic XSS vulnerability in the /api/v1/vdeskintegration/todo/createorupdate endpoint via the title parameter, and in /dashboard/reminders. A remote authenticated user can inject arbitrary HTML into the reminder title, potentially corrupting the pag...

CVE-2019-11038

CVE-2019-11038 affects the GD Graphics Library (LibGD) 2.2.5 as used in the PHP gd extension. The flaw arises in gdImageCreateFromXbm(), where input data can cause the function to use an uninitialized variable, potentially leaking contents from stack memory. Affected PHP branches are 7.1.x below ...

CVE-2024-35085

J2EEFAST version 2.7.0 is vulnerable to a SQL injection vulnerability within the findPage function located in ProcessDefinitionMapper.xml . The root cause is a lack of validation for external input SQL statements, which could allow an attacker to execute unauthorized SQL commands and steal sensit...

CVE-2019-5527

CVE-2019-5527 is a use-after-free in the virtual sound device affecting VMware ESXi, Workstation, Fusion, VMRC and Horizon Client. The issue allows a local attacker with low privileges on a guest to potentially execute code on the host, with impact on confidentiality, integrity and availability d...

CVE-2019-10638

The CVE-2019-10638 entry concerns the Linux kernel IT: the IP ID values used for connectionless protocols (UDP/ICMP) in kernels prior to 5.1.7. The underlying issue is weak hashing of IP IDs, enabling an attacker to track a host across networks by correlating IDs and potentially obtain the hashin...

CVE-2023-4623

CVE-2023-4623 describes a use-after-free in the Linux kernel’s net/sched sch_hfsc subsystem that can enable local privilege escalation. The issue occurs when a class uses a link-sharing curve (HFSC_FSC) and has a parent without one; init_vf() may call vttree_insert() on the parent, but update_vf(...

CVE-2022-41903

CVE-2022-41903 describes a heap-write overflow in Git during commit formatting when processing padding operators in pretty.c (format_and_pad_commit), where a size_t is mishandled as an int and added to memcpy() offsets. This can be triggered by commands using --format (e.g., git log) or indirectl...

CVE-2022-29917

CVE-2022-29917 involves memory-safety bugs in Firefox 99 and Firefox ESR 91.8 (Mozilla Fuzzing Team). Some bugs showed memory corruption and, with enough effort, could be exploited to run arbitrary code. affected products include Thunderbird < 91.9, Firefox ESR < 91.9, and Firefox

CVE-2022-29165

CVE-2022-29165 affects Argo CD (GitOps tool for Kubernetes). Vulnerable in versions starting at 1.4.0 and prior to 2.1.15, 2.2.9, and 2.3.4. If anonymous access is enabled, unauthenticated attackers can impersonate any Argo CD user or role (including built‑in admin) by sending a crafted JWT, pote...

CVE-2021-22570

CVE-2021-22570 affects Protocol Buffers (protobuf). A null character in a proto symbol is parsed incorrectly, causing a null pointer dereference via an unchecked access to the proto file name during error message generation. The issue can enable denial of service or memory access instability as d...

CVE-2014-3583

CVE-2014-3583 affects Apache HTTP Server 2.4.10 and earlier, where the handle_headers function in mod_proxy_fcgi.c can be triggered by long response headers to cause a denial of service (buffer over-read and daemon crash). The vulnerability stems from the proxy/Fcgi header handling in mod_proxy_f...

CVE-2026-3099

Affects Libsoup’s server-side Digest authentication in SoupAuthDomainDigest. The vulnerability arises from failure to properly track issued nonces and increment nonce-count (nc), enabling a remote attacker to capture a single valid authentication header and replay it to bypass authentication and ...

CVE-2020-2922

CVE-2020-2922 affects the MySQL Client C API in Oracle MySQL. Affected versions are 5.6.47 and prior, 5.7.29 and prior, and 8.0.18 and prior. It is difficult to exploit and can allow an unauthenticated attacker with network access via multiple protocols to read a subset of MySQL Client data. CVSS...

