CVE-2026-35433

CVE-2026-35433 involves improper input validation in .NET Framework that enables local Elevation of Privilege. Public details in connected documents indicate the vulnerability affects multiple .NET Framework versions and is being addressed via May 12, 2026 security updates (e.g., KB5087058/KB5087...

CVE-2017-20005

CVE-2017-20005 affects NGINX before 1.13.6. It is a buffer overflow in the autoindex module triggered by modification dates with years exceeding four digits (e.g., 1969 or far-future dates), caused by integer overflow. The CVSSv3.1 vector and score indicate CRITICAL severity. Remediation per sour...

CVE-2025-67896

Exim vulnerability CVE-2025-67896 affects Exim before 4.99.1 with certain non-default rate-limit configurations, enabling a remote heap-based buffer overflow due to unvalidated casting of database records to internal structures. Fedora advisories indicate fixes in exim-4.99.1-1 (FC42/FC43). Impac...

CVE-2023-21273

CVE-2023-21273 describes an out-of-bounds write in the Android SDP_AddAttribute path (sdp_db.cc), caused by an incorrect bounds check. The issue can enable remote code execution with no extra privileges and no user interaction, as stated in multiple public sources. Public documents consistently i...

CVE-2020-13692

CVE-2020-13692 affects the PostgreSQL JDBC Driver (PgJDBC) prior to v42.2.13, where an XML External Entity (XXE) weakness exists in the driver (libpgjava). Exploitation could lead to data exposure and potential impact on availability as summarized in the connected advisories. The Debian/AlmaLinux...

CVE-2018-6952

The CVE-2018-6952 entry refers to a double-free vulnerability in the function another_hunk of pch.c in GNU patch up to version 2.7.6. Exploitation could crash the patch utility or cause denial of service. Connected advisories indicate patched versions are available and advisories recommend updati...

CVE-2024-34934

A SQL injection vulnerability exists in the Campcodes Complete Web-Based School Management System 1.0 . The flaw is located in the /view/emarks_range_grade_update_form.php component, where an attacker can execute arbitrary SQL commands by manipulating the conversation_id parameter. This vulnerabi...

CVE-2022-39197

CVE-2022-39197 affects HelpSystems Cobalt Strike Team Server up through version 4.7, where a cross-site scripting vulnerability in the Teamserver enables an attacker to influence the Beacon configuration by supplying a malformed username in payloads. The public data describe several PoCs and expl...

CVE-2022-22773

The CVE-2022-22773 vulnerability affects TIBCO JasperReports Server family (REST API component) across multiple editions: Server, Community Edition, Developer Edition, AWS Marketplace, ActiveMatrix BPM, and Microsoft Azure. The issue is a difficult-to-exploit Reflected Cross Site Scripting (XSS) ...

CVE-2021-3773

CVE-2021-3773 is a netfilter information-disclosure vulnerability in the Linux kernel that could allow a network-connected attacker to infer the OpenVPN connection endpoint. The issue is described as an information leak through netfilter, enabling reconnaissance for further attacks. Exploitation ...

CVE-2021-41524

CVE-2021-41524 affects Apache HTTP Server (httpd) 2.4.49, where a null pointer dereference during HTTP/2 request processing can allow external sources to cause a DoS. The flaw was introduced with 2.4.49; no public exploit is shown in the documents. Check Point’s November 2021 advisory maps this C...

CVE-2020-28469

CVE-2020-28469 affects the glob-parent package prior to v5.1.2. The flaw arises from the enclosure-regex used to validate strings ending in an enclosure that contains a path separator. The described effect is a Regular Expression Denial of Service (ReDoS) scenario. Affected software/component: gl...