CVE-2019-5482

CVE-2019-5482 is a heap buffer overflow in curl/libcurl’s TFTP handler (tftp_receive_packet) affecting curl versions up to 7.65.3. Public advisories detail that a small TFTP blocksize can trigger overflow, potentially enabling DoS or arbitrary code execution. Public fixes exist across distributio...

CVE-2016-4979

CVE-2016-4979 affects Apache HTTP Server 2.4.18–2.4.20 when mod_http2 and mod_ssl are enabled; it fails to recognize the SSLVerifyClient require directive for HTTP/2 request authorization, enabling bypass of access restrictions by abusing multiple requests on a single connection and renegotiation...

CVE-2026-0628

Google Chrome versions prior to 143.0.7499.192 are vulnerable to a high-severity issue caused by insufficient policy enforcement in the WebView tag . This flaw allows an attacker who convinces a user to install a malicious extension to bypass privilege restrictions and inject scripts or HTML into...

CVE-2024-47857

SSH Communication Security PrivX versions 18.0 through 36.0 are vulnerable to an improper input validation flaw (CWE-20) involving insufficient validation of public key signatures . This issue specifically occurs when using native SSH connections via a proxy port . An attacker with an existing Pr...

CVE-2020-15049

CVE-2020-15049 affects Squid up to 4.12 and 5.x up to 5.0.3. It enables a Request Smuggling and Poisoning attack against the HTTP cache by sending Content-Length values with a prefix like +, - or uncommon whitespace. Affected component: http/ContentLengthInterpreter.cc. Impact: potential cache po...

CVE-2019-2974

CVE-2019-2974 affects Oracle MySQL Server, component Server: Optimizer. Affected versions are 5.6.45 and prior, 5.7.27 and prior, and 8.0.17 and prior. The flaw is exploitable over the network by a low-privileged attacker and can lead to a hang or frequent, repeatable crash (DoS) of MySQL Server....

CVE-2018-5430

CVE-2018-5430 affects TIBCO JasperReports Server family (including Community Edition, ActiveMatrix BPM, AWS variants) with Spring web flows information disclosure. Exploitable by any authenticated user to read-only access to the web application’s contents, including key configuration files. Affec...

CVE-2025-68388

CVE-2025-68388 affects Elasticsearch Packetbeat (Elastic Beats). The issue is described as excessive allocation of memory and CPU caused by the integration of malicious IPv4 fragments, exploitable by an unauthenticated remote attacker over the network, leading to degraded Packetbeat performance. ...

CVE-2025-21293

CVE-2025-21293 — Active Directory Domain Services Elevation of Privilege. The vulnerability affects Active Directory Domain Services and enables an attacker to obtain elevated privileges via network access, with a CVSS v3.1 base score of 8.8 (High) and impact on confidentiality, integrity, and av...

CVE-2022-23063

CVE-2022-23063 affects Shopizer versions 2.3.0 to 3.0.1. The vulnerability is described as insufficient session expiration: when a password is changed by a user or an administrator, a user who is already logged in continues to have access to the application after the password change. The provided...

CVE-2021-33033

The connected sources confirm CVE-2021-33033 affects the Linux kernel up to 5.11.14, with a use-after-free in cipso_v4_genopt (net/ipv4/cipso_ipv4.c) due to mishandled CIPSO/CALIPSO DOI refcounting, enabling writing an arbitrary value. Exploitation would be local. Remediation is to upgrade to a f...

CVE-2005-3299

The CVE-2005-3299 entry describes a PHP file inclusion (local inclusion) vulnerability in phpMyAdmin 2.6.4 and 2.6.4-pl1, caused by improper validation of the $__redirect parameter in libraries/grab_globals.lib.php, potentially involving the subform array. This allows remote attackers to include ...

CVE-2024-55591

CVE-2024-55591 is a critical authentication bypass affecting FortiOS and FortiProxy. Public PoCs describe remote exploitation via WebSocket/Telnet management interfaces to gain super-admin privileges without valid credentials. Affected versions include FortiOS 7.0.0–7.0.16 and FortiProxy 7.0.0–7....

CVE-2022-45169

CVE-2022-45169 affects LIVEBOX Collaboration vDesk (through v031). It describes an Open Redirect: an authenticated user can trigger a URL redirection via /api/v1/notification/createnotification to send a push notification to another user that can include an invisible clickable link. Reported metr...

CVE-2022-25229

CVE-2022-25229 affects Popcorn Time 0.4.7. A Stored XSS vulnerability originates in the Settings page, in the Movies API Server(s) field, where lack of input validation allows injection of script. The issue is aggravated by nodeIntegration being turned on, which can permit the webpage to access N...

CVE-2022-25366

Summary : CVE-2022-25366 affects Cryptomator up to v1.6.5 and earlier. The root cause is a DYLIB injection path: despite a Hardened Runtime flag, the app holds com.apple.security.cs.disable-library-validation and com.apple.security.cs.allow-dyld-environment-variables entitlements, enabling an att...

CVE-2019-16056

CVE-2019-16056 : Debian LTS advisories fix a vulnerability in the Python email module where addresses containing multiple @ characters can bypass checks on From/To headers, potentially causing an application to accept an invalid address. The issue affects Python 2.7 as documented in DLA-2337-1 an...

CVE-2023-36803

CVE-2023-36803 is a Windows kernel vulnerability linked to the VRegDriver/registry callback path, enabling information disclosure via registry virtualization and differencing hive mechanisms. The connected material describes it as one of several registry callbacks issues in the VRegDriver stack, ...

CVE-2023-28841

CVE-2023-28841 describes a vulnerability in Moby/Docker Swarm encrypted overlay networks where, on affected platforms, encrypted overlay traffic can silently transmit unencrypted data due to how IPSec/VXLAN are enforced via iptables rules (using the xt_u32 module and VNI filtering). This can allo...

CVE-2021-3749

CVE-2021-3749 affects the Axios package used by IBM Cloud Pak System and Node.js environments. It is a Denial of Service vulnerability via a regular-expression DoS in the trim function, exploitable by crafted input to cause high CPU usage. Remediation is to upgrade to fixed software; IBM Cloud Pa...

CVE-2025-15467

OpenSSL versions 3.6, 3.5, 3.4, 3.3, and 3.0 are vulnerable to a stack buffer overflow during the parsing of CMS (Auth)EnvelopedData structures. The root cause is the failure to verify the length of the Initialization Vector (IV) encoded in ASN.1 parameters before copying it into a fixed-size sta...

CVE-2023-36584

CVE-2023-36584 concerns a Windows Mark of the Web (MOTW) security feature bypass vulnerability. The MOTW bypass can cause a limited loss of integrity and availability of security features, as described by CISA KEV entries. The vulnerability is listed among known exploited vulnerabilities catalog ...

CVE-2023-20887

CVE-2023-20887 affects VMware Aria Operations for Networks (formerly vRealize Network Insight). The vulnerability is a command-injection via the Apache Thrift RPC interface that allows an unauthenticated attacker with network access to execute arbitrary commands on the appliance as root, with CVS...

CVE-2022-31262

CVE-2022-31262 affects GOG Galaxy 2.0.46, with local privilege escalation due to insufficient folder permissions in %ProgramData%\GOG.com that allow hijacking the GalaxyCommunication service executable and achieving code execution as SYSTEM. Connected sources corroborate vulnerable versions 2.0.4...

CVE-2023-0217

CVE-2023-0217 is an OpenSSL vulnerability: an invalid pointer dereference on read when validating a malformed DSA public key via EVP_PKEY_public_check(), likely crashing the application and enabling denial of service. Affected context in connected documents confirms OpenSSL-related advisories and...

CVE-2025-68390

Elasticsearch is affected by CVE-2025-68390 (CWE-770): authenticated users with snapshot restore privileges can trigger uncontrolled memory allocation, causing memory exhaustion and DoS via a crafted HTTP request. CVSSv3.1 base score 4.9 (Medium); attack vector NETWORK, privilege requirement HIGH...

CVE-2025-4138

CVE-2025-4138 affects Python’s tarfile module when using TarFile.extractall() or TarFile.extract() with filter='data' or 'tar'. The extraction filter can be bypassed, allowing symlink targets to point outside the destination directory and enabling modification of some file metadata. This issue is...