CVE-2019-11045

In PHP, DirectoryIterator vulnerability CVE-2019-11045 affects PHP 7.2.x < 7.2.26, 7.3.x

CVE-2012-2688

CVE-2012-2688 affects PHP: Unspecified vulnerability in the _php_stream_scandir function of the stream implementation, reported for PHP before 5.3.15 and 5.4.x before 5.4.5. The issue is tied to an overflow in scandir, enabling remote attack vectors. Patched in PHP 5.3.15+ and 5.4.5+. No exploita...

CVE-2012-1182

The CVE-2012-1182 issue in Samba stems from the PIDL-based DCE/RPC code generator not validating array lengths during RPC handling, creating an out-of-bounds/heap-overflow condition that enables remote code execution. Affected branches include Samba 3.x before 3.4.16, 3.5.x before 3.5.14, and 3.6...

CVE-2025-53020

Apache HTTP Server versions 2.4.17 through 2.4.63 are vulnerable to a memory exhaustion denial of service (DoS) via the HTTP/2 implementation. The root cause is a late release of memory after its effective lifetime, specifically occurring when processing repeated header names in HTTP/2 requests. ...

CVE-2021-46909

Mode C (normal, concrete details available) CVE-2021-46909 affects the Linux kernel PCI subsystem (ARM) and is resolved by a PCI interrupt/mapping fix in ARM: footbridge. The root cause was that after commit 30fdfb929e82, the kernel started mapping PCI IRQs whenever a PCI driver is probed via pci...

CVE-2023-52440

The CVE-2023-52440 vulnerability concerns ksmbd in the Linux kernel where a slub overflow can occur during key exchange if authblob->SessionKey.Length exceeds CIFS_KEY_SIZE. The root cause is in ksmbd_decode_ntlmssp_auth_blob() and the subsequent copy to the session key array via cifs_arc4_cry...

CVE-2021-31535

CVE-2021-31535 affects libX11 (and related X.Org X components) where LookupCol.c handling of XLookupColor lacks proper length checks. An attacker can send color-name requests longer than protocol/packet limits, causing the server to parse extra X protocol requests and potentially execute arbitrar...

CVE-2014-1252

CVE-2014-1252 corresponds to a double-free in Apple's Office Viewer when processing Microsoft Word documents. Affected product: macOS/iOS Apple Office components (Office Viewer/Word handling). Root cause: memory management error (double free) in Word document handling. Impact: remote code executi...

CVE-2024-5274

CVE-2024-5274 is a type confusion flaw in Google Chrome’s V8 engine (Chromium-based) that could allow a remote attacker to execute arbitrary code inside the Chrome sandbox via a crafted HTML page. The vulnerability affects Chrome versions prior to 125.0.6422.112 (Windows, macOS, Linux) and is cla...

CVE-2023-5954

CVE-2023-5954 affects HashiCorp Vault and Vault Enterprise. Inbound client requests that trigger a policy check can cause unbounded memory growth, leading to denial of service. Fixes are available in Vault 1.15.2, 1.14.6, and 1.13.10.

CVE-2023-25173

CVE-2023-25173 affects containerd. A bug allowed improper setup of supplementary groups inside a container, enabling bypass of primary group restrictions and potential access to sensitive data or code execution when an attacker has container access. The issue is fixed in containerd 1.6.18 and 1.5...

CVE-2022-25857

CVE-2022-25857 affects the Java YAML parser SnakeYAML (org.yaml:snakeyaml) up to and including 1.31. The root cause is a missing nested depth limit for collections, leading to Denial of Service (DoS) under crafted input. Several connected advisories confirm DoS impact and reference historical fix...

CVE-2020-7062

CVE-2020-7062 affects PHP core upload progress handling: when upload progress tracking is enabled but session.upload_progress.cleanup is 0 and a file upload fails, the cleanup code dereferences a non-existent data structure, potentially crashing the process. Affected PHP versions are 7.2.x < 7...

CVE-2017-7418

ProFTPD vulnerable: versions 1.3.5e and 1.3.6 before 1.3.6rc5 improperly enforce AllowChrootSymlinks by checking only the last path component, allowing local attackers to bypass symlink restrictions when reconfiguring a user’s home directory. The issue is fixed in later releases (notably upstream...

CVE-1999-1412

CVE-1999-1412 describes a DoS risk from an interaction between MacOS X 1.0 and Apache HTTP server, where a flood of HTTP GET requests to CGI programs can spawn many processes on affected systems. Connected sources provide concrete details indicating the issue relates to the Apache httpd component...

CVE-2021-46915

The CVE-2021-46915 issue is in the Linux kernel’s netfilter nft_limit code. nft_limit_init attempted to divide a 64-bit value by a 64-bit expectation but used div_u64 (dividing 64-bit by 32-bit), risking a divide error. The fix changes nft_limit_init to use the correct 64-bit division function (d...

CVE-2023-38160

CVE-2023-38160 is described as a Windows TCP/IP Information Disclosure vulnerability. The provided initial entry includes CVSS v3.1 metrics (base score 5.5, Medium) with local attack vector, low attack complexity, and privileges required, and a confidentiality impact of High while integrity/avail...

CVE-2022-36537

CVE-2022-36537 – ZK Framework Information Disclosure . Affected versions of ZK Framework: 9.6.1, 9.6.0.1, 9.5.1.3, 9.0.1.2, 8.6.4.1. An unauthenticated attacker can obtain sensitive data via a crafted POST to the AuUploader component, potentially exposing web-context files and configuration data....

CVE-2020-14040

CVE-2020-14040 affects golang.org/x/text/encoding/unicode and golang.org/x/text/transform in the x/text package for Go, with a vulnerability in encoding/unicode that can cause the UTF-16 decoder to enter an infinite loop, potentially crashing or exhausting memory when a single byte is supplied to...

CVE-2014-2532

OpenSSH CVE-2014-2532 affects sshd prior to 6.6, where AcceptEnv lines with wildcards can be bypassed by using a substring before the wildcard, allowing remote attackers to bypass environment restrictions. Affected component: sshd in OpenSSH. Impact cited: potential info disclosure and environmen...

CVE-2024-4317

The CVE-2024-4317 issue affects PostgreSQL built-ins pg_stats_ext and pg_stats_ext_exprs, where missing authorization checks allow an unprivileged user to read statistics (e.g., most common values) from other users’ CREATE STATISTICS data. Affected versions are within major series 14–16, specific...

CVE-2019-8457

CVE-2019-8457 affects SQLite3 prior to 3.28.0, with versions 3.6.0 through 3.27.2 vulnerable to a heap-out-of-bounds read in the rtreenode() function when processing invalid rtree tables. Reported impact includes high to critical severity (CVSSv3.1: 9.8, Network attack, no user interaction). The ...

CVE-2024-7592

CVE-2024-7592 affects CPython's http.cookies module. The cookie value parser can enter a quadratic-time path when backslashes are used for quoted characters, causing increased CPU usage. Connected advisories confirm CPython-level impact across multiple distributions and reference fixes in CPython...

CVE-2023-26369

Adobe Acrobat/Reader CVE-2023-26369 is an out-of-bounds write vulnerability that can enable arbitrary code execution in the context of the current user. Affected are Acrobat Reader 23.003.20284 and earlier, 20.005.30516 and earlier, and 20.005.30514 and earlier. Exploitation requires user interac...

CVE-2022-0566

Mozilla Thunderbird contains a vulnerability CVE-2022-0566: processing a crafted email message can trigger an out-of-bounds write of one byte. Affected product: Thunderbird (client). Root cause: an out-of-bounds write when handling certain messages. Impact as stated: potential compromise via malf...

CVE-2022-3564

CVE-2022-3564 is a high-severity Linux kernel vulnerability involving a use-after-free in the Bluetooth subsystem, specifically the function l2cap_reassemble_sdu() in net/bluetooth/l2cap_core.c . Connected advisories (CentOS, AlmaLinux, AlmaLinux-RT, Astra Linux, and others) confirm the same weak...

CVE-2022-35252

CVE-2022-35252 affects curl’s handling of cookies containing control codes; when such cookies are echoed back to a server, the server may return 400 responses, effectively enabling a “sister site” to deny service to other siblings. Public advisories confirm this is fixed in curl updates across se...

CVE-2022-23725

PingID Windows Login prior to 2.8 fails to correctly set permissions on Windows Registry entries used to store sensitive API keys. Affected component is the PingID Windows Login application; root cause is improper registry permissions under certain circumstances, potentially exposing API keys loc...

CVE-2026-64638

WordPress Core suffers a pre-auth reflected XSS on wp-login.php that can escalate to RCE via an attacker-controlled page, in a chain dubbed XSS2Shell. The attack requires social engineering and explicit user interaction, and can affect all versions before the emergency 7.0.3 patch (backported to ...

CVE-2024-8179

CVE-2024-8179 affects GitLab CE/EE, specifically versions 17.3 before 17.4.6, 17.5 before 17.5.4, and 17.6 before 17.6.2. The issue is caused by improper output encoding that can lead to cross-site scripting (XSS) if CSP is not enabled. The vulnerability is scoped to the web page generation path ...

CVE-2020-36777

CVE-2020-36777 is a Linux kernel issue where media: dvbdev had a memory leak in dvb_media_device_free(), documented as freeing dvbdev->adapter->conn before NULL-ing it. The connected MiracleLinux advisory (AXSA-2024-8481:17) lists this CVE among others and confirms a fix/vendor advisory. Th...

CVE-2021-46927

CVE-2021-46927 concerns Linux kernel Nitro Enclaves memory mapping. After commit 5b78ed24e8ec, a call to get_user_pages() can trigger an mmap assertion when setting enclave memory regions. The fix switches to get_user_pages_unlocked() for enclave memory region setup, mirroring patterns like mmap_...

CVE-2019-17666

CVE-2019-17666 affects the Linux kernel Realtek rtlwifi driver (rtl_p2p_noa_ie in drivers/net/wireless/realtek/rtlwifi/ps.c). The root cause is a missing upper-bound check that leads to a buffer overflow. Impact stated in sources includes memory corruption and potential remote code execution, wit...

CVE-2025-10585

CVE-2025-10585 is a Type Confusion in Google Chrome’s V8 engine that can enable heap corruption via specially crafted HTML pages. Multiple connected sources confirm the vulnerability affects Chrome/Chromium (V8), with remote, no-user-interaction exploitation described in NVD/Chromium advisories a...

CVE-2018-9461

A race condition exists in the onAttachFragment method of ShareIntentActivity.java within the Android operating system. This vulnerability allows an application to read files from the messages app without requiring additional execution privileges. The flaw can be exploited without user interactio...

CVE-2023-25717

CVE-2023-25717 affects Ruckus Wireless Admin panels (10.4 and earlier) across Ruckus ZoneDirector, SmartZone, and Solo APs where the web services component is enabled. The vulnerability enables unauthenticated remote code execution via an unauthenticated HTTP GET request (example parameterized lo...

CVE-2021-33959

Summary: Multiple sources report a DoS/reflection vulnerability in Plex Media Server affecting version 1.21 and earlier (with OpenVAS citing <1.21.3.4014). The Red Hat and CNNVD entries align on “Plex media server … ddos reflection attack via plex service.” The issue is described as an access-...

CVE-2022-42916

CVE-2022-42916 affects curl’s HSTS check: when hostnames contain IDN characters that map to ASCII (e.g., IDEOGRAPHIC FULL STOP U+3002), curl can bypass HSTS and end up using HTTP instead of HTTPS. This could lead to cleartext transmission if an HTTP URL is provided. The issue is tied to curl vers...